Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/bqDDsebSkHRH_KLbxhY6eda_Wkc.roa
File: bqDDsebSkHRH_KLbxhY6eda_Wkc.roa (raw, json)
Hash identifier: ry/rrnTdzi2yYI6ggpb0Ubj5C8guLOONH4Sz575izyY=
Subject key identifier: 6E:A0:C3:B1:E6:D2:90:74:47:FC:A2:DB:C6:16:3A:79:D6:BF:5A:47
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 0F5B4347
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/bqDDsebSkHRH_KLbxhY6eda_Wkc.roa
Signing time: Sat 01 Jan 2022 15:06:25 +0000
ROA not before: Sat 01 Jan 2022 15:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 141.62.0.0/16 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257639239 (0xf5b4347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Jan 1 15:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ea0c3b1e6d2907447fca2dbc6163a79d6bf5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:88:ab:92:50:c4:f7:90:a2:c5:0a:a4:e5:
f7:0b:d8:84:e0:32:60:25:90:67:d5:4c:e5:08:9c:
9c:f1:5f:4a:ef:19:a8:e8:4c:bb:80:76:49:7e:94:
40:66:f9:54:e2:c8:b1:ee:4b:87:4d:07:0d:dc:84:
ea:e2:0b:3b:fd:18:fb:ee:3b:e7:a2:8b:83:1a:7e:
ed:3d:80:31:a9:d0:df:c9:6b:fb:5d:48:00:64:f3:
c4:21:93:aa:84:e3:dd:d2:02:0f:48:20:39:ac:78:
e3:a1:3f:3e:41:97:fd:a0:03:5f:8b:9d:12:84:8f:
88:b0:c3:1b:3d:94:96:72:c5:50:3a:b6:6c:f7:12:
91:d6:8e:30:7d:9b:b8:e7:e3:8f:93:c5:2d:1d:54:
07:98:98:f6:dc:22:0e:c9:89:d0:09:d3:7f:0a:81:
b5:7c:5e:10:cd:4b:fa:27:e6:ce:0b:0e:5a:85:4d:
ff:11:ad:e2:ac:88:58:bc:f7:06:e0:a8:63:a7:50:
bf:73:30:01:59:51:bd:04:a7:1a:e0:c3:0a:7b:49:
20:d5:aa:c5:06:0a:4e:45:ac:d6:42:e3:f6:73:f3:
3e:36:d3:15:b1:06:9f:cc:ea:f4:4c:9a:22:d1:ac:
75:95:b4:e2:f1:f7:a0:f6:1e:9e:4b:56:33:b6:f1:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:C3:B1:E6:D2:90:74:47:FC:A2:DB:C6:16:3A:79:D6:BF:5A:47
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/bqDDsebSkHRH_KLbxhY6eda_Wkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:19:e8:76:6e:e0:d6:b8:b4:82:64:8f:d0:23:88:a2:b9:7e:
b5:a1:69:2d:48:c5:06:b5:50:19:73:22:93:18:c2:15:d1:64:
d9:1d:46:6c:4f:91:10:15:d1:8a:ec:3e:70:ed:ad:6d:9f:72:
9e:a7:7c:4a:62:ba:48:9a:ba:df:8d:b5:39:e7:15:1c:78:ac:
96:68:da:cd:ea:01:99:3f:75:4a:18:60:95:be:e1:26:83:f7:
18:af:02:9f:9b:e4:45:4d:f2:9b:84:0a:47:0a:2b:9d:57:8c:
41:96:07:41:e5:44:44:55:aa:01:b7:31:21:1d:78:1d:d8:51:
af:c4:29:69:9b:ae:ca:4c:c4:72:23:c5:7d:6f:0b:bb:02:9d:
e2:ef:22:3a:40:d8:6a:16:39:02:1f:76:83:71:5e:86:ee:50:
ea:e6:d3:49:e2:58:f0:7e:7b:ff:c9:cc:4a:7a:fb:7a:ed:fd:
c1:0c:40:da:60:34:78:6d:4f:85:ee:af:cf:df:6a:e2:ae:ac:
54:3f:1f:a3:91:9c:57:d3:b6:de:a0:f4:74:1e:89:fa:08:0b:
23:cb:cd:f6:e7:4c:dc:d3:50:8a:b2:02:44:81:d1:ad:9a:9b:
d5:8c:45:1a:63:b1:6f:a6:8a:5a:34:db:d5:64:dc:8f:53:0f:
46:e8:a3:5b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIED1tDRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
N2Y1MWEyNWQyZjM5MjI1MjRhNmE2OWIxZDdkNjFjZDNjYzJhOGRhMB4XDTIyMDEw
MTE1MDYyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVhMGMzYjFlNmQy
OTA3NDQ3ZmNhMmRiYzYxNjNhNzlkNmJmNWE0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/2iKuSUMT3kKLFCqTl9wvYhOAyYCWQZ9VM5QicnPFfSu8Z
qOhMu4B2SX6UQGb5VOLIse5Lh00HDdyE6uILO/0Y++4756KLgxp+7T2AManQ38lr
+11IAGTzxCGTqoTj3dICD0ggOax446E/PkGX/aADX4udEoSPiLDDGz2UlnLFUDq2
bPcSkdaOMH2buOfjj5PFLR1UB5iY9twiDsmJ0AnTfwqBtXxeEM1L+ifmzgsOWoVN
/xGt4qyIWLz3BuCoY6dQv3MwAVlRvQSnGuDDCntJINWqxQYKTkWs1kLj9nPzPjbT
FbEGn8zq9EyaItGsdZW04vH3oPYenktWM7bxTh8CAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBRuoMOx5tKQdEf8otvGFjp51r9aRzAfBgNVHSMEGDAWgBRn9Rol0vOSJSSm
ppsdfWHNPMKo2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pfVWFKZEx6a2lVa3BxYWJIWDFoelR6Q3FOby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWMvNTQ0YzM5LTBlZjctNDFhYi1iMTU2LTU2MjZiNTRkMWEyMS8x
L2JxRERzZWJTa0hSSF9LTGJ4aFk2ZWRhX1drYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMv
NTQ0YzM5LTBlZjctNDFhYi1iMTU2LTU2MjZiNTRkMWEyMS8xL1pfVWFKZEx6a2lV
a3BxYWJIWDFoelR6Q3FOby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAI0+MA0GCSqGSIb3DQEBCwUAA4IB
AQC9Geh2buDWuLSCZI/QI4iiuX61oWktSMUGtVAZcyKTGMIV0WTZHUZsT5EQFdGK
7D5w7a1tn3Kep3xKYrpImrrfjbU55xUceKyWaNrN6gGZP3VKGGCVvuEmg/cYrwKf
m+RFTfKbhApHCiudV4xBlgdB5UREVaoBtzEhHXgd2FGvxClpm67KTMRyI8V9bwu7
Ap3i7yI6QNhqFjkCH3aDcV6G7lDq5tNJ4ljwfnv/ycxKevt67f3BDEDaYDR4bU+F
7q/P32rirqxUPx+jkZxX07beoPR0Hon6CAsjy83250zc01CKsgJEgdGtmpvVjEUa
Y7FvpopaNNvVZNyPUw9G6KNb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:02 2024 by rpki-client on console-ams.rpki-client.org