Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/df0CG7O7K3nULMDW0NZnRro9U88.roa
File: df0CG7O7K3nULMDW0NZnRro9U88.roa (raw, json)
Hash identifier: QRgUn/OOT3BnBYD54Oq0vuTTNh7gVSizhJ4kq2zYXWI=
Subject key identifier: 75:FD:02:1B:B3:BB:2B:79:D4:2C:C0:D6:D0:D6:67:46:BA:3D:53:CF
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 1602B0D7
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/df0CG7O7K3nULMDW0NZnRro9U88.roa
Signing time: Sat 01 Jan 2022 09:56:12 +0000
ROA not before: Sat 01 Jan 2022 09:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3254
IP address blocks: 62.244.0.0/18 maxlen: 18
62.244.48.0/22 maxlen: 22
193.193.192.0/19 maxlen: 19
193.193.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369275095 (0x1602b0d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jan 1 09:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75fd021bb3bb2b79d42cc0d6d0d66746ba3d53cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:c3:fc:63:82:b2:49:40:af:88:d0:cc:b7:
20:ff:9f:16:51:01:81:27:63:ce:6b:88:14:0f:f5:
73:97:7a:a9:b1:ad:0b:ae:c4:73:c9:0b:ab:f5:f7:
bf:d7:ee:27:47:2f:61:dd:de:d2:52:c8:50:ee:ee:
7a:da:89:bd:93:32:86:f3:d3:a1:f4:01:45:4d:ae:
db:c0:88:24:85:9e:a8:bc:ae:a9:35:e0:0c:9f:3d:
20:1f:c8:58:85:22:ea:92:1a:4b:7e:94:61:f4:87:
a6:48:b6:e2:b3:ca:14:36:ed:5b:19:a5:37:7f:3e:
98:1f:20:9d:cd:cc:65:8c:a2:ed:9a:0a:d0:74:5a:
3c:6b:ee:3f:20:c3:52:a9:c7:db:71:76:e7:d9:d2:
e9:fd:e0:6b:b5:cc:97:f5:fa:0c:05:89:0a:cc:48:
8f:e8:74:88:0f:da:62:a4:48:96:29:c8:51:5a:41:
71:60:26:bd:b4:17:22:83:04:98:af:ac:27:8e:a4:
92:f6:6f:f9:8b:e5:6d:09:91:ba:59:3e:8c:0b:3c:
eb:73:ee:bb:d2:33:b7:ad:72:83:38:8a:32:cc:f5:
1a:10:8e:a2:43:45:01:67:90:a7:88:02:1e:93:dd:
75:15:02:04:0d:55:e5:0a:8c:d3:27:31:2b:a8:dd:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:02:1B:B3:BB:2B:79:D4:2C:C0:D6:D0:D6:67:46:BA:3D:53:CF
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/df0CG7O7K3nULMDW0NZnRro9U88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.0.0/18
193.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
23:d7:52:75:d8:aa:2c:30:72:55:28:ad:83:75:09:ee:34:32:
96:0a:f9:84:14:8e:ba:ff:3f:7b:ea:50:9b:fa:c2:14:c8:2f:
9d:a4:d5:ba:06:a3:8d:47:c2:29:05:a6:1f:41:32:0c:34:c3:
70:9c:2f:9b:d9:e5:96:92:74:a7:b5:9e:8b:e8:aa:0c:6c:ca:
78:46:d3:12:6e:87:63:25:33:c4:c1:12:84:a4:6d:9a:8b:33:
95:9c:ea:d4:04:a2:b0:c0:24:28:1f:0e:fa:be:c9:cf:22:d7:
5d:5d:20:21:60:6b:46:91:3e:c7:71:81:aa:b6:42:20:bd:5a:
73:8f:52:ee:b4:11:93:7b:cc:3c:21:44:de:66:29:d6:a1:ff:
4d:83:83:4b:95:6a:e2:e1:e4:11:e2:9a:02:aa:16:c2:16:61:
9e:47:70:f3:5d:f8:8a:c2:14:2f:b9:eb:ac:00:fd:9d:cb:cc:
d2:27:03:5c:2e:81:05:67:7e:de:5c:d3:fc:ed:fb:91:8c:09:
7d:78:23:47:f1:5a:ff:38:62:fd:8a:98:5f:43:5c:b1:61:4b:
87:4d:70:c0:64:c1:ce:03:cf:26:9b:e5:82:b9:b6:80:36:0a:
c9:b1:7e:a3:45:0c:9e:bc:93:5a:66:f3:39:52:4e:1b:cf:c7:
cc:04:82:58
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFgKw1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YTQ5NDVlNDY3NjQwMjlkMjU4MWQ4MjBjMzM3M2ZhNDQ1ODU1NTM5MB4XDTIyMDEw
MTA5NTYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVmZDAyMWJiM2Ji
MmI3OWQ0MmNjMGQ2ZDBkNjY3NDZiYTNkNTNjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZUw/xjgrJJQK+I0My3IP+fFlEBgSdjzmuIFA/1c5d6qbGt
C67Ec8kLq/X3v9fuJ0cvYd3e0lLIUO7uetqJvZMyhvPTofQBRU2u28CIJIWeqLyu
qTXgDJ89IB/IWIUi6pIaS36UYfSHpki24rPKFDbtWxmlN38+mB8gnc3MZYyi7ZoK
0HRaPGvuPyDDUqnH23F259nS6f3ga7XMl/X6DAWJCsxIj+h0iA/aYqRIlinIUVpB
cWAmvbQXIoMEmK+sJ46kkvZv+YvlbQmRulk+jAs863Puu9Izt61ygziKMsz1GhCO
okNFAWeQp4gCHpPddRUCBA1V5QqM0ycxK6jdbMUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR1/QIbs7sredQswNbQ1mdGuj1TzzAfBgNVHSMEGDAWgBQ6SUXkZ2QCnSWB
2CDDNz+kRYVVOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09rbEY1R2RrQXAwbGdkZ2d3emNfcEVXRlZUay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvNGVmNjgwLTdjNTUtNGE1Yi04NTY4LTMzNmFjOTQ1NjQ2NC8x
L2RmMENHN083SzNuVUxNRFcwTlpuUnJvOVU4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
NGVmNjgwLTdjNTUtNGE1Yi04NTY4LTMzNmFjOTQ1NjQ2NC8xL09rbEY1R2RrQXAw
bGdkZ2d3emNfcEVXRlZUay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBj70AAMEBcHBwDANBgkqhkiG9w0B
AQsFAAOCAQEAI9dSddiqLDByVSitg3UJ7jQylgr5hBSOuv8/e+pQm/rCFMgvnaTV
ugajjUfCKQWmH0EyDDTDcJwvm9nllpJ0p7Wei+iqDGzKeEbTEm6HYyUzxMEShKRt
moszlZzq1ASisMAkKB8O+r7JzyLXXV0gIWBrRpE+x3GBqrZCIL1ac49S7rQRk3vM
PCFE3mYp1qH/TYODS5Vq4uHkEeKaAqoWwhZhnkdw8134isIUL7nrrAD9ncvM0icD
XC6BBWd+3lzT/O37kYwJfXgjR/Fa/zhi/YqYX0NcsWFLh01wwGTBzgPPJpvlgrm2
gDYKybF+o0UMnryTWmbzOVJOG8/HzASCWA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net