Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f-ZMta8BrnnlSdLKLKvbqKee9iM.roa
File: f-ZMta8BrnnlSdLKLKvbqKee9iM.roa (raw, json)
Hash identifier: /JUjCNrkLzphJz3T/CGq7OLCW3tmheSujVk/em6p39s=
Subject key identifier: 7F:E6:4C:B5:AF:01:AE:79:E5:49:D2:CA:2C:AB:DB:A8:A7:9E:F6:23
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01843D45B99A980A29FB235AB48A4CDC6F9F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f-ZMta8BrnnlSdLKLKvbqKee9iM.roa
Signing time: Thu 03 Nov 2022 11:34:50 +0000
ROA not before: Thu 03 Nov 2022 11:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 62.76.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:45:b9:9a:98:0a:29:fb:23:5a:b4:8a:4c:dc:6f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 11:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe64cb5af01ae79e549d2ca2cabdba8a79ef623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:ff:76:d2:7b:26:cf:cc:67:1e:cf:c9:86:
0b:2a:0d:09:e9:bf:27:06:c7:d8:bf:d9:f1:f4:bd:
ce:b6:7a:18:9e:98:23:9a:bd:26:1b:75:b6:74:95:
bc:20:76:37:bf:58:53:b0:f2:6c:75:e7:b5:18:86:
24:80:ba:fb:e3:83:aa:b3:bf:44:66:90:92:89:c1:
3b:58:1f:f9:d8:f1:b3:9a:b6:e9:90:4e:75:b4:b5:
e9:02:e0:fb:da:cc:39:7a:50:34:4d:cf:47:96:40:
66:80:95:fc:37:a8:09:e1:7b:b3:be:3e:68:2e:69:
ab:2f:6e:31:8a:9a:2d:e1:bd:15:88:f3:6c:9f:ef:
d7:a0:d3:7e:2a:8b:79:01:72:aa:cb:86:f3:0a:54:
72:9b:e7:78:33:7e:2e:4c:95:db:80:2e:fc:ac:ba:
78:f9:75:b1:55:7e:53:79:75:24:bb:5b:6c:fa:cd:
93:d6:8a:06:21:a5:c0:96:9a:b0:92:92:44:27:40:
16:60:63:56:e8:7f:b5:15:19:8b:6b:7b:0c:20:64:
23:02:89:66:ee:2a:b2:3c:65:07:6f:f8:cf:43:c4:
1c:89:80:48:3f:f7:be:9d:f3:e5:2e:f0:be:cd:cc:
e1:11:62:4d:46:8e:bf:be:a5:e9:e2:59:29:50:1f:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:4C:B5:AF:01:AE:79:E5:49:D2:CA:2C:AB:DB:A8:A7:9E:F6:23
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f-ZMta8BrnnlSdLKLKvbqKee9iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
Signature Algorithm: sha256WithRSAEncryption
70:be:c2:8c:c5:69:50:7d:69:2b:0e:f7:ab:a1:3f:b7:a5:41:
92:e0:c0:39:3c:9c:c4:81:65:40:3f:42:12:00:82:de:03:12:
69:4c:cb:80:e5:13:78:5a:19:e4:67:30:71:b0:19:3d:47:89:
b1:b2:51:0a:a0:d4:0c:76:6d:7f:4c:df:60:a1:60:e4:64:22:
02:f0:6a:21:10:ab:a8:ac:57:09:33:18:57:60:44:79:04:28:
f9:24:5f:61:85:ae:a9:e5:a6:50:69:87:4f:0a:34:48:94:59:
43:c0:94:39:69:f1:1b:1e:2b:35:de:ff:9e:ab:a5:23:68:9e:
71:e1:07:25:fb:b9:0a:b3:d3:ad:eb:d0:77:9f:a7:ef:56:ed:
7b:7e:ee:1b:a2:74:ed:9e:47:9b:05:c3:72:4b:1e:66:c4:b7:
e0:82:87:8b:e2:ab:3f:a3:a5:e5:ff:68:4a:b6:36:3a:ba:23:
31:8c:b9:25:ec:eb:28:31:ca:1f:0b:2e:d7:ff:72:e8:2f:24:
21:f7:3e:72:ee:9e:9b:26:3e:6e:09:a5:ba:71:d6:a8:12:4a:
35:49:62:8d:90:f0:23:5c:fe:34:56:09:b8:23:cf:84:e0:04:
d5:bb:8d:f5:94:c1:55:22:6a:42:c4:60:74:56:dc:74:95:5a:
5d:81:40:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ9RbmamAop+yNatIpM3G+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTAzMTEzNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU2NGNiNWFmMDFhZTc5ZTU0OWQyY2EyY2FiZGJhOGE3OWVmNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk3/dtJ7Js/MZx7PyYYLKg0J6b8n
BsfYv9nx9L3OtnoYnpgjmr0mG3W2dJW8IHY3v1hTsPJsdee1GIYkgLr744Oqs79E
ZpCSicE7WB/52PGzmrbpkE51tLXpAuD72sw5elA0Tc9HlkBmgJX8N6gJ4Xuzvj5o
LmmrL24xipot4b0ViPNsn+/XoNN+Kot5AXKqy4bzClRym+d4M34uTJXbgC78rLp4
+XWxVX5TeXUku1ts+s2T1ooGIaXAlpqwkpJEJ0AWYGNW6H+1FRmLa3sMIGQjAolm
7iqyPGUHb/jPQ8QciYBIP/e+nfPlLvC+zczhEWJNRo6/vqXp4lkpUB8VNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/mTLWvAa555UnSyiyr26innvYjMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZi1aTXRhOEJybm5sU2RMS0xLdmJxS2VlOWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzlMA0G
CSqGSIb3DQEBCwUAA4IBAQBwvsKMxWlQfWkrDveroT+3pUGS4MA5PJzEgWVAP0IS
AILeAxJpTMuA5RN4WhnkZzBxsBk9R4mxslEKoNQMdm1/TN9goWDkZCIC8GohEKuo
rFcJMxhXYER5BCj5JF9hha6p5aZQaYdPCjRIlFlDwJQ5afEbHis13v+eq6UjaJ5x
4Qcl+7kKs9Ot69B3n6fvVu17fu4bonTtnkebBcNySx5mxLfggoeL4qs/o6Xl/2hK
tjY6uiMxjLkl7OsoMcofCy7X/3LoLyQh9z5y7p6bJj5uCaW6cdaoEko1SWKNkPAj
XP40Vgm4I8+E4ATVu431lMFVImpCxGB0Vtx0lVpdgUB4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org