Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa
File: qr0rQwuvrha7e31GWYkSuRlHmgA.roa (raw, json)
Hash identifier: wzdd/SEJOE31a7oGw09BgMMHUPqmR7gbiFZY1+GpqAY=
Subject key identifier: AA:BD:2B:43:0B:AF:AE:16:BB:7B:7D:46:59:89:12:B9:19:47:9A:00
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0183EABFF2D04FD799FC1C3F6E91969F197E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa
Signing time: Tue 18 Oct 2022 10:59:51 +0000
ROA not before: Tue 18 Oct 2022 10:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134963
IP address blocks: 62.60.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:bf:f2:d0:4f:d7:99:fc:1c:3f:6e:91:96:9f:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 18 10:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aabd2b430bafae16bb7b7d46598912b919479a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:da:de:65:af:13:20:00:eb:db:5c:2a:5e:
a2:c3:59:6c:d1:48:e8:48:97:b1:a1:68:a3:7c:19:
0c:c8:2e:84:e0:89:7f:e1:7f:3d:51:03:fe:01:7f:
46:0e:ec:a0:6f:fd:ba:c0:81:b0:b3:ba:22:c2:3a:
a7:30:24:3a:e2:98:6c:68:8e:17:fe:d5:01:c8:7b:
d2:1a:b9:94:58:7c:9b:93:d0:5c:e7:70:03:33:0b:
01:d7:4a:30:88:3c:5c:07:77:8a:68:57:cc:b6:3c:
28:ce:64:41:36:4c:70:78:79:40:d4:91:13:b3:fe:
b9:a9:55:79:ae:36:39:9d:f7:e3:da:c1:1b:5a:7e:
54:3a:3d:12:ff:58:ee:d2:3d:42:d4:05:ca:88:29:
f6:99:a2:41:a2:39:f4:22:2c:7d:bc:bc:e5:72:67:
1c:6a:37:4c:58:1c:e4:07:37:41:70:58:61:68:2a:
14:b2:9c:5d:05:10:1e:09:ec:e0:9d:08:04:a5:d7:
35:04:8f:47:b3:7c:1f:44:9d:24:17:4c:c0:4f:d7:
ee:aa:e8:99:fc:a4:00:d3:9e:77:bf:8f:36:1e:32:
7b:ee:78:47:28:4d:42:69:b5:eb:69:1b:fd:6b:09:
06:76:e1:d6:ad:39:c5:c4:f2:d8:2a:9f:3f:5c:26:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:2B:43:0B:AF:AE:16:BB:7B:7D:46:59:89:12:B9:19:47:9A:00
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/19
Signature Algorithm: sha256WithRSAEncryption
34:cd:57:2a:af:1f:7d:f8:f3:62:6a:3e:9d:a0:f2:7c:2b:2b:
67:10:b6:bf:64:24:ff:97:ee:fc:b2:4b:57:8e:9f:64:ba:6a:
5c:be:27:39:31:b0:a7:c9:91:56:b6:15:6b:91:42:ed:63:06:
79:0b:20:e3:82:7d:a0:cc:21:b8:4f:44:ef:6c:7c:7d:be:ba:
0d:84:dc:43:46:cc:1a:55:0e:5b:17:2f:c7:f6:0c:52:17:4a:
ee:0a:b6:8b:87:da:bb:6c:be:f2:37:35:cb:42:df:86:eb:9f:
97:6d:f4:25:f0:62:a6:4e:44:dd:9c:3d:18:27:2e:55:87:a9:
f7:05:35:5e:ad:e9:ce:08:cb:0c:49:9c:a6:00:c6:9f:f0:2f:
3f:fe:67:d1:25:6c:92:c6:24:fd:27:3b:59:4a:31:f6:9c:1f:
e1:21:96:d7:33:53:01:3a:52:c0:cf:df:1a:de:08:27:43:eb:
bb:80:8d:16:9a:5c:ec:77:07:25:f2:8a:a2:71:64:e6:f2:61:
51:a4:3f:f6:8f:32:41:8d:9a:20:fc:25:48:18:ba:c8:7f:da:
a0:ed:a7:57:13:e4:72:4b:b2:00:ae:11:95:3b:49:1e:f1:66:
dd:92:54:f5:d2:2e:eb:3b:17:c9:bb:dc:d0:87:fe:f3:71:3f:
7b:78:c8:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPqv/LQT9eZ/Bw/bpGWnxl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjIxMDE4MTA1OTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWJkMmI0MzBiYWZhZTE2YmI3YjdkNDY1OTg5MTJiOTE5NDc5YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jja3mWvEyAA69tcKl6iw1ls0Ujo
SJexoWijfBkMyC6E4Il/4X89UQP+AX9GDuygb/26wIGws7oiwjqnMCQ64phsaI4X
/tUByHvSGrmUWHybk9Bc53ADMwsB10owiDxcB3eKaFfMtjwozmRBNkxweHlA1JET
s/65qVV5rjY5nffj2sEbWn5UOj0S/1ju0j1C1AXKiCn2maJBojn0Iix9vLzlcmcc
ajdMWBzkBzdBcFhhaCoUspxdBRAeCezgnQgEpdc1BI9Hs3wfRJ0kF0zAT9fuquiZ
/KQA0553v482HjJ77nhHKE1CabXraRv9awkGduHWrTnFxPLYKp8/XCb+fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKq9K0MLr64Wu3t9RlmJErkZR5oAMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvcXIwclF3dXZyaGE3ZTMxR1dZa1N1UmxIbWdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPjzgMA0G
CSqGSIb3DQEBCwUAA4IBAQA0zVcqrx99+PNiaj6doPJ8KytnELa/ZCT/l+78sktX
jp9kumpcvic5MbCnyZFWthVrkULtYwZ5CyDjgn2gzCG4T0TvbHx9vroNhNxDRswa
VQ5bFy/H9gxSF0ruCraLh9q7bL7yNzXLQt+G65+XbfQl8GKmTkTdnD0YJy5Vh6n3
BTVerenOCMsMSZymAMaf8C8//mfRJWySxiT9JztZSjH2nB/hIZbXM1MBOlLAz98a
3ggnQ+u7gI0Wmlzsdwcl8oqicWTm8mFRpD/2jzJBjZog/CVIGLrIf9qg7adXE+Ry
S7IArhGVO0ke8WbdklT10i7rOxfJu9zQh/7zcT97eMh0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org