Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/Etpg7oJk2QLqXR2ydVoPU_EOoRg.roa
File: Etpg7oJk2QLqXR2ydVoPU_EOoRg.roa (raw, json)
Hash identifier: Lu3yVJqOEhNq/PBRX+7s0XH15UQYoQxLXmaIhQQVu+k=
Subject key identifier: 12:DA:60:EE:82:64:D9:02:EA:5D:1D:B2:75:5A:0F:53:F1:0E:A1:18
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 01D603
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/Etpg7oJk2QLqXR2ydVoPU_EOoRg.roa
Signing time: Tue 25 Jan 2022 16:37:55 +0000
ROA not before: Tue 25 Jan 2022 16:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 62.68.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120323 (0x1d603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Jan 25 16:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12da60ee8264d902ea5d1db2755a0f53f10ea118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:70:98:60:27:a5:01:a5:dd:d9:f1:55:d4:
7f:3a:22:47:cd:fb:84:2f:16:bc:a8:d4:cf:78:5b:
5b:6d:60:ef:96:9a:1d:f0:d2:62:e8:1d:68:02:4e:
ee:3b:7d:87:26:b4:48:5d:97:d4:45:2c:d7:5a:35:
e6:eb:ec:ae:fb:56:dd:28:92:26:99:40:80:80:9b:
0c:94:d8:bc:1e:a7:26:d2:99:21:dc:8c:0e:06:c5:
70:c2:c0:6c:27:94:89:ef:a3:a4:58:b5:9f:d2:87:
fb:bf:ea:0e:b3:e6:6e:9b:9d:00:f8:c7:1f:8b:7a:
58:b2:f0:27:91:8a:fa:e7:5a:9c:dc:4c:e5:fc:a0:
24:d2:34:26:42:d6:b5:34:43:ef:29:78:78:8d:18:
93:0d:1f:12:cf:a3:b5:af:dd:07:11:07:de:2f:20:
d6:cc:23:de:39:b2:d2:9f:b1:e1:a2:ba:cd:c9:31:
5a:f4:7c:fd:8a:dc:61:00:96:f5:40:39:c0:df:e7:
e0:c4:0f:d2:de:69:7f:c3:31:c1:35:9f:5e:8c:ba:
3d:e2:d6:b3:cc:2d:b0:2a:a3:20:70:8b:7d:06:5a:
59:6a:b7:f1:1b:5a:d5:94:50:e0:32:e5:c9:42:d8:
dd:4a:71:84:38:0e:a4:cf:b6:49:0e:b0:17:07:03:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DA:60:EE:82:64:D9:02:EA:5D:1D:B2:75:5A:0F:53:F1:0E:A1:18
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/Etpg7oJk2QLqXR2ydVoPU_EOoRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.88.0/24
Signature Algorithm: sha256WithRSAEncryption
29:88:7e:ac:66:5b:e1:85:58:cd:07:b3:fd:41:5d:eb:51:08:
4e:5f:ad:1b:f8:e0:42:cf:df:f6:45:38:54:a5:4f:f8:9c:87:
04:1e:79:4b:9c:9d:1d:71:52:ab:71:2b:31:27:8a:f5:0c:c0:
e9:d9:4a:2d:d9:22:36:64:25:b7:ad:f0:fb:f5:59:c1:18:a6:
3d:2c:2a:fe:ea:2a:e8:2c:90:ee:25:e5:b7:e9:f2:f1:46:01:
eb:25:19:ab:12:7b:a0:df:05:51:bb:4c:e1:d4:1a:30:76:08:
80:37:07:f1:22:b3:70:c2:4e:99:03:2b:77:9b:18:ec:96:b9:
9c:9d:21:b9:e5:98:32:d2:39:af:08:74:6c:bb:37:e5:8d:0b:
a0:8f:1b:55:ce:c0:9d:db:f5:cb:c9:3a:18:fd:9c:6b:a5:fb:
0d:ad:28:d0:6a:00:57:ad:c8:8c:c2:40:cc:e9:f9:0a:f3:01:
f8:f3:88:31:7b:0d:88:6b:2d:40:03:11:9c:26:f5:4e:37:6d:
1b:cf:12:06:ad:b7:18:74:ec:a9:32:3b:02:c0:46:5d:4e:44:
3f:cf:ea:d4:a8:1f:ec:22:f9:9e:90:f7:07:ca:ae:b1:b2:e5:
01:d0:f8:c7:62:11:44:81:73:10:20:a4:93:9f:ed:d5:93:b6:
b7:4d:eb:ab
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAdYDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEx
ZjJlMzViM2M1NTliNmQ4NDM2NjdjYWQ1ZGFjNjc0ZTAxYjk2YzMwHhcNMjIwMTI1
MTYzNzU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMmRhNjBlZTgyNjRk
OTAyZWE1ZDFkYjI3NTVhMGY1M2YxMGVhMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApZ9wmGAnpQGl3dnxVdR/OiJHzfuELxa8qNTPeFtbbWDvlpod
8NJi6B1oAk7uO32HJrRIXZfURSzXWjXm6+yu+1bdKJImmUCAgJsMlNi8Hqcm0pkh
3IwOBsVwwsBsJ5SJ76OkWLWf0of7v+oOs+Zum50A+Mcfi3pYsvAnkYr651qc3Ezl
/KAk0jQmQta1NEPvKXh4jRiTDR8Sz6O1r90HEQfeLyDWzCPeObLSn7HhorrNyTFa
9Hz9itxhAJb1QDnA3+fgxA/S3ml/wzHBNZ9ejLo94tazzC2wKqMgcIt9BlpZarfx
G1rVlFDgMuXJQtjdSnGEOA6kz7ZJDrAXBwNxXQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFBLaYO6CZNkC6l0dsnVaD1PxDqEYMB8GA1UdIwQYMBaAFBHy41s8VZtthDZn
ytXaxnTgG5bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQwLzEv
RXRwZzdvSmsyUUxxWFIyeWRWb1BVX0VPb1JnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85
OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQwLzEvRWZMald6eFZtMjJF
Tm1mSzFkckdkT0FibHNNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRYMA0GCSqGSIb3DQEBCwUAA4IB
AQApiH6sZlvhhVjNB7P9QV3rUQhOX60b+OBCz9/2RThUpU/4nIcEHnlLnJ0dcVKr
cSsxJ4r1DMDp2Uot2SI2ZCW3rfD79VnBGKY9LCr+6iroLJDuJeW36fLxRgHrJRmr
Enug3wVRu0zh1BowdgiANwfxIrNwwk6ZAyt3mxjslrmcnSG55Zgy0jmvCHRsuzfl
jQugjxtVzsCd2/XLyToY/ZxrpfsNrSjQagBXrciMwkDM6fkK8wH484gxew2Iay1A
AxGcJvVON20bzxIGrbcYdOypMjsCwEZdTkQ/z+rUqB/sIvmekPcHyq6xsuUB0PjH
YhFEgXMQIKSTn+3Vk7a3Teur
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:57 2024 by rpki-client on console-ams.rpki-client.org