Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/c62Spird6rOLBMpuKdPsco04PIQ.roa
File: c62Spird6rOLBMpuKdPsco04PIQ.roa (raw, json)
Hash identifier: eaLJkFbmjppRWgIDRWDe++8G9tU6aXXlBuIvUTSvt+g=
Subject key identifier: 73:AD:92:A6:2A:DD:EA:B3:8B:04:CA:6E:29:D3:EC:72:8D:38:3C:84
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 0791D1F1
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/c62Spird6rOLBMpuKdPsco04PIQ.roa
Signing time: Thu 27 Jan 2022 05:28:02 +0000
ROA not before: Thu 27 Jan 2022 05:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47655
IP address blocks: 176.111.72.0/24 maxlen: 24
194.152.35.0/24 maxlen: 24
176.111.74.0/24 maxlen: 24
194.152.34.0/23 maxlen: 23
176.111.73.0/24 maxlen: 24
176.111.72.0/21 maxlen: 21
2001:67c:2760::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126996977 (0x791d1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Jan 27 05:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73ad92a62addeab38b04ca6e29d3ec728d383c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:e9:4c:e9:bf:05:75:f4:4b:69:4c:6e:73:
9d:0c:b2:02:9a:f1:75:02:16:fd:4d:d3:6f:7e:84:
5b:a6:7f:b6:04:2d:31:03:42:80:a1:12:60:22:f4:
c7:ad:07:f2:5a:ad:c8:f9:14:2a:e2:8d:6d:c8:f5:
56:2a:fc:4b:65:94:b5:06:bd:24:f1:80:e3:1a:a5:
17:63:54:55:95:5d:61:2c:6e:f0:26:b8:f5:b8:6e:
2a:f8:a6:12:02:57:81:06:20:9b:6f:7c:78:e5:2e:
8f:8e:dc:f8:8e:0f:d7:0a:43:71:0a:e5:7a:46:5f:
5d:52:82:18:02:c4:6b:10:87:d9:bb:51:02:de:cb:
35:c9:2f:72:5b:13:d5:28:0e:62:91:38:1d:84:66:
4c:be:18:28:ac:2b:ec:c8:40:9f:9d:9f:33:6d:8f:
0f:99:bf:89:23:71:fa:5c:75:2d:28:e8:bd:2b:bd:
90:0c:15:94:5c:ff:5a:7b:da:8f:1c:8e:a4:2f:44:
c2:7f:d4:77:d2:97:2e:36:7a:75:80:04:33:41:af:
14:a0:16:9f:0b:68:8f:08:e5:fe:e8:8c:b6:47:5a:
3d:1d:4d:9c:6c:9b:4f:9d:3b:01:9c:3e:db:df:73:
50:b8:24:48:38:8f:78:3d:5f:06:58:41:4e:df:8d:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:92:A6:2A:DD:EA:B3:8B:04:CA:6E:29:D3:EC:72:8D:38:3C:84
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/c62Spird6rOLBMpuKdPsco04PIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.72.0/21
194.152.34.0/23
IPv6:
2001:67c:2760::/48
Signature Algorithm: sha256WithRSAEncryption
29:42:fd:4b:d4:f2:c0:84:87:32:5a:3c:61:bb:3c:72:81:06:
29:db:fb:b9:d2:6a:b4:21:6d:2d:56:f5:0a:43:05:a3:24:69:
2b:4f:9b:4e:51:e3:ee:bd:5b:8c:c0:eb:26:39:d5:fa:4a:87:
