Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/AfDplbc4j-tchblWbM5g2ekI7To.roa
File: AfDplbc4j-tchblWbM5g2ekI7To.roa (raw, json)
Hash identifier: CFj/n0Ssctx7slFPpb/IQkdaBN8Fbm6qlYosjdvgukc=
Subject key identifier: 01:F0:E9:95:B7:38:8F:EB:5C:85:B9:56:6C:CE:60:D9:E9:08:ED:3A
Certificate issuer: /CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Certificate serial: C59E71
Authority key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/AfDplbc4j-tchblWbM5g2ekI7To.roa
Signing time: Sat 01 Jan 2022 08:01:09 +0000
ROA not before: Sat 01 Jan 2022 08:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34863
IP address blocks: 62.106.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12951153 (0xc59e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Validity
Not Before: Jan 1 08:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01f0e995b7388feb5c85b9566cce60d9e908ed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:f6:c8:30:0e:9a:1e:93:f0:27:ca:dc:9f:
cc:5e:83:a4:14:c5:5b:a6:70:c3:4a:3b:c6:d7:bf:
55:a3:8b:5b:33:bf:f8:48:84:b7:6f:9a:18:1d:96:
ae:51:c2:08:df:cb:5e:a6:85:07:17:b4:52:94:b5:
50:f9:3a:42:1b:15:27:11:8c:eb:10:60:77:ba:d2:
e5:00:49:e1:01:06:8a:8d:a9:ca:83:b9:92:df:9c:
41:82:11:00:9a:d0:14:3e:c7:e8:47:59:79:56:fd:
9d:19:b0:58:3f:8b:cb:dd:fc:1a:b2:ac:bc:2c:67:
f5:9d:5a:58:f6:b1:20:5a:66:16:be:bb:b0:63:29:
c6:9c:dc:be:b1:d6:21:a6:94:fb:fd:71:df:6c:c6:
9f:d3:b8:4a:4e:ba:e2:4c:62:e6:a0:fa:af:19:af:
49:94:30:99:ac:20:e9:42:af:48:18:3a:c1:de:18:
44:f7:de:19:d4:10:d5:06:fb:f1:af:c1:67:1d:1b:
91:e3:d0:89:29:a3:fb:24:8c:9e:6e:fb:2f:54:fa:
14:e5:10:0c:5a:c4:4c:50:67:7d:83:ef:8d:55:06:
5f:aa:49:28:98:1a:84:54:12:f6:13:3a:e6:04:e5:
18:dd:5a:5d:bc:86:ea:2a:c5:55:df:a4:cf:7d:a3:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:E9:95:B7:38:8F:EB:5C:85:B9:56:6C:CE:60:D9:E9:08:ED:3A
X509v3 Authority Key Identifier:
keyid:14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/AfDplbc4j-tchblWbM5g2ekI7To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c9:3e:25:2d:73:cc:76:18:ba:04:1f:a9:f8:aa:fc:fe:1d:
73:5f:e4:b5:6b:35:35:b1:ba:e1:6f:17:48:7d:91:4b:51:f9:
50:e8:72:e6:6e:71:6b:78:cc:33:db:a6:fc:50:d0:9b:d8:00:
45:5d:19:c9:7f:1f:34:ff:3f:69:50:a8:3d:64:3d:7e:c0:f9:
fa:d3:f8:02:b4:da:90:74:05:c5:26:67:e4:4f:fe:49:c6:97:
2e:bd:03:52:d7:e8:23:f7:0e:46:3c:db:02:25:98:39:e7:9b:
fd:23:02:36:1e:3d:e3:94:05:48:77:d2:2e:8d:da:e9:76:7d:
30:d5:c3:b4:72:30:47:da:6d:8c:25:a0:b7:39:f1:b0:06:19:
50:16:4a:3b:54:05:27:ce:49:a8:04:22:f0:01:44:37:b7:54:
70:38:b4:4b:ba:57:f2:de:e2:73:dc:2c:a0:e1:bb:14:a6:dc:
76:4d:3b:0a:e9:65:73:95:e8:6a:d6:bb:3f:9c:7e:55:6b:36:
50:73:3d:96:19:22:d8:17:cf:8e:d8:a9:53:9b:33:23:01:cc:
dd:0b:36:ab:f9:1d:64:cc:de:64:03:2f:83:f7:c0:81:52:d4:
3c:49:5b:a2:de:03:6b:92:8b:1e:db:3b:07:72:2c:73:e8:f0:
ba:8a:b4:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMWecTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NDQwNWQyMDlhZWNjMzg0OTI5YTBhZDk2NGI0ZGJjZDVjMDQ2OGMyMB4XDTIyMDEw
MTA4MDEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDFmMGU5OTViNzM4
OGZlYjVjODViOTU2NmNjZTYwZDllOTA4ZWQzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeo9sgwDpoek/AnytyfzF6DpBTFW6Zww0o7xte/VaOLWzO/
+EiEt2+aGB2WrlHCCN/LXqaFBxe0UpS1UPk6QhsVJxGM6xBgd7rS5QBJ4QEGio2p
yoO5kt+cQYIRAJrQFD7H6EdZeVb9nRmwWD+Ly938GrKsvCxn9Z1aWPaxIFpmFr67
sGMpxpzcvrHWIaaU+/1x32zGn9O4Sk664kxi5qD6rxmvSZQwmawg6UKvSBg6wd4Y
RPfeGdQQ1Qb78a/BZx0bkePQiSmj+ySMnm77L1T6FOUQDFrETFBnfYPvjVUGX6pJ
KJgahFQS9hM65gTlGN1aXbyG6irFVd+kz32jnOcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQB8OmVtziP61yFuVZszmDZ6QjtOjAfBgNVHSMEGDAWgBQUQF0gmuzDhJKa
CtlktNvNXARowjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZFQmRJSnJzdzRTU21nclpaTFRielZ3RWFNSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvYmNhZmQ4LTgwMTQtNDEzMS1iNzFiLTc0YzNhOTc4OWExYy8x
L0FmRHBsYmM0ai10Y2hibFdiTTVnMmVrSTdUby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
YmNhZmQ4LTgwMTQtNDEzMS1iNzFiLTc0YzNhOTc4OWExYy8xL0ZFQmRJSnJzdzRT
U21nclpaTFRielZ3RWFNSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5qTTANBgkqhkiG9w0BAQsFAAOC
AQEAMck+JS1zzHYYugQfqfiq/P4dc1/ktWs1NbG64W8XSH2RS1H5UOhy5m5xa3jM
M9um/FDQm9gARV0ZyX8fNP8/aVCoPWQ9fsD5+tP4ArTakHQFxSZn5E/+ScaXLr0D
UtfoI/cORjzbAiWYOeeb/SMCNh4945QFSHfSLo3a6XZ9MNXDtHIwR9ptjCWgtznx
sAYZUBZKO1QFJ85JqAQi8AFEN7dUcDi0S7pX8t7ic9wsoOG7FKbcdk07Cullc5Xo
ata7P5x+VWs2UHM9lhki2BfPjtipU5szIwHM3Qs2q/kdZMzeZAMvg/fAgVLUPElb
ot4Da5KLHts7B3Isc+jwuoq0zA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:24 2023 by rpki-client on console-ams.rpki-client.org