Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/d2z99TGPslYu0gFGeorO2szb-NI.roa
File: d2z99TGPslYu0gFGeorO2szb-NI.roa (raw, json)
Hash identifier: cXGhY0QOtXis/KJ5erfvpWm+Vk3cZDjcyDfO7jf8ZMw=
Subject key identifier: 77:6C:FD:F5:31:8F:B2:56:2E:D2:01:46:7A:8A:CE:DA:CC:DB:F8:D2
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 08735546
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/d2z99TGPslYu0gFGeorO2szb-NI.roa
Signing time: Sat 01 Jan 2022 10:59:48 +0000
ROA not before: Sat 01 Jan 2022 10:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13030
IP address blocks: 5.180.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141776198 (0x8735546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Jan 1 10:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=776cfdf5318fb2562ed201467a8acedaccdbf8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:54:9c:ab:40:79:d7:3b:ec:77:a7:22:c1:
2f:33:54:0d:de:b0:78:fe:e4:01:46:ad:89:88:66:
89:86:b0:6f:15:ce:ac:7f:2d:1d:27:21:4e:fd:b1:
ac:7c:b8:d2:eb:b1:00:43:ef:a2:0c:0f:fe:67:de:
64:89:84:c8:1b:ab:7e:be:cb:78:61:e0:fb:6e:9f:
86:03:cb:ab:5a:ad:d5:13:94:33:19:2f:5c:3e:c7:
f6:b9:e2:77:c3:97:7f:47:90:d2:07:d6:50:78:62:
d3:a7:1a:71:f7:cf:2a:32:11:73:8c:47:b3:36:3e:
82:e0:4a:e4:56:32:49:ad:42:0b:cf:93:f5:64:92:
62:88:5d:3d:87:33:c8:b5:f1:d1:39:b4:c0:4d:49:
da:99:2a:c7:dd:f3:d4:0e:15:0b:1f:67:ad:0f:35:
25:d6:94:b7:ec:42:2f:6a:1c:1b:f0:3b:4d:1f:ce:
70:26:cd:31:ee:23:ec:d9:4f:79:49:cd:dd:3d:b4:
d8:db:3a:4d:b9:77:ae:10:8f:16:43:13:fe:df:1d:
50:51:3b:4b:20:a6:5b:b6:95:b9:71:a7:00:c8:7e:
79:b1:d2:a4:f2:88:ec:0b:e4:3a:c8:c3:f3:4a:20:
08:53:58:60:1c:3d:29:31:d4:51:0f:6c:77:cc:95:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:FD:F5:31:8F:B2:56:2E:D2:01:46:7A:8A:CE:DA:CC:DB:F8:D2
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/d2z99TGPslYu0gFGeorO2szb-NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:8c:00:9e:07:12:27:32:4a:a7:9a:5e:e6:8f:3f:07:27:ef:
83:dc:e3:34:a6:75:37:1a:50:b0:2f:c6:02:fb:5e:77:a8:8b:
2a:b3:93:e2:a3:38:ec:c9:bf:46:31:3f:97:09:91:9b:12:55:
ee:08:20:a8:e7:3f:40:65:e6:a6:e5:84:1a:61:f8:0e:95:9b:
68:9b:30:f4:35:53:e9:8c:2f:e0:2b:92:d2:7d:5a:85:27:67:
c3:85:b4:be:ca:e0:9a:ed:ed:1d:93:43:fc:8f:56:f3:9e:b8:
32:07:61:50:df:66:b6:ad:5c:3d:28:f5:f8:9e:75:c9:10:05:
2e:57:33:2a:3e:6a:fe:f3:7e:a4:c4:9a:eb:ae:56:28:d6:c4:
58:3c:bf:44:3c:a2:b0:17:78:23:08:a0:b9:8e:b9:b6:9d:ad:
26:f8:e8:f2:27:ae:60:e4:5e:b0:b4:f4:7c:11:47:f6:a3:30:
23:23:b6:3e:8c:30:ec:8a:44:d6:83:8a:3a:3c:d1:f7:9c:86:
12:e4:28:ca:dd:f3:12:82:f3:ff:62:ea:64:8d:f5:16:3d:3d:
f1:8f:4e:d0:d9:49:68:f6:bd:88:f1:4e:d3:0b:4c:3d:1c:58:
3c:79:48:30:be:9e:ca:a2:b1:e3:61:ff:77:4a:e0:2a:b8:8e:
4e:86:91:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECHNVRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NjVjOWZlZGI1YjU0NGY2OTZlZDRkYWYxMzViMDJkZWU2ZDk3YWY2MB4XDTIyMDEw
MTEwNTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzc2Y2ZkZjUzMThm
YjI1NjJlZDIwMTQ2N2E4YWNlZGFjY2RiZjhkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMV0VJyrQHnXO+x3pyLBLzNUDd6weP7kAUatiYhmiYawbxXO
rH8tHSchTv2xrHy40uuxAEPvogwP/mfeZImEyBurfr7LeGHg+26fhgPLq1qt1ROU
MxkvXD7H9rnid8OXf0eQ0gfWUHhi06cacffPKjIRc4xHszY+guBK5FYySa1CC8+T
9WSSYohdPYczyLXx0Tm0wE1J2pkqx93z1A4VCx9nrQ81JdaUt+xCL2ocG/A7TR/O
cCbNMe4j7NlPeUnN3T202Ns6Tbl3rhCPFkMT/t8dUFE7SyCmW7aVuXGnAMh+ebHS
pPKI7AvkOsjD80ogCFNYYBw9KTHUUQ9sd8yVZ8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR3bP31MY+yVi7SAUZ6is7azNv40jAfBgNVHSMEGDAWgBQGXJ/ttbVE9pbt
Ta8TWwLe5tl69jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JseWY3YlcxUlBhVzdVMnZFMXNDM3ViWmV2WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvODFiMjc2LWU3MzYtNDE3Mi04MGE5LTE4ZDY5MDM2NzUzYi8x
L2Qyejk5VEdQc2xZdTBnRkdlb3JPMnN6Yi1OSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
ODFiMjc2LWU3MzYtNDE3Mi04MGE5LTE4ZDY5MDM2NzUzYi8xL0JseWY3YlcxUlBh
VzdVMnZFMXNDM3ViWmV2WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW0hDANBgkqhkiG9w0BAQsFAAOC
AQEAoIwAngcSJzJKp5pe5o8/Byfvg9zjNKZ1NxpQsC/GAvted6iLKrOT4qM47Mm/
RjE/lwmRmxJV7gggqOc/QGXmpuWEGmH4DpWbaJsw9DVT6Ywv4CuS0n1ahSdnw4W0
vsrgmu3tHZND/I9W8564MgdhUN9mtq1cPSj1+J51yRAFLlczKj5q/vN+pMSa665W
KNbEWDy/RDyisBd4IwiguY65tp2tJvjo8ieuYOResLT0fBFH9qMwIyO2Poww7IpE
1oOKOjzR95yGEuQoyt3zEoLz/2LqZI31Fj098Y9O0NlJaPa9iPFO0wtMPRxYPHlI
ML6eyqKx42H/d0rgKriOToaRjw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:59 2023 by rpki-client on console-fra.rpki-client.org