Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QMauadAyS1FYd6WEv3Nw5I58gHQ.roa
File: QMauadAyS1FYd6WEv3Nw5I58gHQ.roa (raw, json)
Hash identifier: m1EL2uwgdU0aC23E7i/x4RU2jWraPkvrOip3lCynS7s=
Subject key identifier: 40:C6:AE:69:D0:32:4B:51:58:77:A5:84:BF:73:70:E4:8E:7C:80:74
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01840B1E6B385B538329580E52D7EBAC1F9D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QMauadAyS1FYd6WEv3Nw5I58gHQ.roa
Signing time: Mon 24 Oct 2022 17:50:53 +0000
ROA not before: Mon 24 Oct 2022 17:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.220.0/22 maxlen: 24
213.176.68.0/22 maxlen: 24
62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.112.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:1e:6b:38:5b:53:83:29:58:0e:52:d7:eb:ac:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 24 17:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40c6ae69d0324b515877a584bf7370e48e7c8074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:3c:e5:8e:8c:10:86:3f:8d:c6:1b:9e:b4:
91:05:92:aa:ed:a5:92:71:77:9c:4d:c4:05:4f:9b:
4f:96:af:0c:81:08:ab:e2:59:17:54:55:34:80:4a:
ed:b1:73:73:69:fa:b0:f1:43:3e:c3:06:40:78:cc:
5a:2f:6c:50:a4:07:ee:33:aa:f4:41:53:b7:ba:45:
ea:d3:f5:ab:87:97:33:54:38:71:39:a3:8d:8e:66:
ca:7e:b5:27:45:6c:29:3f:77:46:56:4c:cb:30:3a:
5c:53:4b:d2:be:c8:24:12:7d:9c:d4:fb:d4:eb:0b:
cc:59:9b:d8:70:54:01:61:11:ea:ee:67:f7:c9:b3:
14:60:28:00:32:59:db:83:3e:84:24:19:06:41:b3:
69:d1:5e:14:57:2f:d2:51:54:ba:9b:2e:72:52:d0:
37:b0:9e:31:54:f7:11:a3:86:3b:54:f5:1f:93:a2:
c0:a4:0f:65:48:81:e9:83:9e:4c:e2:3d:30:5b:7a:
99:d6:68:10:e2:b5:ae:dd:0d:61:69:53:2e:e7:56:
85:bc:b9:16:ce:02:32:8c:77:2b:c7:cb:9f:83:52:
c9:77:0d:eb:07:84:68:8a:35:3d:b1:d9:63:0f:b4:
6f:0f:4c:87:46:95:4a:e2:73:76:d0:b1:75:28:5a:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C6:AE:69:D0:32:4B:51:58:77:A5:84:BF:73:70:E4:8E:7C:80:74
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QMauadAyS1FYd6WEv3Nw5I58gHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
62.60.212.0/22
62.60.220.0/22
213.176.20.0/22
213.176.68.0/22
213.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:25:9e:b8:37:31:da:98:aa:7a:1c:16:eb:f8:73:a5:36:27:
0e:04:e6:5b:21:9e:36:b4:29:c4:47:0f:b7:0e:ea:4e:41:08:
f8:9d:5e:c0:98:21:ff:aa:96:24:f6:19:e8:bb:60:f7:b2:e3:
eb:83:cb:d1:22:b2:13:2a:8c:e7:37:54:f7:fb:39:c2:8e:0e:
0c:d1:53:df:1f:eb:8e:59:e1:b7:0d:d7:0e:2e:24:36:ab:3e:
46:71:1e:7f:1d:3f:57:5d:fd:fb:bc:a5:72:8e:28:31:b2:bf:
5a:58:c2:98:c6:56:ed:d0:1d:22:a1:2c:ed:8f:25:50:0f:c4:
be:21:62:b0:29:08:14:74:cd:93:d9:1a:cb:fb:ad:bf:a8:ce:
dd:27:b3:12:49:8d:50:ff:6c:de:3d:99:cf:b9:90:f2:55:d6:
e0:fc:b5:59:b8:cb:fc:0a:52:04:4d:51:02:f7:0f:ac:6f:98:
b9:dc:8b:81:2a:04:1c:15:1d:0d:4e:11:5a:2e:60:dc:b4:00:
13:48:5b:19:a0:38:6a:cd:75:07:82:31:a1:c0:ae:fc:f9:4b:
3f:0c:95:1b:84:26:d5:69:34:c6:ff:4c:74:45:2a:35:97:5a:
c9:0c:22:5e:7a:8a:e5:60:37:60:cf:8a:07:88:dd:75:f9:40:
41:a1:e5:d8
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYQLHms4W1ODKVgOUtfrrB+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjIxMDI0MTc1MDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGM2YWU2OWQwMzI0YjUxNTg3N2E1ODRiZjczNzBlNDhlN2M4MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXM85Y6MEIY/jcYbnrSRBZKq7aWS
cXecTcQFT5tPlq8MgQir4lkXVFU0gErtsXNzafqw8UM+wwZAeMxaL2xQpAfuM6r0
QVO3ukXq0/Wrh5czVDhxOaONjmbKfrUnRWwpP3dGVkzLMDpcU0vSvsgkEn2c1PvU
6wvMWZvYcFQBYRHq7mf3ybMUYCgAMlnbgz6EJBkGQbNp0V4UVy/SUVS6my5yUtA3
sJ4xVPcRo4Y7VPUfk6LApA9lSIHpg55M4j0wW3qZ1mgQ4rWu3Q1haVMu51aFvLkW
zgIyjHcrx8ufg1LJdw3rB4RoijU9sdljD7RvD0yHRpVK4nN20LF1KFoBVQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEDGrmnQMktRWHelhL9zcOSOfIB0MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUU1hdWFkQXlTMUZZZDZXRXYzTnc1STU4Z0hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCPjyEAwQC
PjyUAwQCPjzUAwQCPjzcAwQC1bAUAwQC1bBEAwQC1bBwMA0GCSqGSIb3DQEBCwUA
A4IBAQCyJZ64NzHamKp6HBbr+HOlNicOBOZbIZ42tCnERw+3DupOQQj4nV7AmCH/
qpYk9hnou2D3suPrg8vRIrITKoznN1T3+znCjg4M0VPfH+uOWeG3DdcOLiQ2qz5G
cR5/HT9XXf37vKVyjigxsr9aWMKYxlbt0B0ioSztjyVQD8S+IWKwKQgUdM2T2RrL
+62/qM7dJ7MSSY1Q/2zePZnPuZDyVdbg/LVZuMv8ClIETVEC9w+sb5i53IuBKgQc
FR0NThFaLmDctAATSFsZoDhqzXUHgjGhwK78+Us/DJUbhCbVaTTG/0x0RSo1l1rJ
DCJeeorlYDdgz4oHiN11+UBBoeXY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org