Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa
File: G2GZNvT8siHcuSoPanCgHmbk1EM.roa (raw, json)
Hash identifier: CrP0TvPKEDWQo9bVLnt7Ql01iRHTIVgF8dduVza0vzY=
Subject key identifier: 1B:61:99:36:F4:FC:B2:21:DC:B9:2A:0F:6A:70:A0:1E:66:E4:D4:43
Certificate issuer: /CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
Certificate serial: 92575F
Authority key identifier: 40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa
Signing time: Sat 01 Jan 2022 02:55:02 +0000
ROA not before: Sat 01 Jan 2022 02:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.233.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9590623 (0x92575f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
Validity
Not Before: Jan 1 02:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b619936f4fcb221dcb92a0f6a70a01e66e4d443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:a1:9f:5d:b8:00:dd:4a:57:b3:f0:07:88:
64:af:0e:79:97:e6:63:eb:b3:68:a2:16:4e:9c:20:
0e:cd:9a:d2:46:69:b5:92:53:29:a1:84:ff:ec:03:
bb:3b:19:18:86:c8:29:c4:df:67:b3:72:1c:ad:93:
7f:10:b9:da:21:78:45:1e:bb:eb:ba:67:a2:a0:c2:
c7:cd:45:02:5f:b4:10:31:d2:09:4b:2a:96:8a:bb:
ca:51:e0:f9:c9:cd:3b:32:ea:ac:f1:dd:ae:c7:99:
36:8e:fa:33:3e:c2:b3:16:2d:65:e4:0e:a4:84:b9:
24:f5:c8:aa:8b:ea:5f:01:e1:b2:8b:54:9f:09:c6:
05:c7:71:e5:b3:5f:4c:89:1e:43:ef:03:88:40:d0:
0f:bd:6a:7a:c0:75:31:b1:e8:ce:5a:b9:43:82:71:
a0:44:3c:1e:6a:bd:6b:a3:3b:84:32:40:16:43:92:
ad:de:e6:84:df:55:e4:52:9d:97:4e:e0:9c:b3:24:
7d:d3:1b:2f:19:3d:f5:93:9c:39:52:b2:78:b0:f0:
5e:6f:fb:81:22:81:e7:8f:35:af:27:8e:ad:19:dc:
12:c7:27:f6:c0:5e:80:b5:5e:da:89:8b:f0:b3:ab:
20:32:3b:2b:90:34:8f:d9:d0:8b:af:04:f6:79:66:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:99:36:F4:FC:B2:21:DC:B9:2A:0F:6A:70:A0:1E:66:E4:D4:43
X509v3 Authority Key Identifier:
keyid:40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/G2GZNvT8siHcuSoPanCgHmbk1EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:ec:fc:17:51:bd:a3:73:c1:24:fb:09:88:45:5f:e6:2f:
a6:99:6f:97:12:5b:50:69:3d:ec:5e:87:cc:b0:53:28:e4:84:
9c:d3:52:9c:08:5f:54:d0:18:12:f3:80:3a:9c:dd:12:1c:de:
06:50:f3:b3:86:a9:87:67:2f:29:cd:c4:25:7f:7c:83:bc:ad:
c8:21:45:60:a3:19:74:8f:2e:f5:89:a9:b4:71:40:f3:25:c3:
f6:24:d5:b8:c8:a1:9b:8e:3a:8c:f4:fe:ff:49:ac:bd:ef:fc:
9b:3f:77:d3:62:77:cb:e5:a4:16:42:74:32:61:bf:f7:11:68:
89:be:92:a6:e2:9c:56:18:a1:91:26:db:99:82:83:67:fc:a7:
2b:1f:7f:d9:7a:fc:0d:d4:06:d3:e6:fb:85:f5:d5:99:9b:3c:
67:72:16:d2:71:7d:d4:4d:7a:4f:ce:47:5b:2f:0b:64:c2:ad:
3c:62:80:72:84:45:c4:21:93:9c:bc:1d:75:7e:68:9a:00:e4:
18:a6:25:95:76:f0:93:2e:4b:95:29:01:cc:6f:3c:5c:8d:0c:
22:5e:c9:5d:97:66:87:f5:aa:20:a5:23:fc:75:c5:97:22:94:
c0:ef:dc:74:68:29:4f:a1:e8:68:cf:53:d7:00:ee:c1:59:47:
86:b5:66:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJJXXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDFjMDlmZmU3NGIyYmM4MTJlYzk1YTJiZGQxMTU2MTAyM2QxNzc3MB4XDTIyMDEw
MTAyNTUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI2MTk5MzZmNGZj
YjIyMWRjYjkyYTBmNmE3MGEwMWU2NmU0ZDQ0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDGoZ9duADdSlez8AeIZK8OeZfmY+uzaKIWTpwgDs2a0kZp
tZJTKaGE/+wDuzsZGIbIKcTfZ7NyHK2TfxC52iF4RR6767pnoqDCx81FAl+0EDHS
CUsqloq7ylHg+cnNOzLqrPHdrseZNo76Mz7CsxYtZeQOpIS5JPXIqovqXwHhsotU
nwnGBcdx5bNfTIkeQ+8DiEDQD71qesB1MbHozlq5Q4JxoEQ8Hmq9a6M7hDJAFkOS
rd7mhN9V5FKdl07gnLMkfdMbLxk99ZOcOVKyeLDwXm/7gSKB5481ryeOrRncEscn
9sBegLVe2omL8LOrIDI7K5A0j9nQi68E9nlm0b8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQbYZk29PyyIdy5Kg9qcKAeZuTUQzAfBgNVHSMEGDAWgBRAHAn/50sryBLs
laK90RVhAj0XdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FCd0pfLWRMSzhnUzdKV2l2ZEVWWVFJOUYzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvZDhmNmFiLTFjOWUtNDgyZC04Mjk4LTRiMTUwZTk5ODM0YS8x
L0cyR1pOdlQ4c2lIY3VTb1BhbkNnSG1iazFFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
ZDhmNmFiLTFjOWUtNDgyZC04Mjk4LTRiMTUwZTk5ODM0YS8xL1FCd0pfLWRMSzhn
UzdKV2l2ZEVWWVFJOUYzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pJDANBgkqhkiG9w0BAQsFAAOC
AQEAgDHs/BdRvaNzwST7CYhFX+YvpplvlxJbUGk97F6HzLBTKOSEnNNSnAhfVNAY
EvOAOpzdEhzeBlDzs4aph2cvKc3EJX98g7ytyCFFYKMZdI8u9YmptHFA8yXD9iTV
uMihm446jPT+/0msve/8mz9302J3y+WkFkJ0MmG/9xFoib6SpuKcVhihkSbbmYKD
Z/ynKx9/2Xr8DdQG0+b7hfXVmZs8Z3IW0nF91E16T85HWy8LZMKtPGKAcoRFxCGT
nLwddX5omgDkGKYllXbwky5LlSkBzG88XI0MIl7JXZdmh/WqIKUj/HXFlyKUwO/c
dGgpT6HoaM9T1wDuwVlHhrVm+A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org