Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6Dp2FED4KlstBzb2h4EJkILmhxU.roa
File: 6Dp2FED4KlstBzb2h4EJkILmhxU.roa (raw, json)
Hash identifier: Wy4yd36fGnXqZG9+wCBIkrmbx0VXUzNy/nIsZkmWG0I=
Subject key identifier: E8:3A:76:14:40:F8:2A:5B:2D:07:36:F6:87:81:09:90:82:E6:87:15
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38A13DF3
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6Dp2FED4KlstBzb2h4EJkILmhxU.roa
Signing time: Tue 17 May 2022 05:23:30 +0000
ROA not before: Tue 17 May 2022 05:23:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42086
IP address blocks: 62.204.141.0/24 maxlen: 24
212.91.190.0/24 maxlen: 24
213.169.53.0/24 maxlen: 24
213.169.52.0/24 maxlen: 24
62.204.156.0/23 maxlen: 23
82.103.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950091251 (0x38a13df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:23:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83a761440f82a5b2d0736f68781099082e68715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:73:43:39:20:25:fe:9d:a9:b3:96:54:12:
83:bc:7c:4b:0d:ab:f9:c4:99:ab:ff:25:81:2e:70:
29:70:0e:07:59:1f:66:22:17:2e:6b:80:ef:ac:88:
3c:a6:d1:69:81:54:82:ea:49:d1:f9:94:86:ae:ce:
ab:16:52:f1:51:a4:7e:76:ed:48:c3:cc:ad:e7:99:
fc:ad:e2:73:80:c8:57:e1:f2:bf:99:1f:bb:52:2b:
f4:c6:0d:11:48:7f:5f:09:d6:de:14:92:54:45:a5:
91:f4:ed:16:de:3f:1c:46:75:e3:0a:b4:29:c2:11:
c7:ca:a6:01:47:dd:2f:24:c5:e4:e5:2a:5f:dd:e1:
08:21:15:66:b2:f5:0f:15:25:95:f7:7a:90:b3:a6:
57:4a:1c:46:f9:c4:35:45:fe:fe:ee:89:0b:4b:a6:
32:41:fb:fd:ce:30:4e:1b:db:30:27:28:e1:bf:17:
37:72:d2:c0:2e:db:24:ab:9f:3e:d1:31:bf:80:65:
48:ee:78:1b:b5:c7:ae:68:79:aa:50:10:c9:d1:99:
5a:a5:d3:6a:ee:c6:64:2e:e1:c6:24:33:a6:b7:aa:
50:a2:22:2d:33:1e:08:bb:38:15:10:50:67:89:24:
d8:24:48:a9:42:4a:2b:0b:d8:e8:36:e4:b9:bf:d5:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:76:14:40:F8:2A:5B:2D:07:36:F6:87:81:09:90:82:E6:87:15
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6Dp2FED4KlstBzb2h4EJkILmhxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.141.0/24
62.204.156.0/23
82.103.87.0/24
212.91.190.0/24
213.169.52.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:2d:ee:79:6b:38:b2:a6:a2:b3:57:bb:5a:27:b5:21:ce:08:
65:11:61:ad:c9:b0:7b:85:d4:f6:8f:00:00:34:78:5c:ab:34:
d4:ea:41:4c:db:fd:8e:70:d1:37:df:51:c2:f1:3d:f5:4e:38:
4b:cf:eb:bd:31:eb:82:d6:75:93:51:4c:12:37:fc:d7:83:d9:
b9:97:94:ef:e6:22:da:04:4b:2d:4a:e9:18:2c:53:d4:82:ed:
18:20:90:d1:b3:f6:d3:43:d7:8a:3e:a0:5e:50:56:2f:ac:8b:
ec:26:27:a3:51:f5:1b:41:ba:c7:9d:f6:6d:d5:cb:cb:14:e5:
f7:df:9a:9a:3b:e6:79:75:b5:97:e6:1a:f1:e1:a5:e4:83:83:
af:73:3e:6f:91:b8:5d:e0:7a:91:b8:83:a0:8b:aa:45:9a:f1:
ad:2c:19:55:ac:38:c8:78:22:ba:f7:1d:49:70:55:26:76:48:
54:a9:14:c4:b5:1a:4d:b3:db:ea:0a:70:07:e2:99:ae:da:e6:
fb:b2:cf:10:32:15:6f:76:db:f1:00:b6:2b:57:27:53:cd:41:
89:b5:6a:96:bf:db:01:ce:42:5d:66:1b:81:0e:0e:d8:3a:6d:
b5:e6:cd:99:34:1a:83:fe:18:ac:70:a1:e3:2b:2c:da:45:b3:
27:d4:d0:b4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEOKE98zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MjMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTgzYTc2MTQ0MGY4
MmE1YjJkMDczNmY2ODc4MTA5OTA4MmU2ODcxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtMc0M5ICX+namzllQSg7x8Sw2r+cSZq/8lgS5wKXAOB1kf
ZiIXLmuA76yIPKbRaYFUgupJ0fmUhq7OqxZS8VGkfnbtSMPMreeZ/K3ic4DIV+Hy
v5kfu1Ir9MYNEUh/XwnW3hSSVEWlkfTtFt4/HEZ14wq0KcIRx8qmAUfdLyTF5OUq
X93hCCEVZrL1DxUllfd6kLOmV0ocRvnENUX+/u6JC0umMkH7/c4wThvbMCco4b8X
N3LSwC7bJKufPtExv4BlSO54G7XHrmh5qlAQydGZWqXTau7GZC7hxiQzpreqUKIi
LTMeCLs4FRBQZ4kk2CRIqUJKKwvY6Dbkub/VvBUCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBToOnYUQPgqWy0HNvaHgQmQguaHFTAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
LzZEcDJGRUQ0S2xzdEJ6YjJoNEVKa0lMbWh4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAD7MjQMEAT7MnAMEAFJnVwMEANRb
vgMEAdWpNDANBgkqhkiG9w0BAQsFAAOCAQEAjS3ueWs4sqais1e7Wie1Ic4IZRFh
rcmwe4XU9o8AADR4XKs01OpBTNv9jnDRN99RwvE99U44S8/rvTHrgtZ1k1FMEjf8
14PZuZeU7+Yi2gRLLUrpGCxT1ILtGCCQ0bP200PXij6gXlBWL6yL7CYno1H1G0G6
x532bdXLyxTl99+amjvmeXW1l+Ya8eGl5IODr3M+b5G4XeB6kbiDoIuqRZrxrSwZ
Vaw4yHgiuvcdSXBVJnZIVKkUxLUaTbPb6gpwB+KZrtrm+7LPEDIVb3bb8QC2K1cn
U81BibVqlr/bAc5CXWYbgQ4O2DpttebNmTQag/4YrHCh4yss2kWzJ9TQtA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-ams.rpki-client.org