Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ysfm5Kwk8BMTtHLd6agJ3JtXk6A.roa
File: Ysfm5Kwk8BMTtHLd6agJ3JtXk6A.roa (raw, json)
Hash identifier: otiVOAhGd++QJuwnOHaSRmFcKsdshU5eRML7S8CkCXw=
Subject key identifier: 62:C7:E6:E4:AC:24:F0:13:13:B4:72:DD:E9:A8:09:DC:9B:57:93:A0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183F4FB944E84376798A1F54BF6F4CA495C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ysfm5Kwk8BMTtHLd6agJ3JtXk6A.roa
Signing time: Thu 20 Oct 2022 10:41:11 +0000
ROA not before: Thu 20 Oct 2022 10:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:fb:94:4e:84:37:67:98:a1:f5:4b:f6:f4:ca:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 20 10:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c7e6e4ac24f01313b472dde9a809dc9b5793a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:d2:7a:f6:6c:f8:00:a0:5e:2d:11:9d:92:
b7:74:d8:42:e5:2d:e8:4f:0b:1d:64:bc:f6:cb:94:
1d:a4:75:9e:30:c6:bb:e2:2f:eb:ee:af:50:89:69:
fb:db:75:d6:22:5c:e7:28:30:84:0e:ad:17:ff:4a:
8f:6f:7c:f0:3a:61:53:e5:7a:9a:c0:93:c8:8f:40:
4f:d7:99:c9:7d:65:68:fd:17:be:15:0d:3b:68:c2:
11:85:c5:02:02:87:2e:fe:27:06:98:09:d6:36:eb:
54:9c:e4:b8:d3:85:ef:fd:34:53:b7:96:a9:2f:d1:
9b:27:07:04:10:97:e5:69:e0:5e:fd:43:f7:d6:9c:
5e:b2:81:ef:56:74:2b:14:76:cc:b2:36:9e:7d:53:
17:8e:87:50:74:05:6c:83:0c:25:a9:28:a0:5a:af:
8f:f7:ba:62:81:e9:b8:c6:aa:29:40:c0:51:92:d2:
b2:dd:cf:62:f5:63:28:db:22:6d:6a:36:ed:0a:9a:
67:38:04:e2:c8:56:c6:97:dd:9f:f4:c9:25:14:0f:
06:56:f2:3f:7b:91:60:c5:b9:15:2f:42:4a:8b:cb:
b2:9c:5d:70:d1:74:db:92:b1:09:fe:4f:fe:43:df:
ee:15:61:a2:ba:db:db:bf:10:f7:56:5b:4e:e4:e0:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:E6:E4:AC:24:F0:13:13:B4:72:DD:E9:A8:09:DC:9B:57:93:A0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ysfm5Kwk8BMTtHLd6agJ3JtXk6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b7:95:9b:b4:75:dc:55:8d:00:cc:7c:d2:59:55:a0:39:e9:
e3:85:e4:2a:1e:ce:b9:6a:7b:2a:9d:b5:e9:dd:ed:df:6f:26:
6a:ff:6f:d0:c2:c9:92:a1:c5:e7:8c:0f:32:05:e3:68:b3:fe:
57:30:2b:b0:ea:4b:db:0e:1a:5e:c6:75:45:99:b2:ce:09:fa:
70:41:42:7f:1a:c0:a2:32:39:57:35:8d:52:98:32:a1:82:26:
e2:4b:67:99:27:3a:55:c9:86:e9:7e:44:11:8a:41:a8:6b:0a:
88:d2:e7:57:50:8b:fd:dc:0b:6a:bb:39:89:89:38:cc:9e:3e:
e5:c9:4f:ac:38:17:89:5d:56:41:73:39:81:01:a3:d1:22:85:
67:e9:52:f8:3c:e7:f7:29:2e:9c:87:3e:e1:5f:b9:a1:c0:27:
6d:0d:a3:03:4d:cb:a4:28:b4:ae:80:8f:d3:db:69:77:cd:2f:
bf:d3:aa:8b:bb:34:51:bd:72:d3:1a:85:52:29:5c:cc:43:4b:
ef:36:98:32:7b:e4:2e:d5:de:64:10:83:d4:f3:2e:f5:71:0a:
eb:17:50:08:69:2f:92:9b:71:6c:28:86:f0:23:0b:9b:97:61:
69:75:1e:28:0a:75:69:2d:c0:4b:03:4d:96:23:cb:d3:29:8d:
cf:23:01:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYP0+5ROhDdnmKH1S/b0yklcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDIwMTA0MTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmM3ZTZlNGFjMjRmMDEzMTNiNDcyZGRlOWE4MDlkYzliNTc5M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG/SevZs+ACgXi0RnZK3dNhC5S3o
TwsdZLz2y5QdpHWeMMa74i/r7q9QiWn723XWIlznKDCEDq0X/0qPb3zwOmFT5Xqa
wJPIj0BP15nJfWVo/Re+FQ07aMIRhcUCAocu/icGmAnWNutUnOS404Xv/TRTt5ap
L9GbJwcEEJflaeBe/UP31pxesoHvVnQrFHbMsjaefVMXjodQdAVsgwwlqSigWq+P
97pigem4xqopQMBRktKy3c9i9WMo2yJtajbtCppnOATiyFbGl92f9MklFA8GVvI/
e5FgxbkVL0JKi8uynF1w0XTbkrEJ/k/+Q9/uFWGiutvbvxD3VltO5OD+uwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGLH5uSsJPATE7Ry3emoCdybV5OgMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWXNmbTVLd2s4Qk1UdEhMZDZhZ0ozSnRYazZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkzoAwQA
PkzrAwQA1MDTMA0GCSqGSIb3DQEBCwUAA4IBAQB2t5WbtHXcVY0AzHzSWVWgOenj
heQqHs65ansqnbXp3e3fbyZq/2/QwsmSocXnjA8yBeNos/5XMCuw6kvbDhpexnVF
mbLOCfpwQUJ/GsCiMjlXNY1SmDKhgibiS2eZJzpVyYbpfkQRikGoawqI0udXUIv9
3AtquzmJiTjMnj7lyU+sOBeJXVZBczmBAaPRIoVn6VL4POf3KS6chz7hX7mhwCdt
DaMDTcukKLSugI/T22l3zS+/06qLuzRRvXLTGoVSKVzMQ0vvNpgye+Qu1d5kEIPU
8y71cQrrF1AIaS+Sm3FsKIbwIwubl2FpdR4oCnVpLcBLA02WI8vTKY3PIwG5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org