Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ss34XJSr_Qx0PMmvlLA4rMVdNZU.roa
File: Ss34XJSr_Qx0PMmvlLA4rMVdNZU.roa (raw, json)
Hash identifier: fLPgV6VWtct3xI1VXPOIYMucgtdCLbf5YWqgPikAs6c=
Subject key identifier: 4A:CD:F8:5C:94:AB:FD:0C:74:3C:C9:AF:94:B0:38:AC:C5:5D:35:95
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 0181D7DFF95934B2235ECFD62F28CE64EC75
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ss34XJSr_Qx0PMmvlLA4rMVdNZU.roa
Signing time: Thu 07 Jul 2022 08:56:28 +0000
ROA not before: Thu 07 Jul 2022 08:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41171
IP address blocks: 62.106.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:df:f9:59:34:b2:23:5e:cf:d6:2f:28:ce:64:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jul 7 08:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4acdf85c94abfd0c743cc9af94b038acc55d3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:15:f5:71:1d:f1:98:89:14:aa:08:8d:e7:
d4:01:54:50:fb:9e:fd:a7:9b:91:01:e0:2d:80:98:
85:63:5e:fd:24:b3:a6:85:ff:2d:5a:36:f2:bc:af:
ae:21:c3:3e:85:02:d0:b7:37:67:55:a8:da:54:69:
ac:71:e9:5e:d3:88:2b:00:dd:23:4f:08:1f:f7:3c:
cd:6d:1c:16:c0:ff:1f:95:1a:7a:17:fd:8f:92:ad:
3c:4a:46:13:60:c9:c4:9b:26:15:44:a1:f9:69:8f:
6b:c4:73:df:80:36:ee:26:dd:32:7e:f4:71:b1:99:
28:90:94:e3:1d:76:4b:58:0f:2c:00:d9:28:31:53:
2f:1b:c5:31:11:fe:28:d5:e1:f8:d0:1f:2f:65:ed:
06:19:cb:f9:a6:15:a2:5d:3f:c9:e6:01:84:b3:9b:
67:8d:a8:50:9f:41:ee:00:f4:2a:2b:91:f3:30:bb:
d2:7d:3a:c9:03:27:1b:72:2f:18:9b:f2:5d:24:4e:
f4:20:64:75:21:2a:e2:d3:43:11:ca:88:fa:fb:b0:
d3:ed:13:c2:ae:75:3d:58:45:b6:02:98:d0:49:38:
51:c2:3d:2e:47:f1:cb:0f:73:01:c5:7e:6d:26:8e:
00:c7:59:be:bb:bc:bb:09:d0:01:58:0c:44:4d:d6:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:F8:5C:94:AB:FD:0C:74:3C:C9:AF:94:B0:38:AC:C5:5D:35:95
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ss34XJSr_Qx0PMmvlLA4rMVdNZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f3:44:a6:3f:28:ba:fe:b1:86:fe:8e:a4:1f:dd:aa:3e:e4:
68:c5:86:65:c5:2e:8f:f2:3a:4d:8d:ca:84:b7:62:e9:79:8e:
1d:ab:6d:96:93:d1:e5:cc:b3:e2:60:ed:35:79:74:fb:16:ef:
5a:b0:b3:23:2d:98:88:0c:3b:17:70:4c:77:41:eb:e3:21:33:
e5:7e:92:1d:ac:7c:78:2e:8e:f1:99:12:df:ca:fe:e6:0d:79:
41:31:61:2e:b8:11:5d:3b:d3:b7:cf:9a:c1:fb:3b:25:96:81:
ee:87:de:24:ae:4f:80:9a:54:ae:a8:6e:ef:66:68:7c:3f:fe:
f7:69:4f:0a:62:62:cd:cb:0b:44:cc:c0:65:6f:9b:ef:9c:4c:
92:80:23:cb:0d:ba:16:57:4e:b3:b4:0d:36:e7:76:81:6e:d0:
bb:a4:a4:87:d6:8c:12:1b:54:f6:32:8e:6d:1f:9c:c0:f1:67:
d8:91:7d:fe:45:0e:96:8e:90:e5:7e:96:de:86:48:06:58:a2:
a0:21:ed:1d:e4:b5:14:11:cf:f1:7a:ea:2c:ca:0e:01:5c:1e:
16:14:ea:e6:0e:34:04:1a:97:f2:0e:f6:e7:c7:dc:43:10:b6:
28:d3:33:f1:2e:41:1b:35:8d:8f:96:7e:cd:76:f5:41:78:c7:
40:47:d8:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHX3/lZNLIjXs/WLyjOZOx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYyZTJhM2I2YTFmNTJmZTEzMjQ4OWZjZDViMzFiZDZk
MjFmZTIwHhcNMjIwNzA3MDg1NjI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNkZjg1Yzk0YWJmZDBjNzQzY2M5YWY5NGIwMzhhY2M1NWQzNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArowV9XEd8ZiJFKoIjefUAVRQ+579
p5uRAeAtgJiFY179JLOmhf8tWjbyvK+uIcM+hQLQtzdnVajaVGmscele04grAN0j
Twgf9zzNbRwWwP8flRp6F/2Pkq08SkYTYMnEmyYVRKH5aY9rxHPfgDbuJt0yfvRx
sZkokJTjHXZLWA8sANkoMVMvG8UxEf4o1eH40B8vZe0GGcv5phWiXT/J5gGEs5tn
jahQn0HuAPQqK5HzMLvSfTrJAycbci8Ym/JdJE70IGR1ISri00MRyoj6+7DT7RPC
rnU9WEW2ApjQSThRwj0uR/HLD3MBxX5tJo4Ax1m+u7y7CdABWAxETdZZQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErN+FyUq/0MdDzJr5SwOKzFXTWVMB8GA1UdIwQY
MBaAFAKvLio7ah9S/hMkifzVsxvW0h/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4dUtqdHFIMUwtRXlTSl9OV3pHOWJTSC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZWI5ODYtNWU1NS00ZDRjLTk5N2Qt
ZGYxNzA1MzFmYzhhLzEvU3MzNFhKU3JfUXgwUE1tdmxMQTRyTVZkTlpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZWI5ODYtNWU1NS00ZDRjLTk5N2QtZGYxNzA1MzFmYzhh
LzEvQXE4dUtqdHFIMUwtRXlTSl9OV3pHOWJTSC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpTMA0G
CSqGSIb3DQEBCwUAA4IBAQBO80SmPyi6/rGG/o6kH92qPuRoxYZlxS6P8jpNjcqE
t2LpeY4dq22Wk9HlzLPiYO01eXT7Fu9asLMjLZiIDDsXcEx3QevjITPlfpIdrHx4
Lo7xmRLfyv7mDXlBMWEuuBFdO9O3z5rB+zslloHuh94krk+AmlSuqG7vZmh8P/73
aU8KYmLNywtEzMBlb5vvnEySgCPLDboWV06ztA0253aBbtC7pKSH1owSG1T2Mo5t
H5zA8WfYkX3+RQ6WjpDlfpbehkgGWKKgIe0d5LUUEc/xeuosyg4BXB4WFOrmDjQE
GpfyDvbnx9xDELYo0zPxLkEbNY2Pln7NdvVBeMdAR9iY
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net