Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/pmk4I8Qgob6glPLUKcZuFvdK2kE.roa
File: pmk4I8Qgob6glPLUKcZuFvdK2kE.roa (raw, json)
Hash identifier: ApOIPInchWneMkv3e5XZr54dZHr/K7wVK807TlzivX0=
Subject key identifier: A6:69:38:23:C4:20:A1:BE:A0:94:F2:D4:29:C6:6E:16:F7:4A:DA:41
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17D5430E
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/pmk4I8Qgob6glPLUKcZuFvdK2kE.roa
Signing time: Sat 01 Jan 2022 00:54:32 +0000
ROA not before: Sat 01 Jan 2022 00:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42480
IP address blocks: 62.63.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399852302 (0x17d5430e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6693823c420a1bea094f2d429c66e16f74ada41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:cb:34:b1:6f:a5:b3:bf:7a:48:53:f7:e0:
bc:37:92:fe:5e:f9:98:8f:39:dc:6b:42:a8:09:eb:
72:b7:8a:f3:5e:5e:0c:b5:4a:86:59:49:ad:db:21:
c0:0c:fe:11:e0:01:3f:9b:e7:75:03:48:d6:9e:b2:
26:8d:8a:5b:d2:f9:42:d2:c5:18:15:36:62:2c:c7:
79:4e:ab:3d:8b:aa:42:67:8d:dd:c3:bd:b5:49:05:
4e:17:3e:0b:6d:68:f9:a0:5d:4d:f3:7b:59:73:69:
bf:ec:4e:39:11:02:2e:d2:b3:04:4c:69:a6:64:49:
2b:84:fd:6c:03:92:4b:af:bf:ef:6c:12:13:93:19:
d7:14:13:9b:28:d9:b8:84:9b:ae:1b:17:39:aa:ca:
11:fd:c4:df:e3:10:64:e5:6c:a4:28:11:0c:5d:b8:
8e:98:42:ba:dc:66:c5:02:f6:99:98:c8:de:8a:17:
45:6e:47:77:3d:f9:c2:3d:7d:35:95:55:6d:e0:7c:
af:74:cd:5e:c8:0a:c0:aa:c9:09:d6:85:1c:a7:dc:
77:01:4a:63:a5:ea:45:04:36:eb:98:0b:a1:80:b3:
af:18:51:25:c5:ac:56:2f:fa:8b:1d:b9:64:05:23:
cb:ba:e5:2c:20:4f:fd:ea:2e:a6:4a:c3:8b:51:e2:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:38:23:C4:20:A1:BE:A0:94:F2:D4:29:C6:6E:16:F7:4A:DA:41
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/pmk4I8Qgob6glPLUKcZuFvdK2kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.140.0/22
Signature Algorithm: sha256WithRSAEncryption
89:44:b0:01:48:54:f7:d1:30:18:02:a8:71:58:94:6b:00:b4:
8a:0b:cb:a7:13:f2:41:49:55:30:33:e8:03:29:8a:73:9a:f4:
3c:1d:6a:6e:3b:ec:2a:03:63:4f:60:87:c6:56:ba:0a:c8:3f:
b1:c2:fa:58:37:da:bd:e7:1a:1e:c4:d7:ab:21:ca:3e:6e:30:
21:62:11:81:be:d8:c6:1f:0e:0b:15:67:fc:43:3a:da:99:a3:
b2:57:63:9d:85:d3:6a:85:20:13:95:c0:4a:01:fa:d2:6b:31:
6f:d8:1c:a5:f2:ac:c8:df:b8:d7:39:56:15:91:c8:d4:31:47:
f1:50:e7:a8:ac:7c:7f:3d:81:f3:bf:ac:e4:67:71:0a:33:92:
22:f2:2d:d3:37:0e:dd:91:1b:90:2f:8c:ec:95:5d:7d:85:ab:
a1:2a:ae:46:ac:02:98:64:e3:3d:9d:27:bc:0f:4e:5e:19:72:
ad:c1:b4:28:6d:ca:b7:37:d2:af:60:bb:a4:c4:7e:58:14:99:
be:75:89:9c:d5:fb:0c:86:e3:25:18:2a:c1:0a:de:10:07:f6:
6e:1f:cd:2b:fc:4a:c1:bb:72:09:3b:13:46:aa:a5:1e:cb:d2:
6c:a0:f2:19:58:77:ca:ce:56:d1:e2:1e:f5:ee:57:2f:22:1f:
90:e2:2f:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF9VDDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzM4OTdmYzdhOTYzZjE0MjE1ZDU4ZTE4MjQxNDRhYjE5ZmQ1ODEwMB4XDTIyMDEw
MTAwNTQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTY2OTM4MjNjNDIw
YTFiZWEwOTRmMmQ0MjljNjZlMTZmNzRhZGE0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMT9yzSxb6Wzv3pIU/fgvDeS/l75mI853GtCqAnrcreK815e
DLVKhllJrdshwAz+EeABP5vndQNI1p6yJo2KW9L5QtLFGBU2YizHeU6rPYuqQmeN
3cO9tUkFThc+C21o+aBdTfN7WXNpv+xOORECLtKzBExppmRJK4T9bAOSS6+/72wS
E5MZ1xQTmyjZuISbrhsXOarKEf3E3+MQZOVspCgRDF24jphCutxmxQL2mZjI3ooX
RW5Hdz35wj19NZVVbeB8r3TNXsgKwKrJCdaFHKfcdwFKY6XqRQQ265gLoYCzrxhR
JcWsVi/6ix25ZAUjy7rlLCBP/eoupkrDi1HiObMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSmaTgjxCChvqCU8tQpxm4W90raQTAfBgNVHSMEGDAWgBQTOJf8epY/FCFd
WOGCQUSrGf1YEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6aVhfSHFXUHhRaFhWamhna0ZFcXhuOVdCQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8x
L3BtazRJOFFnb2I2Z2xQTFVLY1p1RnZkSzJrRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8xL0V6aVhfSHFXUHhR
aFhWamhna0ZFcXhuOVdCQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj4/jDANBgkqhkiG9w0BAQsFAAOC
AQEAiUSwAUhU99EwGAKocViUawC0igvLpxPyQUlVMDPoAymKc5r0PB1qbjvsKgNj
T2CHxla6Csg/scL6WDfavecaHsTXqyHKPm4wIWIRgb7Yxh8OCxVn/EM62pmjsldj
nYXTaoUgE5XASgH60msxb9gcpfKsyN+41zlWFZHI1DFH8VDnqKx8fz2B87+s5Gdx
CjOSIvIt0zcO3ZEbkC+M7JVdfYWroSquRqwCmGTjPZ0nvA9OXhlyrcG0KG3KtzfS
r2C7pMR+WBSZvnWJnNX7DIbjJRgqwQreEAf2bh/NK/xKwbtyCTsTRqqlHsvSbKDy
GVh3ys5W0eIe9e5XLyIfkOIvAw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org