Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_9nMGv82NGDU5wusAxtkh6uKr2c.roa
File: _9nMGv82NGDU5wusAxtkh6uKr2c.roa (raw, json)
Hash identifier: aAEmHzmFxHbcVMczLvqkf0nAuM44onY+MPrJAp1OtpQ=
Subject key identifier: FF:D9:CC:1A:FF:36:34:60:D4:E7:0B:AC:03:1B:64:87:AB:8A:AF:67
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0183EEE9A03A7789AB3B8999F51A6C81AE1C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_9nMGv82NGDU5wusAxtkh6uKr2c.roa
Signing time: Wed 19 Oct 2022 06:23:51 +0000
ROA not before: Wed 19 Oct 2022 06:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134963
IP address blocks: 62.60.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:e9:a0:3a:77:89:ab:3b:89:99:f5:1a:6c:81:ae:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 19 06:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd9cc1aff363460d4e70bac031b6487ab8aaf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:bd:b6:4a:04:99:a3:b8:df:6c:62:c8:95:
31:d8:3b:98:8c:65:7c:cb:b1:bd:2b:74:d8:fb:76:
08:82:93:47:22:07:15:f7:bb:aa:7c:fe:5e:55:ca:
cd:c1:90:96:9d:33:2f:5c:4b:a8:65:7b:81:f8:d2:
1b:47:69:6d:0f:e9:6d:59:4b:79:83:f5:c4:23:ef:
86:33:67:2c:21:34:6e:be:a2:f5:04:30:2a:d2:f8:
a5:c8:2f:84:e9:d1:2e:9c:34:60:a0:1f:25:eb:ba:
83:2f:65:0a:3c:f6:b8:88:4c:23:9f:50:0d:7c:8d:
3e:6b:05:5a:cf:a4:8f:cb:f7:70:03:80:02:5f:38:
95:4c:1d:6c:3d:c1:a9:7c:21:f3:d9:8e:79:a5:f6:
bd:80:43:b9:f4:23:ee:b3:5f:1e:05:de:7c:cd:9c:
80:a9:a4:01:fd:a2:08:b8:9e:35:93:8f:07:3a:1f:
2f:26:11:e3:af:d0:3b:7d:c5:68:40:88:f5:42:8c:
09:4f:08:47:b3:e2:25:c6:24:4a:0b:48:de:12:13:
4a:70:03:a0:91:53:94:42:b1:0f:ac:47:83:21:a4:
88:f3:57:59:b1:da:4d:39:32:8f:8e:f7:eb:d8:6b:
fa:96:55:cf:ef:58:04:92:f5:a7:03:eb:60:ff:33:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:CC:1A:FF:36:34:60:D4:E7:0B:AC:03:1B:64:87:AB:8A:AF:67
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_9nMGv82NGDU5wusAxtkh6uKr2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/19
Signature Algorithm: sha256WithRSAEncryption
11:6d:7a:34:7a:99:1b:27:0a:52:95:1a:3e:7d:87:bd:06:27:
31:f8:ec:fd:75:11:53:c4:ba:b8:d2:6d:a1:fb:0d:b2:62:e3:
19:8b:26:f4:78:eb:32:d4:d0:23:aa:b0:7a:df:7b:ad:ee:82:
fa:de:75:35:4c:1f:50:32:97:bc:a7:92:20:c5:aa:33:f1:e9:
56:37:4c:c9:ac:92:9e:50:57:90:08:5d:8d:36:32:3b:92:10:
89:e1:47:ed:af:cf:d8:18:b6:c5:98:db:b2:62:de:d5:2b:c3:
1f:d4:9e:28:b8:af:15:10:c2:92:86:fd:45:34:68:57:04:39:
c8:01:26:98:14:f6:17:59:13:83:90:68:f1:a7:1b:10:f6:f3:
54:77:db:01:cd:6a:d3:b1:2d:7d:57:64:5d:7a:8e:83:1e:08:
35:6a:67:31:60:61:15:a4:d2:c6:e3:61:0a:37:08:03:49:e3:
81:51:25:35:04:83:6a:cf:6b:b0:0a:b9:75:59:81:a4:ae:15:
9b:66:78:8e:9f:80:6b:64:4d:a5:80:0c:89:9a:08:de:11:30:
a1:df:bc:79:80:36:5f:75:d0:e7:7d:87:6e:8b:54:df:2d:d1:
99:cf:6b:2b:b9:b4:b9:3c:ea:13:a4:e8:f1:a6:11:28:48:88:
48:52:21:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPu6aA6d4mrO4mZ9Rpsga4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjIxMDE5MDYyMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmQ5Y2MxYWZmMzYzNDYwZDRlNzBiYWMwMzFiNjQ4N2FiOGFhZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouG9tkoEmaO432xiyJUx2DuYjGV8
y7G9K3TY+3YIgpNHIgcV97uqfP5eVcrNwZCWnTMvXEuoZXuB+NIbR2ltD+ltWUt5
g/XEI++GM2csITRuvqL1BDAq0vilyC+E6dEunDRgoB8l67qDL2UKPPa4iEwjn1AN
fI0+awVaz6SPy/dwA4ACXziVTB1sPcGpfCHz2Y55pfa9gEO59CPus18eBd58zZyA
qaQB/aIIuJ41k48HOh8vJhHjr9A7fcVoQIj1QowJTwhHs+IlxiRKC0jeEhNKcAOg
kVOUQrEPrEeDIaSI81dZsdpNOTKPjvfr2Gv6llXP71gEkvWnA+tg/zONSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/ZzBr/NjRg1OcLrAMbZIeriq9nMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvXzluTUd2ODJOR0RVNXd1c0F4dGtoNnVLcjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPjzgMA0G
CSqGSIb3DQEBCwUAA4IBAQARbXo0epkbJwpSlRo+fYe9Bicx+Oz9dRFTxLq40m2h
+w2yYuMZiyb0eOsy1NAjqrB633ut7oL63nU1TB9QMpe8p5Igxaoz8elWN0zJrJKe
UFeQCF2NNjI7khCJ4Uftr8/YGLbFmNuyYt7VK8Mf1J4ouK8VEMKShv1FNGhXBDnI
ASaYFPYXWRODkGjxpxsQ9vNUd9sBzWrTsS19V2Rdeo6DHgg1amcxYGEVpNLG42EK
NwgDSeOBUSU1BINqz2uwCrl1WYGkrhWbZniOn4BrZE2lgAyJmgjeETCh37x5gDZf
ddDnfYdui1TfLdGZz2srubS5POoTpOjxphEoSIhIUiGV
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org