ca:08:4c:1e:dd:4b:28:4a:c4:b6:32:6a:43:19:72:d1:bc:d1:
6c:15:8c:03:66:ff:85:cb:c3:3a:82:7c:61:80:50:74:79:85:
3d:d9:32:53:f4:63:fa:60:17:c1:50:d4:85:86:6b:f9:47:30:
74:2c:5d:e2:ab:34:b7:23:36:ad:7d:e5:d4:49:0b:cc:71:45:
58:06:c9:f4:4f:e1:e5:6e:82:4e:1b:44:1e:9d:06:2e:ca:b1:
be:29:51:02:4e:a1:ca:15:74:08:75:fa:5c:f8:c6:e5:a8:6d:
bf:17:9c:b2:75:dc:aa:ce:07:8c:c8:8b:b3:ac:8a:23:eb:ce:
7a:6d:18:06:2a:e3:ce:04:bc:cc:af:ed:81:96:6a:94:15:10:
c5:4e:2b:cf:99:e3:13:6b:1c:94:27:b6:f1:7e:65:6e:88:86:
95:73:94:05:bc:fc:60:c3:45:4a:ee:0a:ff:c2:2d:cf:d0:2c:
ba:8a:dc:1b:94:b2:42:dd:28:19:cb:49:12:a0:22:a5:55:15:
0a:02:06:0a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEB5HR8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YWNkYjI4MWZiNjVmMDI4YjdjZGNhYjljNDcwNmVhN2M0NTk0MDIyMB4XDTIyMDEy
NzA1MjgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzNhZDkyYTYyYWRk
ZWFiMzhiMDRjYTZlMjlkM2VjNzI4ZDM4M2M4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKka6UzpvwV19EtpTG5znQyyAprxdQIW/U3Tb36EW6Z/tgQt
MQNCgKESYCL0x60H8lqtyPkUKuKNbcj1Vir8S2WUtQa9JPGA4xqlF2NUVZVdYSxu
8Ca49bhuKvimEgJXgQYgm298eOUuj47c+I4P1wpDcQrlekZfXVKCGALEaxCH2btR
At7LNckvclsT1SgOYpE4HYRmTL4YKKwr7MhAn52fM22PD5m/iSNx+lx1LSjovSu9
kAwVlFz/WnvajxyOpC9Ewn/Ud9KXLjZ6dYAEM0GvFKAWnwtojwjl/uiMtkdaPR1N
nGybT507AZw+299zULgkSDiPeD1fBlhBTt+NSmkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRzrZKmKt3qs4sEym4p0+xyjTg8hDAfBgNVHSMEGDAWgBSKzbKB+2XwKLfN
yrnEcG6nxFlAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lzMnlnZnRsOENpM3pjcTV4SEJ1cDhSWlFDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvZjdhNmEzLTcxZjMtNDQ4Mi1iMGM1LWZhYzM0NjQwMDM2OS8x
L2M2MlNwaXJkNnJPTEJNcHVLZFBzY28wNFBJUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
ZjdhNmEzLTcxZjMtNDQ4Mi1iMGM1LWZhYzM0NjQwMDM2OS8xL2lzMnlnZnRsOENp
M3pjcTV4SEJ1cDhSWlFDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEA7BvSAMEAcKYIjAPBAIAAjAJAwcA
IAEGfCdgMA0GCSqGSIb3DQEBCwUAA4IBAQApQv1L1PLAhIcyWjxhuzxygQYp2/u5
0mq0IW0tVvUKQwWjJGkrT5tOUePuvVuMwOsmOdX6SofKCEwe3UsoSsS2MmpDGXLR
vNFsFYwDZv+Fy8M6gnxhgFB0eYU92TJT9GP6YBfBUNSFhmv5RzB0LF3iqzS3Izat
feXUSQvMcUVYBsn0T+HlboJOG0QenQYuyrG+KVECTqHKFXQIdfpc+MblqG2/F5yy
ddyqzgeMyIuzrIoj6856bRgGKuPOBLzMr+2BlmqUFRDFTivPmeMTaxyUJ7bxfmVu
iIaVc5QFvPxgw0VK7gr/wi3P0Cy6itwblLJC3SgZy0kSoCKlVRUKAgYK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:33 2024 by rpki-client on console-fra.rpki-client.org