Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F9MBortivpQFNyO5SXbuLlbBNfU.roa
File: F9MBortivpQFNyO5SXbuLlbBNfU.roa (raw, json)
Hash identifier: oN5TOb12NXvFnir5HF37geshdFmuZLZfVOyx7DOcZxw=
Subject key identifier: 17:D3:01:A2:BB:62:BE:94:05:37:23:B9:49:76:EE:2E:56:C1:35:F5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01839D7B04816C7CF8274C5885E7350C84B2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F9MBortivpQFNyO5SXbuLlbBNfU.roa
Signing time: Mon 03 Oct 2022 10:53:48 +0000
ROA not before: Mon 03 Oct 2022 10:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15611
IP address blocks: 213.176.64.0/21 maxlen: 24
213.176.72.0/22 maxlen: 24
213.176.88.0/21 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/21 maxlen: 24
62.60.128.0/21 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.143.0/24 maxlen: 24
62.60.141.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.152.0/22 maxlen: 24
62.60.146.0/23 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
62.60.224.0/22 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.232.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
62.60.200.0/21 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:7b:04:81:6c:7c:f8:27:4c:58:85:e7:35:0c:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 3 10:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d301a2bb62be94053723b94976ee2e56c135f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:89:c3:41:a3:a9:1b:d6:10:30:69:dd:f4:
65:ea:ec:4a:64:90:d6:e7:a4:eb:71:98:f0:ed:a7:
e2:c0:cd:68:e5:ad:35:f3:8e:bc:c0:c0:71:b5:2c:
90:1d:8a:b5:90:64:2c:84:6e:17:63:81:b3:a9:17:
07:64:9b:72:59:49:44:8b:6d:2c:2f:fa:b5:40:53:
52:73:21:81:77:6a:d5:c7:36:80:13:75:52:69:9a:
22:d6:4c:30:c6:42:36:36:45:1e:f9:af:06:b8:8c:
ab:f1:11:bd:97:12:d2:d8:c8:79:e4:2e:0d:2c:6f:
dc:50:c0:17:63:81:fb:45:e5:1c:8c:6d:96:f0:14:
eb:9e:5e:07:6d:66:1b:12:b3:80:58:b2:a3:90:b0:
4a:f0:a0:88:66:4c:23:b7:a8:60:a9:23:0f:b1:bd:
32:12:8c:79:d3:45:52:b2:84:ab:43:09:77:2e:9f:
db:59:fe:14:2e:d2:1b:14:d0:73:cb:5b:a9:2d:9d:
f3:47:ab:93:61:6c:2d:4b:f9:b0:a1:c0:2f:d8:8b:
b4:63:99:2d:3a:d4:cc:c0:e6:82:cf:43:47:a9:1a:
18:b3:be:31:22:3b:8c:d2:73:08:f1:46:da:ad:82:
df:c9:9b:f8:f4:b3:d5:4e:6e:fd:a4:48:86:e6:dc:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:01:A2:BB:62:BE:94:05:37:23:B9:49:76:EE:2E:56:C1:35:F5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F9MBortivpQFNyO5SXbuLlbBNfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0-62.60.137.255
62.60.139.0-62.60.143.255
