Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa
File: 0ll2qDFikTmD_sK_yN5V9UQo2aE.roa (raw, json)
Hash identifier: kYO0WD8mGIXx19VlKw9Bhd4Z66DWZzPV/KEAIxqlzjw=
Subject key identifier: D2:59:76:A8:31:62:91:39:83:FE:C2:BF:C8:DE:55:F5:44:28:D9:A1
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 0171CF
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa
Signing time: Mon 10 Jan 2022 13:59:50 +0000
ROA not before: Mon 10 Jan 2022 13:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 62.85.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94671 (0x171cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jan 10 13:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25976a83162913983fec2bfc8de55f54428d9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:4a:7f:31:6c:ed:0e:c8:c1:26:44:eb:7a:
33:cf:bb:95:3c:d5:3e:f2:3d:3c:d6:a6:ad:97:8c:
5e:9f:90:ca:8a:5e:8f:2b:f2:ca:9f:f7:54:09:08:
e6:50:e0:44:f5:77:7c:0f:40:63:75:92:5b:95:35:
a6:61:ad:43:a6:13:0c:2e:ec:cf:f1:28:62:10:02:
1e:79:f8:77:31:ae:ed:f5:80:06:c5:77:62:66:97:
e5:e3:a4:db:37:b8:29:18:e4:1a:22:5a:4f:51:a2:
32:1e:22:80:cc:e6:20:04:3c:bf:5d:ac:ed:37:24:
d4:5d:90:c8:c0:fb:49:21:63:c5:9a:fd:95:d0:78:
e7:55:fe:e9:1e:cb:ec:b4:0c:3d:7b:41:21:22:13:
72:4f:e8:67:41:db:cb:4b:c0:ad:b4:f5:be:e0:05:
5e:3a:1f:c5:05:65:e8:b8:5d:af:77:73:f4:40:52:
cb:95:f3:d5:68:de:05:03:fd:98:cd:dc:af:25:0b:
bb:9a:e5:01:2b:bc:ad:09:31:47:1e:25:54:54:23:
6c:c4:be:1d:bc:ea:1a:e1:f9:e2:b2:03:e9:3f:89:
8e:23:c8:cf:79:72:49:d0:2c:f8:cc:97:f4:24:fa:
dd:1a:aa:1e:32:a1:85:58:73:77:91:5e:5f:5a:1f:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:76:A8:31:62:91:39:83:FE:C2:BF:C8:DE:55:F5:44:28:D9:A1
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.160.0/19
Signature Algorithm: sha256WithRSAEncryption
42:52:42:6e:47:f2:d0:5c:e7:4e:d9:39:1a:b9:a2:88:34:ba:
eb:4f:e7:93:97:87:c2:39:c6:30:26:3d:63:ff:ba:56:04:14:
f4:3d:1e:2a:6e:ee:6b:95:07:f6:fe:4e:1a:21:08:a9:40:f3:
60:9d:9c:1a:1b:18:f2:dc:64:b3:a8:23:b5:c9:ee:9c:ba:f7:
f9:0c:4a:58:83:36:6e:a1:dc:79:9e:cd:4a:d2:da:24:48:d3:
99:4e:20:97:3a:7e:7a:f6:78:90:d3:d1:c7:33:fb:22:f5:f7:
47:a8:42:d2:fd:a6:60:5a:38:bc:f5:de:4b:f8:f9:ff:bc:73:
50:ed:5a:53:3f:ca:9c:51:8e:a1:9a:53:94:47:08:21:d6:81:
05:d1:ce:ef:80:de:e3:62:b5:a3:18:5b:c8:ac:a5:7d:d1:a0:
13:38:46:d1:03:d0:f5:5f:2b:f3:cc:ce:09:5a:a1:4f:ee:94:
aa:b0:c4:d2:79:72:1b:44:30:37:ed:c2:7d:30:71:33:50:a3:
0a:03:37:60:c6:de:1e:7c:0d:7c:f7:f7:81:63:72:2e:53:ce:
b7:d1:c9:54:a4:66:e2:62:21:19:f0:0e:78:5a:ba:13:2e:89:
5e:76:61:28:e2:00:71:81:a7:5f:72:83:57:07:67:5e:96:c3:
f7:12:09:8a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAXHPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4
MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFkMzUxNDUwHhcNMjIwMTEw
MTM1OTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMjU5NzZhODMxNjI5
MTM5ODNmZWMyYmZjOGRlNTVmNTQ0MjhkOWExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm0hKfzFs7Q7IwSZE63ozz7uVPNU+8j081qatl4xen5DKil6P
K/LKn/dUCQjmUOBE9Xd8D0BjdZJblTWmYa1DphMMLuzP8ShiEAIeefh3Ma7t9YAG
xXdiZpfl46TbN7gpGOQaIlpPUaIyHiKAzOYgBDy/XaztNyTUXZDIwPtJIWPFmv2V
0HjnVf7pHsvstAw9e0EhIhNyT+hnQdvLS8CttPW+4AVeOh/FBWXouF2vd3P0QFLL
lfPVaN4FA/2YzdyvJQu7muUBK7ytCTFHHiVUVCNsxL4dvOoa4fnisgPpP4mOI8jP
eXJJ0Cz4zJf0JPrdGqoeMqGFWHN3kV5fWh948QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNJZdqgxYpE5g/7Cv8jeVfVEKNmhMB8GA1UdIwQYMBaAFKgXx0U/N36ctvrl
yJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2LzEv
MGxsMnFERmlrVG1EX3NLX3lONVY5VVFvMmFFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85
NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHky
LXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPlWgMA0GCSqGSIb3DQEBCwUAA4IB
AQBCUkJuR/LQXOdO2TkauaKINLrrT+eTl4fCOcYwJj1j/7pWBBT0PR4qbu5rlQf2
/k4aIQipQPNgnZwaGxjy3GSzqCO1ye6cuvf5DEpYgzZuodx5ns1K0tokSNOZTiCX
On569niQ09HHM/si9fdHqELS/aZgWji89d5L+Pn/vHNQ7VpTP8qcUY6hmlOURwgh
1oEF0c7vgN7jYrWjGFvIrKV90aATOEbRA9D1XyvzzM4JWqFP7pSqsMTSeXIbRDA3
7cJ9MHEzUKMKAzdgxt4efA189/eBY3IuU8630clUpGbiYiEZ8A54WroTLoledmEo
4gBxgadfcoNXB2delsP3EgmK
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:18 2024 by rpki-client on console-ams.rpki-client.org