Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/hXryHuedFEo68J_BDvJP02Hu9RM.roa
File: hXryHuedFEo68J_BDvJP02Hu9RM.roa (raw, json)
Hash identifier: bhygvehkOC6E3/Qjox5zPhZfgOhZrCnpQ5kWsmfEz4w=
Subject key identifier: 85:7A:F2:1E:E7:9D:14:4A:3A:F0:9F:C1:0E:F2:4F:D3:61:EE:F5:13
Certificate issuer: /CN=0ee51a1dd6c876c3824caca83ae4d09baa730b87
Certificate serial: C53552
Authority key identifier: 0E:E5:1A:1D:D6:C8:76:C3:82:4C:AC:A8:3A:E4:D0:9B:AA:73:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuUaHdbIdsOCTKyoOuTQm6pzC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/hXryHuedFEo68J_BDvJP02Hu9RM.roa
Signing time: Mon 25 Apr 2022 18:05:43 +0000
ROA not before: Mon 25 Apr 2022 18:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 62.68.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12924242 (0xc53552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee51a1dd6c876c3824caca83ae4d09baa730b87
Validity
Not Before: Apr 25 18:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=857af21ee79d144a3af09fc10ef24fd361eef513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:13:42:93:3a:83:f8:fa:8e:be:51:55:ed:
4b:d4:a1:d1:8f:bc:a4:ee:44:12:57:76:44:13:f0:
37:12:37:bc:24:ef:11:29:ad:34:74:4a:46:2b:32:
a7:f0:9c:9a:8b:78:94:0d:31:2a:c9:10:e9:f9:2d:
48:99:aa:30:06:88:ce:d7:e0:1e:2c:35:46:e2:82:
f8:13:88:49:7c:e0:1c:1d:5e:76:23:a8:a8:fc:92:
99:0e:cb:9e:d4:ce:f0:d5:dc:4c:b1:e0:c6:e6:1c:
86:83:b3:ef:c3:03:ab:f2:fa:e4:71:78:2d:8a:06:
cf:9a:ef:14:bf:69:56:fd:7f:5d:64:3d:f8:18:0d:
2e:ad:03:c1:8d:3f:a8:b9:a4:9d:0a:9f:21:5e:85:
db:65:2b:0f:2c:b5:8f:c5:68:05:bd:2d:6f:12:df:
e3:f4:9a:3a:4f:63:2d:4a:e5:19:62:ff:59:94:d3:
b8:bf:01:cd:b0:27:09:51:e1:4d:3e:1e:2c:8c:ff:
69:2b:b1:8a:4a:32:36:5a:e3:c0:df:eb:72:0f:40:
0a:af:84:d2:e9:f9:45:58:66:82:64:6d:c5:b6:44:
c0:87:d7:13:d0:fe:fb:1a:73:5a:3d:21:f2:b2:f1:
e7:82:9d:14:55:29:67:a5:82:d8:d7:86:ff:f4:72:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:F2:1E:E7:9D:14:4A:3A:F0:9F:C1:0E:F2:4F:D3:61:EE:F5:13
X509v3 Authority Key Identifier:
keyid:0E:E5:1A:1D:D6:C8:76:C3:82:4C:AC:A8:3A:E4:D0:9B:AA:73:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuUaHdbIdsOCTKyoOuTQm6pzC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/hXryHuedFEo68J_BDvJP02Hu9RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c1b4e7-c4b8-4ef0-b405-f5add9d6efe0/1/DuUaHdbIdsOCTKyoOuTQm6pzC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.85.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ad:12:54:87:de:42:36:2d:55:fa:ec:62:f9:60:5d:7a:06:
19:71:52:2c:58:62:b4:ef:f9:96:08:9c:12:56:8d:71:8f:99:
a6:01:1a:6d:d8:34:79:b3:70:d0:71:13:28:66:39:29:83:7c:
3d:70:9f:61:d1:81:d1:a5:bd:fd:d7:8e:d0:65:fa:f7:8e:0c:
23:2d:ff:31:c9:7b:e9:60:cc:b3:83:99:59:0f:84:33:c5:5e:
71:42:fe:39:ec:6c:c7:50:68:63:5a:c4:fb:ec:1b:40:e5:06:
81:83:75:7e:db:ff:b7:de:f9:5b:33:ab:74:da:5a:6a:13:2f:
cd:45:b0:bf:1b:29:fa:6b:38:cd:83:0f:74:29:fa:d5:05:26:
42:d9:3a:6b:86:9c:14:1f:d6:dd:c8:db:a4:6d:a3:6b:43:fa:
04:15:6c:dc:bc:76:24:09:e2:72:fe:d0:dd:c9:ea:33:4d:d0:
84:7f:e2:33:6d:f2:65:a6:e8:3d:d3:f3:bb:32:4c:e4:4e:c4:
12:4a:0a:fc:61:96:a6:b9:c9:24:ab:c2:1b:22:3f:15:d3:f1:
9f:4b:b8:21:97:e1:0d:ae:ef:13:0a:26:86:bc:8d:7a:73:67:
ac:9a:74:d4:e4:e0:50:57:55:b8:1a:72:f1:dc:d9:68:70:30:
df:af:b4:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMU1UjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZWU1MWExZGQ2Yzg3NmMzODI0Y2FjYTgzYWU0ZDA5YmFhNzMwYjg3MB4XDTIyMDQy
NTE4MDU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU3YWYyMWVlNzlk
MTQ0YTNhZjA5ZmMxMGVmMjRmZDM2MWVlZjUxMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJceE0KTOoP4+o6+UVXtS9Sh0Y+8pO5EEld2RBPwNxI3vCTv
ESmtNHRKRisyp/Ccmot4lA0xKskQ6fktSJmqMAaIztfgHiw1RuKC+BOISXzgHB1e
diOoqPySmQ7LntTO8NXcTLHgxuYchoOz78MDq/L65HF4LYoGz5rvFL9pVv1/XWQ9
+BgNLq0DwY0/qLmknQqfIV6F22UrDyy1j8VoBb0tbxLf4/SaOk9jLUrlGWL/WZTT
uL8BzbAnCVHhTT4eLIz/aSuxikoyNlrjwN/rcg9ACq+E0un5RVhmgmRtxbZEwIfX
E9D++xpzWj0h8rLx54KdFFUpZ6WC2NeG//RyCX0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFevIe550USjrwn8EO8k/TYe71EzAfBgNVHSMEGDAWgBQO5Rod1sh2w4JM
rKg65NCbqnMLhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0R1VWFIZGJJZHNPQ1RLeW9PdVRRbTZwekM0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvYzFiNGU3LWM0YjgtNGVmMC1iNDA1LWY1YWRkOWQ2ZWZlMC8x
L2hYcnlIdWVkRkVvNjhKX0JEdkpQMDJIdTlSTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
YzFiNGU3LWM0YjgtNGVmMC1iNDA1LWY1YWRkOWQ2ZWZlMC8xL0R1VWFIZGJJZHNP
Q1RLeW9PdVRRbTZwekM0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5EVTANBgkqhkiG9w0BAQsFAAOC
AQEAWa0SVIfeQjYtVfrsYvlgXXoGGXFSLFhitO/5lgicElaNcY+ZpgEabdg0ebNw
0HETKGY5KYN8PXCfYdGB0aW9/deO0GX6944MIy3/Mcl76WDMs4OZWQ+EM8VecUL+
Oexsx1BoY1rE++wbQOUGgYN1ftv/t975WzOrdNpaahMvzUWwvxsp+ms4zYMPdCn6
1QUmQtk6a4acFB/W3cjbpG2ja0P6BBVs3Lx2JAnicv7Q3cnqM03QhH/iM23yZabo
PdPzuzJM5E7EEkoK/GGWprnJJKvCGyI/FdPxn0u4IZfhDa7vEwomhryNenNnrJp0
1OTgUFdVuBpy8dzZaHAw36+0Nw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org