Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/W47kv18SEDQcUqQ2UWXA3H2oBws.roa
File: W47kv18SEDQcUqQ2UWXA3H2oBws.roa (raw, json)
Hash identifier: dXk870xduVLmCZESKtKR+ix9xyvujqtgyu2mEUq+TUU=
Subject key identifier: 5B:8E:E4:BF:5F:12:10:34:1C:52:A4:36:51:65:C0:DC:7D:A8:07:0B
Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial: 01856DA6487C453027BBE48E8C647BAD3030
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/W47kv18SEDQcUqQ2UWXA3H2oBws.roa
Signing time: Sun 01 Jan 2023 14:04:52 +0000
ROA not before: Sun 01 Jan 2023 14:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209743
IP address blocks: 62.3.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:48:7c:45:30:27:bb:e4:8e:8c:64:7b:ad:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Validity
Not Before: Jan 1 14:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8ee4bf5f1210341c52a4365165c0dc7da8070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:2d:65:d6:f5:e9:45:68:55:af:fe:31:9d:
a7:bf:ac:c0:95:8c:4a:ac:11:9e:d5:76:ad:8b:60:
4c:45:9b:56:66:f2:2d:69:bb:08:fb:7e:7a:bc:ec:
29:34:7e:5b:62:2b:df:f4:ee:b2:0c:15:a3:1d:9b:
36:4c:be:9d:92:ed:49:a9:2f:00:a9:ad:1e:18:89:
ff:3c:d7:2d:de:42:4c:c3:8b:8c:90:b0:1b:72:a0:
5a:fe:ec:af:f2:90:9e:f6:63:4a:a7:73:bc:fe:f8:
90:3f:a2:54:42:e8:68:2f:e2:e1:90:36:83:5d:5c:
3c:6e:d8:7f:69:c0:de:92:58:04:f9:9c:90:cf:ec:
2e:3b:6b:d8:08:7d:11:27:9c:05:43:ba:b3:b6:d1:
4d:a9:85:79:fc:42:b1:7f:23:49:37:b7:1e:53:d1:
f3:46:8b:71:ea:26:e5:40:7d:60:a6:93:cb:e7:a4:
3d:08:24:f9:a2:0e:8f:c9:75:86:6d:a0:ba:9c:ad:
de:55:61:ad:44:f1:e6:c1:1a:30:e4:ac:bf:b2:fd:
8c:7e:d1:e7:70:f1:9e:39:78:8f:48:8a:ac:e4:19:
d2:7c:62:d7:c1:6e:34:7c:cc:5c:aa:b4:d4:c9:da:
e1:55:78:8e:8a:4d:6e:e0:31:4d:3d:1c:71:6a:5b:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:E4:BF:5F:12:10:34:1C:52:A4:36:51:65:C0:DC:7D:A8:07:0B
X509v3 Authority Key Identifier:
keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/W47kv18SEDQcUqQ2UWXA3H2oBws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.30.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0b:ed:ac:af:b3:dd:79:b5:32:a6:30:dd:d1:dc:ff:01:d4:
e8:00:d8:f9:b7:61:2e:04:09:a4:bd:a2:88:cb:79:7e:a3:f6:
e9:27:15:6a:8b:98:7d:4c:f4:08:6d:f6:7b:66:c1:51:02:d8:
a0:eb:e6:1a:26:8d:f7:3c:a5:f2:d8:a9:40:b6:8c:19:f3:af:
7f:c1:1d:48:a4:9e:7b:4a:94:ad:c9:86:dd:b1:cc:8b:0b:7d:
03:e1:ca:6d:fb:4a:d6:8c:0c:18:1e:c1:6f:0b:89:52:5d:33:
94:f6:fd:0c:bd:0a:97:b4:24:a0:e1:c5:82:19:0f:47:d9:c5:
c1:73:d9:00:5d:39:d4:9b:43:39:84:60:54:81:8b:86:dd:6f:
cd:1c:da:ce:07:a5:5c:59:b6:a5:02:64:49:3d:75:c5:5d:39:
57:d8:70:fe:c5:02:ea:d3:71:ed:ad:33:4e:57:e3:a2:4b:fa:
de:9f:94:b7:d1:01:3d:22:38:05:1e:63:07:e4:39:fd:e5:f3:
6b:92:cd:98:2b:80:ee:ae:b2:43:c0:51:92:fe:fd:a7:c4:c4:
c7:24:cb:e5:de:81:d7:5f:6d:f8:54:82:e6:2f:d0:00:d8:43:
10:41:96:99:1a:36:6a:a9:63:0e:ae:08:85:65:64:49:fb:4c:
15:fd:f4:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtpkh8RTAnu+SOjGR7rTAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTcxZTJiZGI0MTEyZWM1ZDZiM2E2NGJiMTdiZjBiMjgw
ZmU2ZTEwHhcNMjMwMTAxMTQwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjhlZTRiZjVmMTIxMDM0MWM1MmE0MzY1MTY1YzBkYzdkYTgwNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopktZdb16UVoVa/+MZ2nv6zAlYxK
rBGe1Xati2BMRZtWZvItabsI+356vOwpNH5bYivf9O6yDBWjHZs2TL6dku1JqS8A
qa0eGIn/PNct3kJMw4uMkLAbcqBa/uyv8pCe9mNKp3O8/viQP6JUQuhoL+LhkDaD
XVw8bth/acDeklgE+ZyQz+wuO2vYCH0RJ5wFQ7qzttFNqYV5/EKxfyNJN7ceU9Hz
Rotx6iblQH1gppPL56Q9CCT5og6PyXWGbaC6nK3eVWGtRPHmwRow5Ky/sv2MftHn
cPGeOXiPSIqs5BnSfGLXwW40fMxcqrTUydrhVXiOik1u4DFNPRxxals7yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuO5L9fEhA0HFKkNlFlwNx9qAcLMB8GA1UdIwQY
MBaAFB1XHivbQRLsXWs6ZLsXvwsoD+bhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUt
ZGIyNTcyZGFjYjQ1LzEvVzQ3a3YxOFNFRFFjVXFRMlVXWEEzSDJvQndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUtZGIyNTcyZGFjYjQ1
LzEvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMeMA0G
CSqGSIb3DQEBCwUAA4IBAQBiC+2sr7PdebUypjDd0dz/AdToANj5t2EuBAmkvaKI
y3l+o/bpJxVqi5h9TPQIbfZ7ZsFRAtig6+YaJo33PKXy2KlAtowZ869/wR1IpJ57
SpStyYbdscyLC30D4cpt+0rWjAwYHsFvC4lSXTOU9v0MvQqXtCSg4cWCGQ9H2cXB
c9kAXTnUm0M5hGBUgYuG3W/NHNrOB6VcWbalAmRJPXXFXTlX2HD+xQLq03HtrTNO
V+OiS/ren5S30QE9IjgFHmMH5Dn95fNrks2YK4DurrJDwFGS/v2nxMTHJMvl3oHX
X234VILmL9AA2EMQQZaZGjZqqWMOrgiFZWRJ+0wV/fSn
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:15 2025 by rpki-client