62.60.145.0-62.60.155.255
62.60.200.0-62.60.211.255
62.60.224.0/19
213.176.4.0/23
213.176.20.0-213.176.31.255
213.176.64.0-213.176.75.255
213.176.88.0-213.176.96.255
213.176.122.0-213.176.125.255
Signature Algorithm: sha256WithRSAEncryption
5c:f5:4e:c6:e4:5c:b0:a1:10:16:82:7e:06:97:b6:bd:72:5e:
16:d0:ee:97:15:ff:7d:57:7c:09:71:2d:e9:7f:00:b0:72:93:
6f:3a:bd:25:35:ce:f3:dc:b1:d2:52:95:75:f5:de:59:01:15:
50:a0:9a:5c:f7:4b:0b:33:41:5f:2d:9c:c9:9f:7d:b7:e3:0a:
f0:13:64:bf:c5:fd:62:77:03:e4:51:c1:28:df:fc:2f:94:fa:
86:85:c3:b9:07:69:55:e1:b2:cf:8a:ed:22:f6:97:3e:b8:08:
da:b0:f7:23:c5:91:99:c7:3d:8a:45:b5:3d:1c:ca:b4:d5:97:
02:5d:17:21:e0:c2:82:f6:99:d8:99:ca:20:9a:11:9b:c9:60:
d7:23:de:8a:83:da:0f:5d:87:5c:78:f3:eb:fd:dc:cd:da:b7:
26:db:8a:26:d4:84:64:bf:d3:7c:f6:95:9c:71:04:0b:65:04:
53:1d:94:07:1b:23:40:a2:49:f0:5c:6a:ee:36:e4:f2:74:8e:
f5:f5:1f:58:2a:20:87:06:15:a7:b7:9e:c1:14:4d:cf:c1:c2:
09:85:cd:8a:0d:b8:23:0e:60:b2:57:86:54:3c:52:b4:7d:c4:
cd:ad:b8:f6:1a:44:d4:64:f4:5f:2e:87:af:a5:d4:8d:35:22:
57:a4:d5:71
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYOdewSBbHz4J0xYhec1DISyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjIxMDAzMTA1MzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2QzMDFhMmJiNjJiZTk0MDUzNzIzYjk0OTc2ZWUyZTU2YzEzNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnaJw0GjqRvWEDBp3fRl6uxKZJDW
56TrcZjw7afiwM1o5a018468wMBxtSyQHYq1kGQshG4XY4GzqRcHZJtyWUlEi20s
L/q1QFNScyGBd2rVxzaAE3VSaZoi1kwwxkI2NkUe+a8GuIyr8RG9lxLS2Mh55C4N
LG/cUMAXY4H7ReUcjG2W8BTrnl4HbWYbErOAWLKjkLBK8KCIZkwjt6hgqSMPsb0y
Eox500VSsoSrQwl3Lp/bWf4ULtIbFNBzy1upLZ3zR6uTYWwtS/mwocAv2Iu0Y5kt
OtTMwOaCz0NHqRoYs74xIjuM0nMI8UbarYLfyZv49LPVTm79pEiG5twkewIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFBfTAaK7Yr6UBTcjuUl27i5WwTX1MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRjlNQm9ydGl2cFFGTnlPNVNYYnVMbGJCTmZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfDAMAwQH
PjyAAwQBPjyIMAwDBAA+PIsDBAQ+PIAwDAMEAD48kQMEAj48mDAMAwQDPjzIAwQC
PjzQAwQFPjzgAwQB1bAEMAwDBALVsBQDBAXVsAAwDAMEBtWwQAMEAtWwSDAMAwQD
1bBYAwQA1bBgMAwDBAHVsHoDBAHVsHwwDQYJKoZIhvcNAQELBQADggEBAFz1Tsbk
XLChEBaCfgaXtr1yXhbQ7pcV/31XfAlxLel/ALByk286vSU1zvPcsdJSlXX13lkB
FVCgmlz3SwszQV8tnMmffbfjCvATZL/F/WJ3A+RRwSjf/C+U+oaFw7kHaVXhss+K
7SL2lz64CNqw9yPFkZnHPYpFtT0cyrTVlwJdFyHgwoL2mdiZyiCaEZvJYNcj3oqD
2g9dh1x48+v93M3atybbiibUhGS/03z2lZxxBAtlBFMdlAcbI0CiSfBcau425PJ0
jvX1H1gqIIcGFae3nsEUTc/BwgmFzYoNuCMOYLJXhlQ8UrR9xM2tuPYaRNRk9F8u
h6+l1I01Ilek1XE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org