Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/V5QOUOn4NoP9PIUYFMQJh6BScDs.roa
File: V5QOUOn4NoP9PIUYFMQJh6BScDs.roa (raw, json)
Hash identifier: PWYJ+lju4+tZHrqIVhjNBvbkqiiuRR6GyHalX+q6IQA=
Subject key identifier: 57:94:0E:50:E9:F8:36:83:FD:3C:85:18:14:C4:09:87:A0:52:70:3B
Certificate issuer: /CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
Certificate serial: 010467
Authority key identifier: C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/V5QOUOn4NoP9PIUYFMQJh6BScDs.roa
Signing time: Tue 15 Mar 2022 10:00:45 +0000
ROA not before: Tue 15 Mar 2022 10:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198401
IP address blocks: 62.3.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66663 (0x10467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
Validity
Not Before: Mar 15 10:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57940e50e9f83683fd3c851814c40987a052703b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:58:bf:bf:68:ff:a5:06:cd:08:36:25:0c:
d7:dc:30:2a:59:96:e5:18:f0:08:cc:c9:c5:13:a4:
a9:d4:a0:b0:f6:51:7b:00:23:01:05:13:8d:27:c8:
00:cc:cf:98:22:2f:33:69:42:5c:5b:ce:35:71:69:
95:9a:81:a4:95:81:ea:9e:c1:87:93:a7:5c:0d:54:
56:96:81:ec:81:c8:a4:f7:8c:36:56:ab:2a:c0:02:
57:5c:0b:da:1d:92:00:c3:a0:b5:22:9f:03:b7:91:
df:2d:0a:e9:d8:c9:40:23:fd:c4:13:9d:e0:e2:07:
3b:9f:4d:05:c5:ac:ca:5e:35:ed:9c:49:44:85:d0:
d4:e4:d1:0e:35:c6:21:c9:ea:de:2d:1c:53:ea:d8:
ac:f3:ac:c1:97:b6:6c:d8:1e:63:49:e9:c3:ab:d6:
de:bc:94:a5:a6:f7:39:35:fd:4b:ae:17:bd:29:71:
03:e3:69:ae:5e:b0:80:d2:49:62:cc:37:ed:40:14:
56:b9:1e:b3:b1:fe:2c:2a:26:95:dc:b0:90:de:b4:
89:c4:56:00:d0:96:e3:c9:03:f9:b4:a4:e3:21:83:
95:a5:d2:0c:a7:8e:15:df:58:97:1e:6b:5e:42:e8:
90:27:1d:12:80:e0:f0:61:7c:5a:c7:fb:16:a4:b3:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:0E:50:E9:F8:36:83:FD:3C:85:18:14:C4:09:87:A0:52:70:3B
X509v3 Authority Key Identifier:
keyid:C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/V5QOUOn4NoP9PIUYFMQJh6BScDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3c:83:98:a7:14:be:83:ca:2d:0b:36:57:a9:1a:46:77:19:
e6:c0:06:1d:45:3e:13:ec:f3:a9:2b:ff:f2:7b:03:d4:bf:be:
7d:00:73:7a:83:16:29:1a:f4:22:99:7a:02:70:77:74:72:51:
4a:ef:16:f6:1f:27:35:a0:01:ab:43:42:51:66:61:96:7a:2a:
9b:6b:c9:a4:e5:6f:33:d5:68:ec:f5:08:fb:09:ae:ee:75:20:
38:a5:74:da:cf:c9:65:8a:60:f8:e2:9b:66:12:43:6a:23:32:
f4:29:65:17:d0:6c:00:78:f1:67:7b:18:30:ef:f5:00:11:c8:
36:c7:18:46:a6:a6:ee:ca:63:31:70:08:31:c8:89:36:f7:77:
1c:a7:21:24:82:f8:c6:e5:e9:99:25:ad:dd:56:1e:53:91:3d:
d1:bb:be:d0:0f:84:ca:53:14:8b:3f:13:7d:0b:c2:0f:35:01:
fa:84:d0:c7:87:92:88:c0:b9:f3:67:88:60:30:b2:98:4a:b5:
32:a5:69:25:89:09:0e:5a:b6:59:12:81:b9:fe:ac:69:70:fc:
20:9a:4b:c4:d9:29:7f:bc:13:0b:27:e6:44:b2:10:12:27:83:
e3:fb:14:de:f9:ff:21:3d:9b:31:84:07:50:79:a8:17:f1:95:
45:8a:16:db
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAQRnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
ZTY2MjAzNzAzNzM3YWYxMjU1ZTRhYzZkNjgyZjJmYThjNjZiMDkwHhcNMjIwMzE1
MTAwMDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1Nzk0MGU1MGU5Zjgz
NjgzZmQzYzg1MTgxNGM0MDk4N2EwNTI3MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuOpYv79o/6UGzQg2JQzX3DAqWZblGPAIzMnFE6Sp1KCw9lF7
ACMBBRONJ8gAzM+YIi8zaUJcW841cWmVmoGklYHqnsGHk6dcDVRWloHsgcik94w2
VqsqwAJXXAvaHZIAw6C1Ip8Dt5HfLQrp2MlAI/3EE53g4gc7n00FxazKXjXtnElE
hdDU5NEONcYhyereLRxT6tis86zBl7Zs2B5jSenDq9bevJSlpvc5Nf1Lrhe9KXED
42muXrCA0klizDftQBRWuR6zsf4sKiaV3LCQ3rSJxFYA0JbjyQP5tKTjIYOVpdIM
p44V31iXHmteQuiQJx0SgODwYXxax/sWpLMq8wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFeUDlDp+DaD/TyFGBTECYegUnA7MB8GA1UdIwQYMBaAFMnmYgNwNzevElXk
rG1oLy+oxmsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eWVaaUEzQTNONjhTVmVTc2JXZ3ZMNmpHYXdrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yYi9mMmNkZTAtZDQzNS00ZjQxLTkyMWQtYWY4OThjMTVjZWRhLzEv
VjVRT1VPbjROb1A5UElVWUZNUUpoNkJTY0RzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9m
MmNkZTAtZDQzNS00ZjQxLTkyMWQtYWY4OThjMTVjZWRhLzEveWVaaUEzQTNONjhT
VmVTc2JXZ3ZMNmpHYXdrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMbMA0GCSqGSIb3DQEBCwUAA4IB
AQBaPIOYpxS+g8otCzZXqRpGdxnmwAYdRT4T7POpK//yewPUv759AHN6gxYpGvQi
mXoCcHd0clFK7xb2Hyc1oAGrQ0JRZmGWeiqba8mk5W8z1Wjs9Qj7Ca7udSA4pXTa
z8llimD44ptmEkNqIzL0KWUX0GwAePFnexgw7/UAEcg2xxhGpqbuymMxcAgxyIk2
93ccpyEkgvjG5emZJa3dVh5TkT3Ru77QD4TKUxSLPxN9C8IPNQH6hNDHh5KIwLnz
Z4hgMLKYSrUypWkliQkOWrZZEoG5/qxpcPwgmkvE2Sl/vBMLJ+ZEshASJ4Pj+xTe
+f8hPZsxhAdQeagX8ZVFihbb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:38 2023 by rpki-client on console-ams.rpki-client.org