Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-tHSaxAccL20N2471VnLggCNC4I.roa
File: 1-tHSaxAccL20N2471VnLggCNC4I.roa (raw, json)
Hash identifier: UbMUB2LglqkJOz2dIxvt3XvbsAHZq6rVhyUv91oiAvA=
Subject key identifier: FA:D1:D2:6B:10:1C:70:BD:B4:37:6E:3B:D5:59:CB:82:00:8D:0B:82
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01848533EF22A115432E25417A8B58477216
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-tHSaxAccL20N2471VnLggCNC4I.roa
Signing time: Thu 17 Nov 2022 10:48:04 +0000
ROA not before: Thu 17 Nov 2022 10:48:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210388
IP address blocks: 62.76.235.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:33:ef:22:a1:15:43:2e:25:41:7a:8b:58:47:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 17 10:48:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fad1d26b101c70bdb4376e3bd559cb82008d0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:a6:e6:0e:a2:37:dc:1e:ba:62:d3:a5:0c:
a1:55:12:d7:31:da:31:50:73:9d:82:52:00:df:ce:
28:8a:77:8c:d9:ec:49:2b:e1:24:38:1d:37:5e:40:
42:69:3a:4e:49:38:a2:4c:9b:be:e2:0f:c4:35:42:
b5:76:37:c7:9c:86:ca:0a:bc:6d:40:f0:83:b0:00:
e4:d6:ee:a0:23:01:61:e7:c9:1a:6e:e2:63:d9:78:
00:bc:68:e6:aa:48:30:5a:42:fd:82:59:ce:5c:39:
47:c9:c8:59:25:f2:62:62:9f:20:4d:b2:00:e1:7a:
1f:7d:bd:4b:8e:b5:23:fc:62:d4:d2:7e:df:ae:12:
a5:e0:bd:df:6f:b5:81:82:8f:65:ff:a6:2c:10:d7:
d2:15:f4:57:11:3f:21:dc:82:e8:77:fc:32:af:3a:
6c:49:aa:7a:16:3a:30:f3:92:ee:33:08:4d:75:eb:
58:ff:14:53:d6:30:3e:f1:d5:73:b6:a3:25:47:61:
a2:9b:d4:78:57:e2:b5:0e:6b:46:d1:6a:2f:44:75:
88:49:c6:a8:7f:0a:d1:4a:a8:0b:c9:8d:01:7c:47:
1e:95:e6:b3:7d:78:bf:dc:ea:92:d7:4d:ec:1d:90:
dd:6d:6e:d5:9f:de:fb:fc:ea:0d:b8:01:68:2b:7e:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:D2:6B:10:1C:70:BD:B4:37:6E:3B:D5:59:CB:82:00:8D:0B:82
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-tHSaxAccL20N2471VnLggCNC4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
194.87.160.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f7:cb:0f:f6:b0:89:8b:3b:9a:c9:19:7b:68:e1:fb:8c:c4:
c9:d5:f9:9a:ae:b4:d2:75:15:97:7e:ce:7e:7f:27:ab:fd:4d:
aa:05:25:cf:1f:9f:48:52:45:45:7e:56:00:91:cd:74:3a:28:
b9:6f:ab:86:5f:9d:fe:04:78:51:67:62:54:dc:8e:87:d2:f2:
a1:22:92:71:cf:60:88:81:e9:11:25:6f:11:58:e0:ec:e3:6c:
e8:3b:bc:ff:98:c2:e1:00:9f:18:98:df:0d:d4:c3:69:07:3f:
e6:ff:d4:32:5a:1d:6b:be:9a:7c:ac:40:5d:ad:51:a1:09:77:
b1:bd:b8:47:65:e8:7f:65:3d:22:ca:0b:20:1f:0c:d5:ce:f2:
02:4a:3c:62:c7:1e:57:60:e3:0a:79:05:0a:cd:b0:48:de:5a:
5d:65:49:cb:0f:23:cc:4e:97:79:07:df:26:6f:e6:d2:db:d9:
9d:f7:f3:ad:71:7c:95:c0:1f:4a:ba:1b:aa:61:f2:76:0c:f8:
4b:d0:f5:64:60:22:05:7a:89:15:6b:4f:9e:5c:53:30:ef:50:
19:d4:17:e7:b9:50:61:05:da:86:28:19:44:3d:8a:7a:a7:27:
ea:19:59:f3:51:18:69:d1:23:d2:15:53:cf:5d:43:5a:af:f1:
3a:4d:8c:33
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYSFM+8ioRVDLiVBeotYR3IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTE3MTA0ODA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWQxZDI2YjEwMWM3MGJkYjQzNzZlM2JkNTU5Y2I4MjAwOGQwYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkWm5g6iN9weumLTpQyhVRLXMdox
UHOdglIA384oineM2exJK+EkOB03XkBCaTpOSTiiTJu+4g/ENUK1djfHnIbKCrxt
QPCDsADk1u6gIwFh58kabuJj2XgAvGjmqkgwWkL9glnOXDlHychZJfJiYp8gTbIA
4Xoffb1LjrUj/GLU0n7frhKl4L3fb7WBgo9l/6YsENfSFfRXET8h3ILod/wyrzps
Sap6Fjow85LuMwhNdetY/xRT1jA+8dVztqMlR2Gim9R4V+K1DmtG0WovRHWIScao
fwrRSqgLyY0BfEceleazfXi/3OqS103sHZDdbW7Vn977/OoNuAFoK36kNQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPrR0msQHHC9tDduO9VZy4IAjQuCMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS10SFNheEFjY0wyME4yNDcxVm5MZ2dDTkM0SS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAD5M6wME
AMJXoDANBgkqhkiG9w0BAQsFAAOCAQEAKPfLD/awiYs7mskZe2jh+4zEydX5mq60
0nUVl37Ofn8nq/1NqgUlzx+fSFJFRX5WAJHNdDoouW+rhl+d/gR4UWdiVNyOh9Ly
oSKScc9giIHpESVvEVjg7ONs6Du8/5jC4QCfGJjfDdTDaQc/5v/UMloda76afKxA
Xa1RoQl3sb24R2Xof2U9IsoLIB8M1c7yAko8YsceV2DjCnkFCs2wSN5aXWVJyw8j
zE6XeQffJm/m0tvZnffzrXF8lcAfSrobqmHydgz4S9D1ZGAiBXqJFWtPnlxTMO9Q
GdQX57lQYQXahigZRD2Keqcn6hlZ81EYadEj0hVTz11DWq/xOk2MMw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org