Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/NGIgkZ4p-LxfIrDMeAVU8-fU3rI.roa
File: NGIgkZ4p-LxfIrDMeAVU8-fU3rI.roa (raw, json)
Hash identifier: nLPXIV9iNl4m91cbJbWXqP67z1VqWhBVBklw3nZQ+HQ=
Subject key identifier: 34:62:20:91:9E:29:F8:BC:5F:22:B0:CC:78:05:54:F3:E7:D4:DE:B2
Certificate issuer: /CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Certificate serial: A8C05C
Authority key identifier: 9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/NGIgkZ4p-LxfIrDMeAVU8-fU3rI.roa
Signing time: Sat 01 Jan 2022 03:56:19 +0000
ROA not before: Sat 01 Jan 2022 03:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.233.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11059292 (0xa8c05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Validity
Not Before: Jan 1 03:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=346220919e29f8bc5f22b0cc780554f3e7d4deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:1f:8e:03:b0:d7:cf:de:4a:81:64:8c:52:
c9:e0:ef:58:e0:f0:6a:53:dc:80:22:f3:68:17:f1:
5f:97:27:18:02:b4:77:c8:34:74:81:13:5c:13:6b:
2f:60:93:f1:aa:c7:6a:e1:04:be:1d:e4:38:e8:a0:
4f:76:e9:d6:e0:95:84:d7:b9:0d:e7:bf:70:a5:1c:
07:d3:00:47:2a:a8:d0:cb:ad:70:f1:12:3c:3f:40:
67:87:75:82:f6:c0:78:6f:b4:fe:97:b8:56:08:d6:
c8:46:8c:b2:0b:4a:da:0e:b4:cb:f5:73:27:7c:85:
93:3f:5a:65:75:7d:c3:7a:3f:84:13:64:7a:08:e5:
30:01:95:25:70:a3:e1:5b:f9:95:f3:7d:2c:90:e3:
c0:0d:82:b0:45:47:c5:9a:fe:df:44:14:65:74:08:
4b:4a:d9:fb:1f:45:3c:1a:6b:43:37:34:47:ad:df:
33:e1:5a:8c:65:75:27:51:b5:58:78:0a:70:a7:dd:
c8:40:f4:99:61:d2:f9:da:39:67:38:f9:1b:23:20:
0b:6c:26:7c:f6:c4:96:25:0f:8d:0e:89:a0:f3:06:
4b:71:5b:38:22:1a:a9:93:fa:79:7d:e1:a2:a6:e1:
09:a8:f2:16:c7:72:7d:66:51:20:ca:57:99:80:6d:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:20:91:9E:29:F8:BC:5F:22:B0:CC:78:05:54:F3:E7:D4:DE:B2
X509v3 Authority Key Identifier:
keyid:9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/NGIgkZ4p-LxfIrDMeAVU8-fU3rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:62:e6:80:81:c8:cd:bb:c2:d9:ef:aa:c8:a2:32:66:fe:12:
f4:69:84:e5:d4:0c:17:cc:65:dd:be:2b:32:53:ae:32:28:68:
f7:02:f7:ae:57:1f:9d:70:93:17:2e:f9:bf:12:d0:fc:c1:4a:
83:7a:97:ef:71:1f:c4:bc:d9:b3:d8:b0:1e:a7:28:04:22:22:
6c:79:3c:ba:21:04:18:6e:36:c7:70:7a:ce:a5:37:70:df:68:
09:2e:9d:42:93:e3:a2:cc:41:ba:56:a6:fa:9f:cc:b0:27:8d:
48:81:3f:e2:f6:57:20:f6:2a:e1:94:2d:eb:f1:14:72:c2:29:
3e:00:ad:12:14:8c:88:9a:26:dd:9d:a2:64:9f:1b:5c:84:e8:
a2:f0:72:2e:64:c8:12:29:84:38:04:de:ec:89:4e:a6:a8:b8:
96:b2:37:ec:6a:16:a8:28:14:49:e3:59:c9:18:5d:8c:e7:f1:
7d:61:59:37:7d:46:a0:f9:af:13:8a:33:57:15:8a:6a:31:ad:
58:50:eb:f0:c7:de:fd:00:9b:8a:ab:18:07:c3:bb:0c:21:b4:
fd:9e:ef:69:b9:62:2d:c3:a0:71:9a:f0:a2:95:d3:5b:49:a2:
c9:dc:ca:20:71:28:79:9d:e5:ae:32:0f:84:41:51:ff:da:4a:
79:11:67:c8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKjAXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YThlYTY1ZjY5NjE2ZWYxOGMwYjY5MWY0OWJjMjVkZDMwODU0MjliMB4XDTIyMDEw
MTAzNTYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzQ2MjIwOTE5ZTI5
ZjhiYzVmMjJiMGNjNzgwNTU0ZjNlN2Q0ZGViMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHYH44DsNfP3kqBZIxSyeDvWODwalPcgCLzaBfxX5cnGAK0
d8g0dIETXBNrL2CT8arHauEEvh3kOOigT3bp1uCVhNe5Dee/cKUcB9MARyqo0Mut
cPESPD9AZ4d1gvbAeG+0/pe4VgjWyEaMsgtK2g60y/VzJ3yFkz9aZXV9w3o/hBNk
egjlMAGVJXCj4Vv5lfN9LJDjwA2CsEVHxZr+30QUZXQIS0rZ+x9FPBprQzc0R63f
M+FajGV1J1G1WHgKcKfdyED0mWHS+do5Zzj5GyMgC2wmfPbEliUPjQ6JoPMGS3Fb
OCIaqZP6eX3hoqbhCajyFsdyfWZRIMpXmYBtVyMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ0YiCRnin4vF8isMx4BVTz59TesjAfBgNVHSMEGDAWgBSajqZfaWFu8YwL
aR9JvCXdMIVCmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21vNm1YMmxoYnZHTUMya2ZTYndsM1RDRlFwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTMvM2FmODFjLWU5M2EtNDBlZS05NjgzLTJkNjExYTIwZDZkOS8x
L05HSWdrWjRwLUx4ZklyRE1lQVZVOC1mVTNySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMv
M2FmODFjLWU5M2EtNDBlZS05NjgzLTJkNjExYTIwZDZkOS8xL21vNm1YMmxoYnZH
TUMya2ZTYndsM1RDRlFwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pPDANBgkqhkiG9w0BAQsFAAOC
AQEArWLmgIHIzbvC2e+qyKIyZv4S9GmE5dQMF8xl3b4rMlOuMiho9wL3rlcfnXCT
Fy75vxLQ/MFKg3qX73EfxLzZs9iwHqcoBCIibHk8uiEEGG42x3B6zqU3cN9oCS6d
QpPjosxBulam+p/MsCeNSIE/4vZXIPYq4ZQt6/EUcsIpPgCtEhSMiJom3Z2iZJ8b
XIToovByLmTIEimEOATe7IlOpqi4lrI37GoWqCgUSeNZyRhdjOfxfWFZN31GoPmv
E4ozVxWKajGtWFDr8Mfe/QCbiqsYB8O7DCG0/Z7vabliLcOgcZrwopXTW0miydzK
IHEoeZ3lrjIPhEFR/9pKeRFnyA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org