Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/mFwgtiATTjLVVac7N0r7GoKX_y0.roa
File: mFwgtiATTjLVVac7N0r7GoKX_y0.roa (raw, json)
Hash identifier: tamXg+Rag9ZXk7ceMhXthRe/9KvUCj7/aPOLl2g28qc=
Subject key identifier: 98:5C:20:B6:20:13:4E:32:D5:55:A7:3B:37:4A:FB:1A:82:97:FF:2D
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 01322CD7
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/mFwgtiATTjLVVac7N0r7GoKX_y0.roa
Signing time: Fri 18 Mar 2022 18:57:28 +0000
ROA not before: Fri 18 Mar 2022 18:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20065495 (0x1322cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Mar 18 18:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=985c20b620134e32d555a73b374afb1a8297ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:91:e0:d9:4e:78:1b:2d:14:62:66:71:72:
c2:57:d6:d3:02:79:08:d5:08:02:5f:ba:2e:af:e0:
6b:e8:a7:50:e0:3e:ae:a1:d6:00:60:3d:1f:7f:59:
71:e5:17:fa:9b:6f:f1:ff:dc:a3:f2:1c:40:0a:f2:
be:85:64:55:25:04:dc:84:51:12:05:0a:98:f1:e4:
a3:25:25:6d:3a:54:01:58:ad:1f:4e:29:f7:05:67:
13:25:2e:63:49:8b:cc:dd:e6:16:aa:eb:b2:94:9c:
0e:fc:9a:9b:2b:e6:d8:29:b1:04:a3:d0:e8:14:51:
aa:13:9a:a4:af:96:6b:a7:f5:b9:8d:e5:67:02:b7:
41:5a:8e:f4:e2:a9:1f:8b:ee:bf:30:68:1c:0f:cb:
5b:27:d5:bd:b3:49:9e:31:5e:b4:a8:a4:c3:69:d7:
f9:4b:72:75:9a:b5:e3:f4:d3:7e:57:f7:3a:27:bd:
5a:bd:0e:1a:62:16:af:33:d5:54:65:64:f8:8b:9e:
2b:67:b2:92:34:7b:91:b5:4f:c6:bb:32:fe:fb:12:
3f:e0:3f:76:eb:61:d0:0c:26:de:60:af:ce:47:ff:
94:51:9b:46:5b:f1:83:ed:45:93:83:35:65:32:89:
fc:45:9d:cf:70:07:f3:06:94:1d:39:36:2d:86:80:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:20:B6:20:13:4E:32:D5:55:A7:3B:37:4A:FB:1A:82:97:FF:2D
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/mFwgtiATTjLVVac7N0r7GoKX_y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
81:78:2e:b5:39:36:00:a6:05:82:1f:32:3a:11:98:88:cf:e4:
ca:91:ae:55:54:69:38:cf:40:74:30:43:6a:88:6d:4c:82:f2:
d4:ce:99:5b:54:23:73:e8:f1:12:d6:ba:86:2d:6b:64:61:52:
19:f4:c0:ec:f6:d2:8e:13:df:d4:31:72:b8:79:1d:cc:cf:43:
76:3c:2d:20:30:7e:87:3b:37:47:b7:22:6b:2e:4e:b7:6d:8a:
17:22:3b:0a:53:5c:be:64:87:26:44:e7:90:0a:de:de:5d:bf:
c5:cf:37:02:4f:2b:4d:1d:56:79:f0:a8:1e:5f:5f:99:cc:9d:
4c:c6:23:26:a6:84:6d:f3:9c:83:7a:b1:8c:81:cc:14:f2:5b:
b5:d5:67:c4:b0:fd:b9:8f:00:82:e5:5f:58:11:60:3b:0f:a9:
77:a3:49:bb:7a:30:05:ed:e0:b3:ca:d9:34:7e:52:8d:e5:84:
ae:45:f9:0d:f5:74:b4:e9:4c:e4:fc:00:75:66:08:04:f7:8a:
a2:5b:5b:37:4b:f9:2a:8e:be:7a:73:86:a0:91:71:09:7b:b7:
e4:96:02:c8:bb:22:65:3d:9b:6b:27:b2:67:f2:94:27:8a:28:
45:7b:44:2e:d4:ac:5b:a7:e2:a3:3f:24:9c:39:26:43:3e:0a:
15:75:0e:d8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATIs1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjU1ZjA3M2ZmYjA0NzI3ZDE1Y2Q3NTgzOTljNmM2MTNmYWVmMTBlMB4XDTIyMDMx
ODE4NTcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg1YzIwYjYyMDEz
NGUzMmQ1NTVhNzNiMzc0YWZiMWE4Mjk3ZmYyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANu5keDZTngbLRRiZnFywlfW0wJ5CNUIAl+6Lq/ga+inUOA+
rqHWAGA9H39ZceUX+ptv8f/co/IcQAryvoVkVSUE3IRREgUKmPHkoyUlbTpUAVit
H04p9wVnEyUuY0mLzN3mFqrrspScDvyamyvm2CmxBKPQ6BRRqhOapK+Wa6f1uY3l
ZwK3QVqO9OKpH4vuvzBoHA/LWyfVvbNJnjFetKikw2nX+UtydZq14/TTflf3Oie9
Wr0OGmIWrzPVVGVk+IueK2eykjR7kbVPxrsy/vsSP+A/duth0Awm3mCvzkf/lFGb
Rlvxg+1Fk4M1ZTKJ/EWdz3AH8waUHTk2LYaAZG8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYXCC2IBNOMtVVpzs3Svsagpf/LTAfBgNVHSMEGDAWgBRiVfBz/7BHJ9Fc
11g5nGxhP67xDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lsWHdjXy13UnlmUlhOZFlPWnhzWVQtdThRNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvZjlkNTQ3LWM4NmMtNDRkYS1hOWMwLTAwN2U4NGMwZjllNS8x
L21Gd2d0aUFUVGpMVlZhYzdOMHI3R29LWF95MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
ZjlkNTQ3LWM4NmMtNDRkYS1hOWMwLTAwN2U4NGMwZjllNS8xL1lsWHdjXy13Unlm
UlhOZFlPWnhzWVQtdThRNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DGjANBgkqhkiG9w0BAQsFAAOC
AQEAgXgutTk2AKYFgh8yOhGYiM/kypGuVVRpOM9AdDBDaohtTILy1M6ZW1Qjc+jx
Eta6hi1rZGFSGfTA7PbSjhPf1DFyuHkdzM9DdjwtIDB+hzs3R7ciay5Ot22KFyI7
ClNcvmSHJkTnkAre3l2/xc83Ak8rTR1WefCoHl9fmcydTMYjJqaEbfOcg3qxjIHM
FPJbtdVnxLD9uY8AguVfWBFgOw+pd6NJu3owBe3gs8rZNH5SjeWErkX5DfV0tOlM
5PwAdWYIBPeKoltbN0v5Ko6+enOGoJFxCXu35JYCyLsiZT2bayeyZ/KUJ4ooRXtE
LtSsW6fioz8knDkmQz4KFXUO2A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org