Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/D-3MXJPwg5rfAQlbLJsIJSFkugM.roa
File: D-3MXJPwg5rfAQlbLJsIJSFkugM.roa (raw, json)
Hash identifier: YER77bWEyomH2kfw41Qbvl3dt6tfpxHhE8PwUOPW1ZM=
Subject key identifier: 0F:ED:CC:5C:93:F0:83:9A:DF:01:09:5B:2C:9B:08:25:21:64:BA:03
Certificate issuer: /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial: 83D9A4
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/D-3MXJPwg5rfAQlbLJsIJSFkugM.roa
Signing time: Sat 01 Jan 2022 02:01:53 +0000
ROA not before: Sat 01 Jan 2022 02:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8640932 (0x83d9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308e4f050668d45e3918384500b175a87680199c
Validity
Not Before: Jan 1 02:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fedcc5c93f0839adf01095b2c9b08252164ba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:9c:07:d9:88:fb:bc:b9:fb:c7:c5:f9:cb:
49:47:3e:ef:06:c3:07:e3:b7:87:b5:c1:21:de:96:
f4:7a:23:a0:c2:6a:af:3c:b7:8a:e9:a9:7b:1a:dc:
1b:c5:d1:b7:1e:f7:6e:1c:d1:36:f5:b8:2f:b9:ae:
cc:55:33:4d:04:dd:63:d0:05:67:7a:76:34:02:6b:
e5:41:8d:8b:0a:92:17:b0:cd:93:48:39:7d:d0:11:
75:bd:9e:5b:ae:c7:a4:7d:c9:7a:3b:9a:84:32:1a:
2f:24:23:da:ff:f2:5c:60:48:5f:b1:b8:77:c8:00:
ff:f6:5d:66:2c:5a:0c:69:c0:67:fb:49:90:29:4b:
b1:f7:b4:bc:74:08:02:56:0c:8b:d2:9a:b2:98:24:
0e:5f:d3:06:92:7b:ba:56:32:7f:35:75:2a:05:c2:
d7:6e:4f:02:e8:ec:2d:b3:e4:a8:2e:0a:c2:5f:1a:
4b:d0:68:d6:74:12:e1:c0:6a:0a:eb:21:b6:0a:e9:
17:2e:dc:7a:70:96:54:4a:c4:ce:d5:bf:ab:5c:02:
ef:62:c1:1f:a4:d1:85:d8:95:2d:80:25:93:40:a6:
a6:ba:9f:7a:65:c7:54:51:c8:56:b2:6a:9e:ae:e2:
b9:cc:09:60:c7:73:d2:b6:82:40:87:38:bd:f8:8a:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:ED:CC:5C:93:F0:83:9A:DF:01:09:5B:2C:9B:08:25:21:64:BA:03
X509v3 Authority Key Identifier:
keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/D-3MXJPwg5rfAQlbLJsIJSFkugM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b3:f3:7b:3a:6b:10:bf:71:35:0f:eb:84:b6:c8:0b:e9:18:
eb:03:18:bc:e9:47:60:13:c2:0a:99:86:7b:30:dd:f2:83:b2:
7e:d2:18:38:09:aa:ba:d4:69:ac:74:77:62:d0:c4:ae:70:43:
2d:c3:0e:a7:ce:66:0c:f6:6e:0c:25:b6:cb:89:16:51:10:74:
4f:6a:e5:67:d2:84:87:43:95:53:73:81:cc:c9:99:bd:c8:89:
ad:d8:1f:c9:d7:df:59:b7:a8:12:5b:39:0c:67:77:77:ef:65:
d5:a5:82:e4:21:c6:09:02:03:29:28:99:b3:70:3f:e7:cd:44:
50:15:86:cf:d8:52:c8:e1:d0:9e:3f:27:68:c4:00:ca:92:ca:
ae:9e:94:42:65:d8:9c:3e:33:41:81:f1:ba:4e:02:3a:52:e7:
79:ac:55:12:c9:4f:67:6a:d1:bf:1f:f7:3f:ce:91:52:e9:a7:
14:99:9b:63:d2:06:14:fa:01:fa:d0:fb:91:99:cf:d7:1a:da:
23:da:56:2c:36:31:f5:be:ec:28:47:72:08:7d:6c:dc:c3:ea:
7b:91:ef:d9:58:25:eb:dc:49:d2:d1:23:4f:2e:7d:c6:62:60:
8e:fc:63:ef:af:06:a0:2a:e3:cf:a2:bc:68:f6:1b:68:83:d9:
07:c4:77:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIPZpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDhlNGYwNTA2NjhkNDVlMzkxODM4NDUwMGIxNzVhODc2ODAxOTljMB4XDTIyMDEw
MTAyMDE1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGZlZGNjNWM5M2Yw
ODM5YWRmMDEwOTViMmM5YjA4MjUyMTY0YmEwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANi3nAfZiPu8ufvHxfnLSUc+7wbDB+O3h7XBId6W9HojoMJq
rzy3iumpexrcG8XRtx73bhzRNvW4L7muzFUzTQTdY9AFZ3p2NAJr5UGNiwqSF7DN
k0g5fdARdb2eW67HpH3JejuahDIaLyQj2v/yXGBIX7G4d8gA//ZdZixaDGnAZ/tJ
kClLsfe0vHQIAlYMi9KaspgkDl/TBpJ7ulYyfzV1KgXC125PAujsLbPkqC4Kwl8a
S9Bo1nQS4cBqCushtgrpFy7cenCWVErEztW/q1wC72LBH6TRhdiVLYAlk0Cmprqf
emXHVFHIVrJqnq7iucwJYMdz0raCQIc4vfiKEQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQP7cxck/CDmt8BCVssmwglIWS6AzAfBgNVHSMEGDAWgBQwjk8FBmjUXjkY
OEUAsXWodoAZnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01JNVBCUVpvMUY0NUdEaEZBTEYxcUhhQUdady5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvZGRlZDljLTg1NDgtNDRlZi05MTllLTVmYzcyYmJiYzE5Mi8x
L0QtM01YSlB3ZzVyZkFRbGJMSnNJSlNGa3VnTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
ZGRlZDljLTg1NDgtNDRlZi05MTllLTVmYzcyYmJiYzE5Mi8xL01JNVBCUVpvMUY0
NUdEaEZBTEYxcUhhQUdady5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MJTANBgkqhkiG9w0BAQsFAAOC
AQEAcrPzezprEL9xNQ/rhLbIC+kY6wMYvOlHYBPCCpmGezDd8oOyftIYOAmqutRp
rHR3YtDErnBDLcMOp85mDPZuDCW2y4kWURB0T2rlZ9KEh0OVU3OBzMmZvciJrdgf
ydffWbeoEls5DGd3d+9l1aWC5CHGCQIDKSiZs3A/581EUBWGz9hSyOHQnj8naMQA
ypLKrp6UQmXYnD4zQYHxuk4COlLneaxVEslPZ2rRvx/3P86RUumnFJmbY9IGFPoB
+tD7kZnP1xraI9pWLDYx9b7sKEdyCH1s3MPqe5Hv2Vgl69xJ0tEjTy59xmJgjvxj
768GoCrjz6K8aPYbaIPZB8R3tQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-ams.rpki-client.org