Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa
File: k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa (raw, json)
Hash identifier: JhX4BZivTCS+04Lm5gvFP3MUP6ZZjpYL5voWl29AFAA=
Subject key identifier: 93:AA:BD:03:6E:E1:AC:19:AF:DC:C9:6F:27:9B:66:C4:F7:42:C8:B5
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 03C29A07
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa
Signing time: Sat 01 Jan 2022 03:53:23 +0000
ROA not before: Sat 01 Jan 2022 03:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43003
IP address blocks: 62.93.120.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63085063 (0x3c29a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 03:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93aabd036ee1ac19afdcc96f279b66c4f742c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:cc:0b:c6:16:9b:34:26:03:a9:dd:2b:9f:
2a:e2:19:64:44:00:9c:18:56:2e:7a:83:c5:b0:a8:
01:2b:f3:7f:ef:61:e1:9f:44:34:fa:80:9d:77:c2:
18:b0:56:66:7f:94:4c:7b:35:22:15:6c:e9:31:33:
80:de:34:d2:16:ff:6d:4c:0c:3f:aa:44:a8:92:e3:
f5:b3:2e:8d:83:6e:8c:25:33:56:fb:8e:63:6b:03:
ac:25:fd:7c:91:47:5e:40:f9:70:35:2b:c0:69:23:
1f:5d:7c:39:e4:91:f2:af:6e:4e:98:23:54:cb:44:
fc:e5:c7:6e:cf:5a:fa:d1:81:42:50:3c:39:59:5c:
1c:b6:c6:21:0b:fa:ad:4c:bc:d9:a5:1a:0a:b3:e7:
63:96:49:c3:4c:63:4e:24:9c:cd:40:a9:23:d3:ec:
0f:e1:1e:aa:23:65:57:8d:1d:56:2c:c8:38:bd:f0:
7b:73:ba:c8:5b:ab:88:dc:7f:17:fe:1b:78:19:65:
1c:67:cd:8c:70:aa:eb:78:ca:59:bf:d2:0a:aa:12:
63:c0:70:dc:1d:80:fe:ad:72:6a:b9:7d:48:df:88:
a7:8f:7a:3c:50:df:d0:9e:99:fa:db:8b:e3:b1:f3:
1c:e0:29:72:fb:5e:7e:ef:cc:00:6c:d7:c3:0b:5d:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:BD:03:6E:E1:AC:19:AF:DC:C9:6F:27:9B:66:C4:F7:42:C8:B5
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:25:66:f6:d2:8f:b0:4b:ae:2b:ef:b9:10:92:04:9e:29:eb:
09:56:01:4a:68:42:bc:0e:93:dd:fb:1d:3e:27:eb:a1:bc:73:
75:0c:a6:9e:d5:9b:9a:23:3f:9c:23:21:98:7e:56:4c:38:04:
6d:00:54:3f:d3:5d:6f:14:c2:51:ab:c1:08:0c:e1:03:47:39:
52:ce:af:56:e9:e5:5c:10:c5:5a:c4:63:00:5c:a4:f4:2e:0d:
49:ab:b2:fa:79:cf:3d:26:37:8c:e6:8c:6d:b0:53:f8:e9:1d:
82:c3:d5:42:38:9a:c9:3c:20:32:fe:4f:24:81:38:35:1f:6b:
b8:3d:f0:92:97:c5:4f:70:8d:dd:97:fe:78:ff:f8:a0:08:3a:
29:d4:54:ec:c9:0b:cf:89:bf:f2:b6:cf:6d:d7:26:c7:41:e6:
31:c8:4d:0b:df:75:30:f1:5a:0a:81:d9:f0:28:60:b6:08:c0:
5e:3a:cc:40:27:cc:73:a4:b3:2c:72:cb:7e:30:da:d2:fa:d9:
a5:3e:00:89:cc:51:c3:ee:93:c5:8e:12:fd:77:3c:40:64:c3:
db:1c:a7:83:56:88:2e:6d:4f:bc:28:3f:ed:c1:46:0f:bb:ac:
c1:94:0f:8e:95:83:61:7c:ff:00:b4:14:fa:96:92:f3:fe:46:
d6:04:a4:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8KaBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWFiNTM2NDBiMDkzMTkyNGI3M2Y3NjA5MjU4NDUxNTBhNmNjY2E1MB4XDTIyMDEw
MTAzNTMyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTNhYWJkMDM2ZWUx
YWMxOWFmZGNjOTZmMjc5YjY2YzRmNzQyYzhiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpezAvGFps0JgOp3SufKuIZZEQAnBhWLnqDxbCoASvzf+9h
4Z9ENPqAnXfCGLBWZn+UTHs1IhVs6TEzgN400hb/bUwMP6pEqJLj9bMujYNujCUz
VvuOY2sDrCX9fJFHXkD5cDUrwGkjH118OeSR8q9uTpgjVMtE/OXHbs9a+tGBQlA8
OVlcHLbGIQv6rUy82aUaCrPnY5ZJw0xjTiSczUCpI9PsD+EeqiNlV40dVizIOL3w
e3O6yFuriNx/F/4beBllHGfNjHCq63jKWb/SCqoSY8Bw3B2A/q1yarl9SN+Ip496
PFDf0J6Z+tuL47HzHOApcvtefu/MAGzXwwtdPQ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTqr0DbuGsGa/cyW8nm2bE90LItTAfBgNVHSMEGDAWgBRuq1NkCwkxkktz
92CSWEUVCmzMpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JxdFRaQXNKTVpKTGNfZGdrbGhGRlFwc3pLVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvMmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8x
L2s2cTlBMjdockJtdjNNbHZKNXRteFBkQ3lMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
MmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8xL2JxdFRaQXNKTVpK
TGNfZGdrbGhGRlFwc3pLVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz5deDANBgkqhkiG9w0BAQsFAAOC
AQEALSVm9tKPsEuuK++5EJIEninrCVYBSmhCvA6T3fsdPifrobxzdQymntWbmiM/
nCMhmH5WTDgEbQBUP9NdbxTCUavBCAzhA0c5Us6vVunlXBDFWsRjAFyk9C4NSauy
+nnPPSY3jOaMbbBT+OkdgsPVQjiayTwgMv5PJIE4NR9ruD3wkpfFT3CN3Zf+eP/4
oAg6KdRU7MkLz4m/8rbPbdcmx0HmMchNC991MPFaCoHZ8ChgtgjAXjrMQCfMc6Sz
LHLLfjDa0vrZpT4AicxRw+6TxY4S/Xc8QGTD2xyng1aILm1PvCg/7cFGD7uswZQP
jpWDYXz/ALQU+paS8/5G1gSkfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:52 2024 by rpki-client on console-fra.rpki-client.org