Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/tg8DfLGyQQD6R7FaX25LcyJ9AoE.roa
File: tg8DfLGyQQD6R7FaX25LcyJ9AoE.roa (raw, json)
Hash identifier: Tutq3CdVEoETQOpGwxcMiqevSuqhLzaM1cbjB+El1/I=
Subject key identifier: B6:0F:03:7C:B1:B2:41:00:FA:47:B1:5A:5F:6E:4B:73:22:7D:02:81
Certificate issuer: /CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Certificate serial: 57977E
Authority key identifier: D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/tg8DfLGyQQD6R7FaX25LcyJ9AoE.roa
Signing time: Mon 28 Mar 2022 11:03:18 +0000
ROA not before: Mon 28 Mar 2022 11:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39305
IP address blocks: 62.68.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5740414 (0x57977e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Validity
Not Before: Mar 28 11:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b60f037cb1b24100fa47b15a5f6e4b73227d0281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:bc:c2:49:f9:6f:91:e3:c0:b1:3a:e9:6e:
7f:32:eb:3c:f1:25:81:89:70:d4:73:6f:26:6d:84:
0f:7a:49:2c:f0:3a:db:78:bb:09:a3:18:a9:91:95:
86:08:89:36:24:99:47:11:17:ae:50:1d:f5:10:f4:
15:23:73:f1:90:b8:d7:6d:cb:f0:a0:6f:0e:f0:79:
08:3b:4e:10:c7:29:dc:9a:c7:42:87:49:1a:be:e1:
ca:b6:9e:fc:a3:81:eb:e0:14:02:c3:18:ed:43:d3:
3c:69:4e:10:eb:c2:53:f6:83:91:5f:1f:0b:82:e6:
6e:9b:2b:e1:f0:21:16:c7:6d:ba:9c:84:d3:40:ac:
4d:6f:58:e0:84:7f:4a:c1:28:3f:96:a3:f7:70:a1:
09:47:a6:42:27:14:5e:85:02:77:63:88:2f:f7:34:
38:4f:a2:af:46:34:b5:9f:79:da:0f:4b:6b:34:f2:
e5:84:40:fd:ee:d5:44:aa:bf:58:cd:c4:18:05:72:
0b:6b:df:a5:02:6b:7d:9f:64:0b:e2:55:01:9c:9e:
85:c3:64:40:f3:8a:66:d7:2b:ed:2e:d9:c1:ae:8f:
ae:57:02:27:19:0a:b9:ff:74:48:ce:4b:f2:4f:b6:
de:da:45:4a:6f:c4:b4:ba:4c:12:73:df:a1:f9:05:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:03:7C:B1:B2:41:00:FA:47:B1:5A:5F:6E:4B:73:22:7D:02:81
X509v3 Authority Key Identifier:
keyid:D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/tg8DfLGyQQD6R7FaX25LcyJ9AoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e8:5e:1f:8f:ea:bf:e7:b7:07:0c:a7:5b:b7:90:9d:3c:79:
7a:77:ea:b4:3f:b0:c8:8e:da:0b:ac:8b:be:4c:b8:a4:42:db:
20:c6:40:40:03:06:2e:2e:b3:da:fd:65:99:6a:cd:a2:01:19:
b4:73:2f:32:fc:f5:b9:ab:8b:76:91:56:a5:24:45:66:30:83:
74:8a:ae:df:c1:4b:1a:6b:e6:ac:c9:6f:63:83:62:27:35:f2:
2a:e9:f1:58:01:a7:1e:4a:61:18:de:c0:34:f0:ce:65:8e:49:
ce:1b:b2:8a:c2:fa:37:13:b7:54:87:f4:33:72:62:92:a5:9c:
ac:91:68:ee:9a:de:6c:a5:cb:7c:76:c0:ad:55:7b:9b:1b:bb:
b4:18:ce:4a:25:35:af:fd:fc:cf:d3:10:85:31:6f:a5:05:ab:
2c:cb:6e:3d:71:2d:c4:dd:c2:76:bd:ab:0e:df:05:ff:c9:ba:
6a:f9:fb:de:e3:72:0b:7a:8d:c0:67:da:93:c1:78:bb:81:dc:
9b:bc:db:c6:28:8b:91:04:ab:10:cc:c2:2d:65:9d:10:e1:46:
1b:0e:34:4b:61:49:97:b3:ae:77:30:39:78:25:df:8b:38:c4:
5c:70:d2:ec:45:1b:45:79:c7:72:c0:45:fa:73:7b:ad:26:65:
5b:8a:ba:d0
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDV5d+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
NzQwYTAyZmJlMTIzNjIyNmMzNjZiMzNjMjlmMzZkYWI3MGRlNWMwHhcNMjIwMzI4
MTEwMzE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNjBmMDM3Y2IxYjI0
MTAwZmE0N2IxNWE1ZjZlNGI3MzIyN2QwMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp8S8wkn5b5HjwLE66W5/Mus88SWBiXDUc28mbYQPekks8Drb
eLsJoxipkZWGCIk2JJlHEReuUB31EPQVI3PxkLjXbcvwoG8O8HkIO04QxyncmsdC
h0kavuHKtp78o4Hr4BQCwxjtQ9M8aU4Q68JT9oORXx8LguZumyvh8CEWx226nITT
QKxNb1jghH9KwSg/lqP3cKEJR6ZCJxRehQJ3Y4gv9zQ4T6KvRjS1n3naD0trNPLl
hED97tVEqr9YzcQYBXILa9+lAmt9n2QL4lUBnJ6Fw2RA84pm1yvtLtnBro+uVwIn
GQq5/3RIzkvyT7be2kVKb8S0ukwSc9+h+QUh6wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLYPA3yxskEA+kexWl9uS3MifQKBMB8GA1UdIwQYMBaAFNl0CgL74SNiJsNm
szwp822rcN5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MlhRS0F2dmhJMkltdzJhelBDbnpiYXR3M2x3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yZi82NjlkMTMtMzc1My00M2NjLWFkNDYtZTAyYjcwYWZkMzM1LzEv
dGc4RGZMR3lRUUQ2UjdGYVgyNUxjeUo5QW9FLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82
NjlkMTMtMzc1My00M2NjLWFkNDYtZTAyYjcwYWZkMzM1LzEvMlhRS0F2dmhJMklt
dzJhelBDbnpiYXR3M2x3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRNMA0GCSqGSIb3DQEBCwUAA4IB
AQCj6F4fj+q/57cHDKdbt5CdPHl6d+q0P7DIjtoLrIu+TLikQtsgxkBAAwYuLrPa
/WWZas2iARm0cy8y/PW5q4t2kValJEVmMIN0iq7fwUsaa+asyW9jg2InNfIq6fFY
AaceSmEY3sA08M5ljknOG7KKwvo3E7dUh/QzcmKSpZyskWjumt5spct8dsCtVXub
G7u0GM5KJTWv/fzP0xCFMW+lBassy249cS3E3cJ2vasO3wX/ybpq+fve43ILeo3A
Z9qTwXi7gdybvNvGKIuRBKsQzMItZZ0Q4UYbDjRLYUmXs653MDl4Jd+LOMRccNLs
RRtFecdywEX6c3utJmVbirrQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-fra.rpki-client.org