Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/61sMhidnIYzulLUoTTHkQ9qtHao.roa
File: 61sMhidnIYzulLUoTTHkQ9qtHao.roa (raw, json)
Hash identifier: owdlaEFaMKSE+ChP+gWYhtqfiGx2aBK+2PTb9PCN0O4=
Subject key identifier: EB:5B:0C:86:27:67:21:8C:EE:94:B5:28:4D:31:E4:43:DA:AD:1D:AA
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0353FFC6
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/61sMhidnIYzulLUoTTHkQ9qtHao.roa
Signing time: Wed 22 Jun 2022 05:29:44 +0000
ROA not before: Wed 22 Jun 2022 05:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.15.152.0/24 maxlen: 24
185.65.68.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55836614 (0x353ffc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 22 05:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb5b0c862767218cee94b5284d31e443daad1daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:77:7a:97:f8:60:db:ed:fb:dd:62:0a:ee:
c8:42:d9:1f:88:d2:2a:11:4f:69:08:c1:2f:41:9d:
6b:2a:cb:25:6f:e6:4e:4c:b6:d9:f2:af:2f:de:9d:
25:e8:77:a4:f8:ca:f8:53:c2:bc:cf:5e:61:21:3f:
36:fb:0f:47:2d:b2:c3:8d:f0:32:d2:4a:85:38:22:
a5:00:92:a1:a4:39:ed:1e:f9:d6:05:2b:54:12:b8:
b1:6a:50:ba:cb:5b:c9:2e:05:aa:a8:ee:47:3f:46:
02:01:fc:20:56:10:35:1b:79:e6:34:2d:45:94:66:
a9:27:91:33:7a:dc:65:f2:bc:c4:41:fc:cc:ee:28:
17:84:92:fd:2d:dc:4c:21:d7:71:e6:00:b4:39:9b:
5e:69:79:23:1b:73:f2:0a:4c:33:dc:8f:99:36:ed:
3c:88:bd:fd:4c:e7:78:2f:08:57:ff:b5:d4:39:07:
ec:2e:a1:89:1f:f2:d7:bb:07:b2:ff:f2:df:a0:85:
19:10:53:19:19:ad:16:a3:d4:8f:ca:0c:e4:13:da:
3a:79:4a:fc:7e:80:93:ac:f1:c5:5e:35:86:88:d8:
fa:fb:8a:de:9b:b7:53:4b:b9:42:98:7c:fa:ef:94:
52:29:38:2f:ae:d1:9b:20:e2:4a:c5:b2:6c:2c:07:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:0C:86:27:67:21:8C:EE:94:B5:28:4D:31:E4:43:DA:AD:1D:AA
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/61sMhidnIYzulLUoTTHkQ9qtHao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.68.0/24
194.15.152.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:c0:12:34:2c:77:9c:b8:45:d6:0d:01:68:77:c8:87:e9:6d:
64:2c:42:a5:fa:5d:54:4e:52:fc:d6:94:2c:b3:4d:7b:91:d6:
f4:96:e1:3b:10:60:7e:c1:1c:bd:bd:b0:34:9b:bd:88:e8:38:
9d:74:0b:3c:dd:15:e6:58:f3:11:8d:c5:ec:5b:8c:76:f5:14:
36:a5:e1:91:7e:fb:e5:75:79:8c:d0:64:87:6b:6a:23:c9:57:
ed:37:92:da:7b:8f:34:3f:20:2b:47:c5:27:34:6d:fc:c2:26:
1c:68:5c:fd:f3:16:42:12:ab:95:63:be:d1:60:96:51:23:e4:
ea:68:88:02:83:95:d4:d6:eb:7d:f6:ff:2c:52:66:36:57:e2:
ef:09:0f:1b:d1:13:70:d7:c2:cd:95:64:a8:c8:a0:98:c3:29:
89:c5:c0:99:97:de:1b:00:7b:5b:c1:ea:ec:95:2b:ce:16:f2:
a5:48:2e:d7:17:f0:5e:a8:4b:31:eb:f5:77:14:07:c1:6f:90:
1d:cf:68:1e:70:70:1b:f6:8f:08:4e:87:58:d7:15:ca:cc:8d:
f2:9c:8c:61:96:f3:15:67:c5:17:c8:8a:d0:3f:c2:27:00:a3:
16:0c:ff:d0:99:af:0d:c9:94:c1:2b:bc:bb:70:e8:7b:76:38:
37:9a:d7:4c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA1P/xjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzRlZDk0MmU1Yzc0MmU3N2JmYjliZWI5NTRmODcyNTM0ZjUyODQ4MB4XDTIyMDYy
MjA1Mjk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWI1YjBjODYyNzY3
MjE4Y2VlOTRiNTI4NGQzMWU0NDNkYWFkMWRhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKP5d3qX+GDb7fvdYgruyELZH4jSKhFPaQjBL0GdayrLJW/m
Tky22fKvL96dJeh3pPjK+FPCvM9eYSE/NvsPRy2yw43wMtJKhTgipQCSoaQ57R75
1gUrVBK4sWpQustbyS4FqqjuRz9GAgH8IFYQNRt55jQtRZRmqSeRM3rcZfK8xEH8
zO4oF4SS/S3cTCHXceYAtDmbXml5Ixtz8gpMM9yPmTbtPIi9/UzneC8IV/+11DkH
7C6hiR/y17sHsv/y36CFGRBTGRmtFqPUj8oM5BPaOnlK/H6Ak6zxxV41hojY+vuK
3pu3U0u5Qph8+u+UUik4L67RmyDiSsWybCwHH/8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTrWwyGJ2chjO6UtShNMeRD2q0dqjAfBgNVHSMEGDAWgBQ8TtlC5cdC53v7
m+uVT4clNPUoSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BFN1pRdVhIUXVkNy01dnJsVS1ISlRUMUtFZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvMWJiNDVhLTU1MWMtNDk2Ny05NWNhLTc3MzQ0YmNjOTE5MS8x
LzYxc01oaWRuSVl6dWxMVW9UVEhrUTlxdEhhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
MWJiNDVhLTU1MWMtNDk2Ny05NWNhLTc3MzQ0YmNjOTE5MS8xL1BFN1pRdVhIUXVk
Ny01dnJsVS1ISlRUMUtFZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALlBRAMEAcIPmDANBgkqhkiG9w0B
AQsFAAOCAQEAKsASNCx3nLhF1g0BaHfIh+ltZCxCpfpdVE5S/NaULLNNe5HW9Jbh
OxBgfsEcvb2wNJu9iOg4nXQLPN0V5ljzEY3F7FuMdvUUNqXhkX775XV5jNBkh2tq
I8lX7TeS2nuPND8gK0fFJzRt/MImHGhc/fMWQhKrlWO+0WCWUSPk6miIAoOV1Nbr
ffb/LFJmNlfi7wkPG9ETcNfCzZVkqMigmMMpicXAmZfeGwB7W8Hq7JUrzhbypUgu
1xfwXqhLMev1dxQHwW+QHc9oHnBwG/aPCE6HWNcVysyN8pyMYZbzFWfFF8iK0D/C
JwCjFgz/0JmvDcmUwSu8u3Doe3Y4N5rXTA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org