Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/0b52BpcsWCS_uPD0DoH0ZU5t6fI.roa
File: 0b52BpcsWCS_uPD0DoH0ZU5t6fI.roa (raw, json)
Hash identifier: /b6ZKy0Mxsx5/RwvdXSSvg8ElWVtcdpIY71mWpHwxHQ=
Subject key identifier: D1:BE:76:06:97:2C:58:24:BF:B8:F0:F4:0E:81:F4:65:4E:6D:E9:F2
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 010980D5
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/0b52BpcsWCS_uPD0DoH0ZU5t6fI.roa
Signing time: Sat 01 Jan 2022 05:53:51 +0000
ROA not before: Sat 01 Jan 2022 05:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57030
IP address blocks: 185.66.0.0/22 maxlen: 22
176.62.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17400021 (0x10980d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Jan 1 05:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1be7606972c5824bfb8f0f40e81f4654e6de9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:d1:81:78:a1:70:7a:b5:9f:20:f5:51:af:
c5:ff:00:20:e3:40:e5:fd:c6:48:d7:cb:7b:da:72:
c6:27:65:92:ba:0d:46:cc:09:75:20:50:11:ba:1c:
50:e0:2b:ea:a2:04:bd:1e:44:0b:d7:68:31:7c:6b:
de:db:c6:85:54:e5:d2:77:85:c7:89:35:45:78:d9:
ea:c9:ea:5b:72:f6:40:f1:52:f7:c5:49:d4:40:e4:
48:43:b1:16:8b:77:36:8a:d9:77:af:28:4b:91:31:
fe:41:6a:25:33:ff:0e:8f:ea:b6:7e:38:4e:a1:ca:
c7:04:6d:66:71:51:2e:2d:bd:33:fa:28:d0:1e:e4:
39:23:06:58:fe:f7:c7:39:fc:d5:8d:33:d9:c2:91:
71:3c:21:71:e4:e7:95:13:75:b7:29:ab:d9:31:90:
ec:31:5f:a5:cf:7b:34:46:f3:0b:26:a0:23:f1:7a:
01:5f:c7:cc:66:b4:14:e6:ea:82:cd:62:7c:8d:ff:
28:7a:56:2c:04:95:83:80:cd:e7:3d:9e:69:3f:08:
25:e5:61:43:62:c4:04:be:35:1b:a1:28:ed:b8:b8:
31:dc:9f:19:60:69:49:31:59:62:03:1e:ef:0d:b0:
cf:0e:dc:2f:30:c5:c0:d6:2c:ef:ed:18:7d:a8:ea:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BE:76:06:97:2C:58:24:BF:B8:F0:F4:0E:81:F4:65:4E:6D:E9:F2
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/0b52BpcsWCS_uPD0DoH0ZU5t6fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.200.0/21
185.66.0.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e5:f9:10:c7:60:c3:3d:49:58:da:2a:32:78:97:90:b7:40:
72:5d:6a:65:06:e0:e8:0b:c8:53:c9:a0:05:04:d8:5b:f3:f2:
fc:48:14:3a:5e:3e:ed:fd:13:56:d5:0c:64:94:b5:49:74:3a:
91:ee:aa:3c:2e:9e:6e:b3:42:0a:de:8e:11:36:95:b4:57:52:
33:fa:49:c9:b0:df:ae:c7:96:ac:a7:4c:d6:ff:4e:55:b8:d8:
f6:eb:1a:04:4a:2b:7d:d0:7d:96:33:62:f3:bc:fd:3d:59:03:
9d:36:3f:ce:e5:aa:8e:9b:5e:e1:c1:9a:46:83:5b:04:1c:f0:
bf:80:4a:3e:4e:2a:95:91:e4:c6:e5:b6:46:cb:fd:7a:33:3c:
b6:10:d8:09:7c:d5:2a:c2:db:3c:93:b2:83:d6:9d:39:28:4a:
e9:05:d9:45:76:fb:16:d7:fb:8b:c9:ba:f2:f8:cd:05:d2:80:
aa:a2:19:e6:e5:d5:52:92:5a:d1:45:60:64:27:3b:85:9a:2e:
73:3f:be:17:48:8c:2b:8a:b9:9b:42:7f:00:20:a1:cf:10:40:
7f:ef:f5:24:d2:d7:37:16:c2:ab:59:a7:21:4b:2a:2a:12:c2:
84:95:72:38:bf:ba:52:9b:06:58:52:f4:88:d3:03:ae:5f:be:
45:de:7a:56
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAQmA1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjIzNDFiNDMzZTFmOGZjYjc5NjMyMmQyZmQ5MjY0MDkzOTZlN2FkMB4XDTIyMDEw
MTA1NTM1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFiZTc2MDY5NzJj
NTgyNGJmYjhmMGY0MGU4MWY0NjU0ZTZkZTlmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALy80YF4oXB6tZ8g9VGvxf8AIONA5f3GSNfLe9pyxidlkroN
RswJdSBQEbocUOAr6qIEvR5EC9doMXxr3tvGhVTl0neFx4k1RXjZ6snqW3L2QPFS
98VJ1EDkSEOxFot3NorZd68oS5Ex/kFqJTP/Do/qtn44TqHKxwRtZnFRLi29M/oo
0B7kOSMGWP73xzn81Y0z2cKRcTwhceTnlRN1tymr2TGQ7DFfpc97NEbzCyagI/F6
AV/HzGa0FObqgs1ifI3/KHpWLASVg4DN5z2eaT8IJeVhQ2LEBL41G6Eo7bi4Mdyf
GWBpSTFZYgMe7w2wzw7cLzDFwNYs7+0Yfajq8R8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTRvnYGlyxYJL+48PQOgfRlTm3p8jAfBgNVHSMEGDAWgBQmI0G0M+H4/LeW
Mi0v2SZAk5bnrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ppTkJ0RFBoLVB5M2xqSXRMOWttUUpPVzU2MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNTY4ZTIxLTUzYTQtNGU1NS05YzU3LTk4MjgyYzg5ZjUxNi8x
LzBiNTJCcGNzV0NTX3VQRDBEb0gwWlU1dDZmSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NTY4ZTIxLTUzYTQtNGU1NS05YzU3LTk4MjgyYzg5ZjUxNi8xL0ppTkJ0RFBoLVB5
M2xqSXRMOWttUUpPVzU2MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA7A+yAMEArlCADANBgkqhkiG9w0B
AQsFAAOCAQEAKOX5EMdgwz1JWNoqMniXkLdAcl1qZQbg6AvIU8mgBQTYW/Py/EgU
Ol4+7f0TVtUMZJS1SXQ6ke6qPC6ebrNCCt6OETaVtFdSM/pJybDfrseWrKdM1v9O
VbjY9usaBEorfdB9ljNi87z9PVkDnTY/zuWqjpte4cGaRoNbBBzwv4BKPk4qlZHk
xuW2Rsv9ejM8thDYCXzVKsLbPJOyg9adOShK6QXZRXb7Ftf7i8m68vjNBdKAqqIZ
5uXVUpJa0UVgZCc7hZoucz++F0iMK4q5m0J/ACChzxBAf+/1JNLXNxbCq1mnIUsq
KhLChJVyOL+6UpsGWFL0iNMDrl++Rd56Vg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org