Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/mtyNYHoywBkDc_K2UUMehlS7YOQ.roa
File: mtyNYHoywBkDc_K2UUMehlS7YOQ.roa (raw, json)
Hash identifier: IHbuREEZ5ydnH0wfeA7/etJNB++81NCgZbziPcONERc=
Subject key identifier: 9A:DC:8D:60:7A:32:C0:19:03:73:F2:B6:51:43:1E:86:54:BB:60:E4
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 1084873B
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/mtyNYHoywBkDc_K2UUMehlS7YOQ.roa
Signing time: Sat 01 Jan 2022 16:02:35 +0000
ROA not before: Sat 01 Jan 2022 16:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197775
IP address blocks: 62.102.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277120827 (0x1084873b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jan 1 16:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9adc8d607a32c0190373f2b651431e8654bb60e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:3f:01:5a:da:40:5e:fa:84:b6:dd:35:ed:
1b:24:ed:46:f8:3c:3a:b6:e9:84:88:fe:25:f5:76:
ca:af:fc:d4:90:ae:dd:47:06:76:2e:bc:a3:14:04:
70:46:25:65:56:16:09:c0:4c:d9:38:20:b9:62:1f:
84:ff:d4:2d:5d:1b:a9:3f:c2:e1:4f:70:0c:90:6a:
67:fc:d9:fc:02:29:46:4d:5f:fc:40:c0:cf:ef:71:
0d:c8:87:6d:0a:42:53:aa:e4:9d:b3:9b:bb:09:a2:
6f:f6:1f:b6:1a:c1:2f:72:b7:ff:09:d3:0f:4e:76:
5a:55:5b:7e:1b:8c:95:4e:b6:c8:57:4a:fc:d6:f3:
80:da:a3:2b:3f:3f:ef:1e:73:79:b8:54:fb:82:6f:
8a:36:d1:c4:2c:3f:b9:fb:3b:0d:f0:d2:ae:0a:03:
15:3b:6f:ac:f4:c0:aa:07:f5:f3:99:26:b1:76:41:
fc:96:d1:25:e8:df:96:c8:68:85:78:0b:9a:b7:fd:
48:ad:6f:10:e5:4a:f7:27:5c:47:ac:99:4c:23:b9:
5d:7c:51:18:9f:f9:d7:7e:d0:76:ed:61:c9:18:cf:
7a:32:00:f5:99:bb:87:83:b2:61:1b:8a:75:84:ac:
b3:35:7b:c3:9f:f5:63:74:81:06:3c:31:2d:f1:50:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:8D:60:7A:32:C0:19:03:73:F2:B6:51:43:1E:86:54:BB:60:E4
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/mtyNYHoywBkDc_K2UUMehlS7YOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.150.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:62:99:6b:dc:c8:63:71:ee:db:63:11:e7:c2:1e:ee:13:
b9:0e:5a:08:c1:56:63:8e:4e:a5:aa:95:a9:1d:99:e5:70:66:
6a:8d:67:43:c0:5f:6e:5e:89:f6:74:db:03:59:a7:d2:8e:ee:
eb:88:f9:b3:63:2b:c4:76:ac:0c:29:e8:a5:18:5f:94:91:44:
88:32:a7:28:48:08:c4:77:06:35:7c:f7:a2:07:fb:b7:e6:b2:
64:66:47:00:49:60:3f:f2:e1:73:2b:45:3c:7c:b6:ee:e3:2c:
d8:0f:86:01:94:88:4f:31:eb:30:4c:0c:51:f7:a0:b3:6a:71:
df:90:a6:24:16:d7:98:ab:67:f0:86:2a:10:e1:ad:8c:7d:da:
70:f7:c8:b4:77:f3:b8:ba:1c:08:6f:ad:e0:a6:ff:4f:e2:0a:
01:9a:41:49:de:ce:a6:37:cf:96:de:a4:05:ed:63:09:19:6e:
87:4d:99:e6:41:3d:48:58:40:ee:e7:ef:2a:06:74:96:02:6b:
f7:bb:a4:df:97:93:04:dc:94:80:ad:ed:0c:b5:53:2e:86:1f:
4a:82:7d:75:56:d6:6b:f6:de:aa:8c:c0:da:d9:c4:d9:3a:29:
3c:e4:bf:c2:0d:4a:f2:d0:f8:4b:1e:1f:a4:87:21:cf:e4:12:
1a:68:b1:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEISHOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDI3OTRjMmQyY2ZhMDU0NjM4YmE5NTBhNWY2NjhlODc2MDE0MTJkMB4XDTIyMDEw
MTE2MDIzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFkYzhkNjA3YTMy
YzAxOTAzNzNmMmI2NTE0MzFlODY1NGJiNjBlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYiPwFa2kBe+oS23TXtGyTtRvg8OrbphIj+JfV2yq/81JCu
3UcGdi68oxQEcEYlZVYWCcBM2TgguWIfhP/ULV0bqT/C4U9wDJBqZ/zZ/AIpRk1f
/EDAz+9xDciHbQpCU6rknbObuwmib/YfthrBL3K3/wnTD052WlVbfhuMlU62yFdK
/NbzgNqjKz8/7x5zebhU+4JvijbRxCw/ufs7DfDSrgoDFTtvrPTAqgf185kmsXZB
/JbRJejflshohXgLmrf9SK1vEOVK9ydcR6yZTCO5XXxRGJ/5137Qdu1hyRjPejIA
9Zm7h4OyYRuKdYSsszV7w5/1Y3SBBjwxLfFQHtsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSa3I1gejLAGQNz8rZRQx6GVLtg5DAfBgNVHSMEGDAWgBRkJ5TC0s+gVGOL
qVCl9mjodgFBLTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pDZVV3dExQb0ZSamk2bFFwZlpvNkhZQlFTMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvZjcwYTljLTE1MjgtNGU2Ni1iN2E2LTA2MTYzOTgxMmM3NC8x
L210eU5ZSG95d0JrRGNfSzJVVU1laGxTN1lPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
ZjcwYTljLTE1MjgtNGU2Ni1iN2E2LTA2MTYzOTgxMmM3NC8xL1pDZVV3dExQb0ZS
amk2bFFwZlpvNkhZQlFTMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5mljANBgkqhkiG9w0BAQsFAAOC
AQEAAs9imWvcyGNx7ttjEefCHu4TuQ5aCMFWY45OpaqVqR2Z5XBmao1nQ8Bfbl6J
9nTbA1mn0o7u64j5s2MrxHasDCnopRhflJFEiDKnKEgIxHcGNXz3ogf7t+ayZGZH
AElgP/LhcytFPHy27uMs2A+GAZSITzHrMEwMUfegs2px35CmJBbXmKtn8IYqEOGt
jH3acPfItHfzuLocCG+t4Kb/T+IKAZpBSd7OpjfPlt6kBe1jCRluh02Z5kE9SFhA
7ufvKgZ0lgJr97uk35eTBNyUgK3tDLVTLoYfSoJ9dVbWa/beqozA2tnE2TopPOS/
wg1K8tD4Sx4fpIchz+QSGmixxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org