Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_H9UEZc3X3PTvAUoHd35yR7wVf4.roa
File: _H9UEZc3X3PTvAUoHd35yR7wVf4.roa (raw, json)
Hash identifier: P75LFPp6viCZl6OE7XTmC3ODRTe9W2WOFAYj4DowOFw=
Subject key identifier: FC:7F:54:11:97:37:5F:73:D3:BC:05:28:1D:DD:F9:C9:1E:F0:55:FE
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 175FA213
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_H9UEZc3X3PTvAUoHd35yR7wVf4.roa
Signing time: Sat 01 Jan 2022 09:54:01 +0000
ROA not before: Sat 01 Jan 2022 09:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35247
IP address blocks: 62.228.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392143379 (0x175fa213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc7f541197375f73d3bc05281dddf9c91ef055fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:f6:7e:6a:4f:b0:3a:8c:69:d2:c1:a0:f4:
8f:be:9c:4e:bd:a4:df:ba:b0:02:a4:3f:67:db:fa:
20:cc:15:bb:ac:25:4a:75:bf:b7:28:79:eb:9f:95:
00:53:70:41:34:08:ff:91:f3:f6:62:14:87:06:15:
80:e7:cf:65:ab:f4:2d:84:45:18:c4:6d:90:10:ef:
6b:1b:e2:7a:aa:bb:df:a6:62:ce:a6:2b:2f:e8:e2:
a2:81:87:73:d9:ac:47:10:6c:d6:7c:cf:cc:e5:db:
ca:dc:0a:2f:08:ea:b2:d6:15:d1:68:34:1e:7d:a5:
3d:ca:77:23:e2:7f:ad:51:44:b4:36:65:74:bf:21:
96:dc:ff:ca:00:83:dd:cf:dd:df:87:90:68:d3:f8:
f3:a2:61:cb:05:af:75:88:65:af:06:bd:23:bd:c9:
24:01:a4:63:78:5e:3b:aa:31:94:a6:5f:d8:af:71:
2c:a2:54:00:02:d8:aa:3e:88:85:79:82:c1:93:14:
f4:ab:3c:a5:fc:dc:32:e2:aa:9d:24:ba:bc:4f:1f:
df:02:0b:89:bd:40:81:cf:b6:ef:16:59:4e:32:b9:
79:5e:c7:25:7d:fe:6e:62:55:7e:39:e7:72:ab:ed:
e1:b5:af:85:e5:bb:ef:7a:23:85:8e:39:af:56:c8:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:54:11:97:37:5F:73:D3:BC:05:28:1D:DD:F9:C9:1E:F0:55:FE
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_H9UEZc3X3PTvAUoHd35yR7wVf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d4:8e:24:b8:a9:cf:0d:58:9d:4a:54:c8:69:88:a6:67:1e:
4f:73:1f:ca:20:c2:1f:67:b9:d9:05:83:54:26:ac:36:a5:0f:
a1:52:8c:ce:35:79:f6:f9:a3:56:df:48:23:71:93:7a:c2:ea:
e2:8f:2d:5c:0a:74:50:36:2b:f4:26:c5:a2:8c:f6:ac:04:2e:
32:78:8b:60:7d:dd:00:8f:f4:84:b5:b9:5d:73:2e:51:64:45:
e2:1b:d1:22:46:5c:c7:30:7a:2c:20:f7:e2:38:e5:97:29:4b:
c6:ff:6f:cb:8a:83:c1:77:23:7b:73:6c:b2:84:51:fd:07:f9:
27:d9:22:c1:79:ac:49:55:03:42:94:02:af:e2:09:80:22:99:
b2:e0:03:6d:62:c6:fe:24:5f:f0:4c:f1:27:17:6c:c3:c0:61:
2d:07:86:22:52:f7:bb:e0:5a:cf:17:3d:4f:91:c2:36:6f:4c:
17:3b:bd:8c:42:2c:58:90:60:9e:be:f7:95:b0:4f:40:36:f4:
86:53:82:e7:44:70:1e:04:3a:87:98:8f:93:97:44:a2:a4:30:
38:e7:c1:44:1b:18:7b:45:3d:2a:de:f5:41:b9:dc:c0:65:4b:
ac:72:a1:b4:c8:e8:07:c1:70:a5:1f:ab:14:ed:46:72:89:c1:
6b:b0:5d:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF1+iEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDExYWJjNGMwNDY4YWIyODkxZWFhY2FkYmEwZGMwMzc3OTM2ZmQ1MB4XDTIyMDEw
MTA5NTQwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM3ZjU0MTE5NzM3
NWY3M2QzYmMwNTI4MWRkZGY5YzkxZWYwNTVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJW39n5qT7A6jGnSwaD0j76cTr2k37qwAqQ/Z9v6IMwVu6wl
SnW/tyh565+VAFNwQTQI/5Hz9mIUhwYVgOfPZav0LYRFGMRtkBDvaxvieqq736Zi
zqYrL+jiooGHc9msRxBs1nzPzOXbytwKLwjqstYV0Wg0Hn2lPcp3I+J/rVFEtDZl
dL8hltz/ygCD3c/d34eQaNP486JhywWvdYhlrwa9I73JJAGkY3heO6oxlKZf2K9x
LKJUAALYqj6IhXmCwZMU9Ks8pfzcMuKqnSS6vE8f3wILib1Agc+27xZZTjK5eV7H
JX3+bmJVfjnncqvt4bWvheW773ojhY45r1bIs/ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT8f1QRlzdfc9O8BSgd3fnJHvBV/jAfBgNVHSMEGDAWgBTUEavEwEaKsoke
qsrboNwDd5Nv1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFCR3J4TUJHaXJLSkhxcksyNkRjQTNlVGI5VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8x
L19IOVVFWmMzWDNQVHZBVW9IZDM1eVI3d1ZmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8xLzFCR3J4TUJHaXJL
SkhxcksyNkRjQTNlVGI5VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7k6DANBgkqhkiG9w0BAQsFAAOC
AQEAPNSOJLipzw1YnUpUyGmIpmceT3MfyiDCH2e52QWDVCasNqUPoVKMzjV59vmj
Vt9II3GTesLq4o8tXAp0UDYr9CbFooz2rAQuMniLYH3dAI/0hLW5XXMuUWRF4hvR
IkZcxzB6LCD34jjllylLxv9vy4qDwXcje3NssoRR/Qf5J9kiwXmsSVUDQpQCr+IJ
gCKZsuADbWLG/iRf8EzxJxdsw8BhLQeGIlL3u+Bazxc9T5HCNm9MFzu9jEIsWJBg
nr73lbBPQDb0hlOC50RwHgQ6h5iPk5dEoqQwOOfBRBsYe0U9Kt71QbncwGVLrHKh
tMjoB8FwpR+rFO1GconBa7Bd5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org