Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/BL6X6QTiX_Hh6eMRpyCK6mEBMd8.roa
File: BL6X6QTiX_Hh6eMRpyCK6mEBMd8.roa (raw, json)
Hash identifier: uk9/lpfTTFuM1mzrrAc1jpfrgNxpePz5E7PZGP1bago=
Subject key identifier: 04:BE:97:E9:04:E2:5F:F1:E1:E9:E3:11:A7:20:8A:EA:61:01:31:DF
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 01831C1CA81C308ED7A02A5B50B3A8C02956
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/BL6X6QTiX_Hh6eMRpyCK6mEBMd8.roa
Signing time: Thu 08 Sep 2022 07:59:43 +0000
ROA not before: Thu 08 Sep 2022 07:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31263
IP address blocks: 176.62.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:1c:a8:1c:30:8e:d7:a0:2a:5b:50:b3:a8:c0:29:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Sep 8 07:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04be97e904e25ff1e1e9e311a7208aea610131df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:45:e7:2c:9c:61:75:21:a1:5d:02:96:e8:
88:96:8b:0c:26:b9:22:17:77:cb:f1:2d:76:07:40:
0b:ad:e2:fa:f2:cb:c9:7e:3e:c1:18:28:7b:8b:46:
0a:1a:91:a5:bf:23:4a:76:18:c4:85:12:d5:9e:7c:
2d:5d:01:8d:49:89:bc:4d:24:13:6e:fd:90:50:e9:
64:a4:de:eb:31:cf:1f:64:dc:ca:6c:d0:a8:95:7f:
50:29:2c:6c:11:0b:b5:2a:d3:4b:78:cb:8f:10:40:
84:32:d6:5f:71:00:2a:3f:7c:7b:dc:28:65:18:77:
11:ef:d3:70:83:43:e9:6f:5d:8f:4f:7d:e0:69:93:
b4:e5:11:90:bd:ce:39:1e:0a:b1:cd:e1:eb:16:3a:
08:82:cb:aa:2b:7b:14:85:6d:bd:23:ca:fe:c4:35:
33:4c:43:57:e0:7a:67:bd:19:0d:f1:d6:b4:2e:e1:
06:1d:0b:39:cc:0b:d5:14:09:e6:0a:f9:db:52:7a:
0d:4b:5f:c7:7f:71:85:24:0a:ec:3f:e5:1b:be:85:
63:1f:1f:fc:1f:a2:65:d2:d2:23:3c:59:66:6e:57:
56:07:e7:b8:3b:d2:7d:a8:e0:fb:4f:d7:a7:36:25:
2f:34:d9:76:28:7c:ad:c0:4d:8c:0d:d1:fd:a3:8a:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:97:E9:04:E2:5F:F1:E1:E9:E3:11:A7:20:8A:EA:61:01:31:DF
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/BL6X6QTiX_Hh6eMRpyCK6mEBMd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c6:7a:12:48:c5:b5:d3:d2:60:e1:6e:36:5d:4b:03:45:b6:72:
ac:3c:86:5f:6b:48:f7:42:35:54:51:a2:86:1e:bb:1f:00:bd:
e3:80:4b:af:b3:73:d4:ad:e7:1a:c3:b2:63:98:bb:a9:f9:b2:
df:a3:a7:44:c5:1c:1a:5d:c6:91:27:5d:73:ec:96:17:04:4c:
51:21:55:f5:eb:3a:a4:5d:dd:fd:f7:95:8f:7e:bf:af:ad:51:
29:2a:7b:00:b5:82:f1:12:d0:45:57:a5:df:ed:92:db:b5:b2:
9a:bf:60:66:f3:db:6f:2e:76:b3:c2:db:f5:75:69:8b:09:64:
0f:86:78:55:9c:ab:40:cf:42:74:79:d6:95:2c:19:06:e9:02:
07:59:6d:e3:57:61:e3:ee:fd:59:31:a4:74:d4:ac:57:08:d2:
6f:17:a7:b0:91:0f:d2:f5:22:83:f1:2b:9b:19:8a:e5:81:8b:
a2:98:00:93:12:ad:d8:d9:f5:e8:72:b4:19:a3:4c:2b:a3:87:
0c:bf:73:44:69:37:6c:ea:0a:2c:4e:f8:42:5a:54:62:de:a6:
c1:f6:af:f9:1f:31:c3:1e:8c:16:60:99:77:6e:94:7d:a9:d2:
95:49:18:42:31:17:17:ed:ec:d4:cf:f9:8c:70:98:b1:21:85:
63:b9:27:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMcHKgcMI7XoCpbULOowClWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk
Y2IwYmMwHhcNMjIwOTA4MDc1OTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJlOTdlOTA0ZTI1ZmYxZTFlOWUzMTFhNzIwOGFlYTYxMDEzMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSVF5yycYXUhoV0CluiIlosMJrki
F3fL8S12B0ALreL68svJfj7BGCh7i0YKGpGlvyNKdhjEhRLVnnwtXQGNSYm8TSQT
bv2QUOlkpN7rMc8fZNzKbNColX9QKSxsEQu1KtNLeMuPEECEMtZfcQAqP3x73Chl
GHcR79Nwg0Ppb12PT33gaZO05RGQvc45HgqxzeHrFjoIgsuqK3sUhW29I8r+xDUz
TENX4HpnvRkN8da0LuEGHQs5zAvVFAnmCvnbUnoNS1/Hf3GFJArsP+UbvoVjHx/8
H6Jl0tIjPFlmbldWB+e4O9J9qOD7T9enNiUvNNl2KHytwE2MDdH9o4rctQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAS+l+kE4l/x4enjEacgiuphATHfMB8GA1UdIwQY
MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt
NDU1YjE5Zjc2NmNjLzEvQkw2WDZRVGlYX0hoNmVNUnB5Q0s2bUVCTWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj
LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsD4wMA0G
CSqGSIb3DQEBCwUAA4IBAQDGehJIxbXT0mDhbjZdSwNFtnKsPIZfa0j3QjVUUaKG
HrsfAL3jgEuvs3PUrecaw7JjmLup+bLfo6dExRwaXcaRJ11z7JYXBExRIVX16zqk
Xd3995WPfr+vrVEpKnsAtYLxEtBFV6Xf7ZLbtbKav2Bm89tvLnazwtv1dWmLCWQP
hnhVnKtAz0J0edaVLBkG6QIHWW3jV2Hj7v1ZMaR01KxXCNJvF6ewkQ/S9SKD8Sub
GYrlgYuimACTEq3Y2fXocrQZo0wro4cMv3NEaTds6gosTvhCWlRi3qbB9q/5HzHD
HowWYJl3bpR9qdKVSRhCMRcX7ezUz/mMcJixIYVjuScI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:29 2024 by rpki-client on console-ams.rpki-client.org