Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/B3iEoaG6Qf9PPH0veNdY7dShELc.roa
File: B3iEoaG6Qf9PPH0veNdY7dShELc.roa (raw, json)
Hash identifier: OwO+U4ciW/SXGXjEa+m/OZelGoF+ZJRYDrG3O/O7Yw4=
Subject key identifier: 07:78:84:A1:A1:BA:41:FF:4F:3C:7D:2F:78:D7:58:ED:D4:A1:10:B7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B949E74
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/B3iEoaG6Qf9PPH0veNdY7dShELc.roa
Signing time: Wed 08 Jun 2022 08:18:02 +0000
ROA not before: Wed 08 Jun 2022 08:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.224.0/22 maxlen: 24
62.60.232.0/22 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
213.176.24.0/21 maxlen: 24
62.60.212.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194289268 (0xb949e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 8 08:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077884a1a1ba41ff4f3c7d2f78d758edd4a110b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:36:40:17:01:df:61:83:2a:a2:b8:de:ab:
d9:86:c5:7a:44:c0:3a:cc:76:bd:09:71:7e:48:b1:
2c:34:e0:cc:d9:c3:c0:94:49:b0:68:97:9d:2b:a6:
6c:cc:e6:a6:3d:9d:07:90:74:38:1a:26:ea:a2:f3:
f4:99:7c:05:e7:52:4a:c3:dd:23:b4:f4:be:9e:18:
3e:8a:5a:b2:56:b3:5f:1a:0f:2d:68:61:5c:3f:ce:
d0:8c:55:2f:5d:97:72:68:2d:05:c3:51:d0:d0:33:
2c:fa:3b:f4:1b:26:e3:a5:fe:fe:63:4c:f4:26:ac:
9e:4c:c2:cd:44:b8:a7:db:40:6e:30:4e:4d:3e:6f:
9e:a9:78:c8:be:49:2d:63:fe:a3:42:52:76:45:39:
83:0c:9c:0e:3f:97:a9:31:73:d7:3f:01:82:ee:6f:
e1:5f:dc:5d:bf:57:19:55:db:28:90:e2:1d:93:3e:
5b:19:4e:61:b3:cc:3f:d8:18:7a:fd:cd:65:57:12:
ff:2b:2a:0a:19:d7:38:5a:06:00:20:55:70:6d:17:
70:a3:8b:a3:90:19:84:74:9f:fd:97:21:37:cb:b6:
76:46:91:09:13:95:4b:d8:e0:89:5b:3a:64:80:9e:
fa:8f:2e:4d:d3:88:9e:07:78:62:f5:f4:7e:08:aa:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:84:A1:A1:BA:41:FF:4F:3C:7D:2F:78:D7:58:ED:D4:A1:10:B7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/B3iEoaG6Qf9PPH0veNdY7dShELc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0-62.60.159.255
62.60.208.0/21
62.60.224.0/19
213.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:5c:16:28:db:54:d9:9c:23:20:47:d9:e6:f7:e0:68:48:bd:
c2:b5:ed:df:e0:45:01:c7:8d:dc:0c:fc:0b:ad:01:12:c1:02:
b0:30:b8:11:85:e6:79:da:b1:8a:70:64:50:da:01:3b:10:32:
1b:35:8d:7f:15:c1:f5:27:51:10:2d:e9:7e:72:18:66:f3:bc:
b2:89:c7:35:d3:29:fd:13:df:5e:f8:5d:19:04:15:d4:2f:67:
7d:d6:a3:64:e5:de:f6:48:f5:64:d3:80:25:83:d2:2d:0b:03:
9e:19:49:68:15:20:80:26:14:16:6b:a1:18:2a:73:b6:1b:41:
41:95:0e:38:3c:96:0f:a6:d5:4c:a0:95:1f:28:49:c2:28:43:
19:fd:33:0d:57:ad:8e:a6:52:a9:6f:5e:19:bf:b3:2b:aa:dc:
16:4a:6f:7d:e1:70:61:a8:08:12:ff:b3:36:6b:a0:9c:e6:a3:
ec:19:68:e2:23:e8:e3:25:98:d2:34:54:97:a7:49:04:3a:cc:
5f:c2:05:38:2e:a1:ed:2d:1b:da:8d:a1:9a:f2:ed:07:f6:3d:
fb:9c:3d:81:32:9d:2f:c9:d7:ad:24:38:54:d4:65:3e:40:34:
ca:d5:6d:c6:d8:b8:ae:13:25:64:e6:43:bd:7a:a4:d2:ee:ba:
ff:2e:e8:c1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEC5SedDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
M2MxODUyN2UzYTIwNmFmMjg0MjAyOGQ5NWFlYzQxMzM4ZThkYWY4MB4XDTIyMDYw
ODA4MTgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDc3ODg0YTFhMWJh
NDFmZjRmM2M3ZDJmNzhkNzU4ZWRkNGExMTBiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7ONkAXAd9hgyqiuN6r2YbFekTAOsx2vQlxfkixLDTgzNnD
wJRJsGiXnSumbMzmpj2dB5B0OBom6qLz9Jl8BedSSsPdI7T0vp4YPopaslazXxoP
LWhhXD/O0IxVL12XcmgtBcNR0NAzLPo79Bsm46X+/mNM9CasnkzCzUS4p9tAbjBO
TT5vnql4yL5JLWP+o0JSdkU5gwycDj+XqTFz1z8Bgu5v4V/cXb9XGVXbKJDiHZM+
WxlOYbPMP9gYev3NZVcS/ysqChnXOFoGACBVcG0XcKOLo5AZhHSf/ZchN8u2dkaR
CROVS9jgiVs6ZICe+o8uTdOIngd4YvX0fgiqVnECAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQHeIShobpB/088fS9411jt1KEQtzAfBgNVHSMEGDAWgBTDwYUn46IGryhC
Ao2VrsQTOOja+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzViYi8x
L0IzaUVvYUc2UWY5UFBIMHZlTmRZN2RTaEVMYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
MTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzViYi8xL3c4R0ZKLU9pQnE4
b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIDAMAwQBPjySAwQFPjyAAwQDPjzQAwQF
PjzgAwQD1bAYMA0GCSqGSIb3DQEBCwUAA4IBAQDLXBYo21TZnCMgR9nm9+BoSL3C
te3f4EUBx43cDPwLrQESwQKwMLgRheZ52rGKcGRQ2gE7EDIbNY1/FcH1J1EQLel+
chhm87yyicc10yn9E99e+F0ZBBXUL2d91qNk5d72SPVk04Alg9ItCwOeGUloFSCA
JhQWa6EYKnO2G0FBlQ44PJYPptVMoJUfKEnCKEMZ/TMNV62OplKpb14Zv7MrqtwW
Sm994XBhqAgS/7M2a6Cc5qPsGWjiI+jjJZjSNFSXp0kEOsxfwgU4LqHtLRvajaGa
8u0H9j37nD2BMp0vydetJDhU1GU+QDTK1W3G2LiuEyVk5kO9eqTS7rr/LujB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org