Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jZloUpiHdQsQlx5jLRBC23ZkodE.roa
File: jZloUpiHdQsQlx5jLRBC23ZkodE.roa (raw, json)
Hash identifier: 2bQEZMV3Ib8hOq3yoa/sGG8gVvubczBKmx9VDMOC+zk=
Subject key identifier: 8D:99:68:52:98:87:75:0B:10:97:1E:63:2D:10:42:DB:76:64:A1:D1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 192F7CEF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jZloUpiHdQsQlx5jLRBC23ZkodE.roa
Signing time: Sat 01 Jan 2022 11:57:08 +0000
ROA not before: Sat 01 Jan 2022 11:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9199
IP address blocks: 81.180.64.0/20 maxlen: 20
81.180.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422542575 (0x192f7cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 11:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d9968529887750b10971e632d1042db7664a1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:97:d9:1c:d2:f6:d8:a7:b9:94:9a:92:e7:
7e:82:2d:20:7b:43:1e:da:73:71:0c:38:7f:7f:f7:
7c:3f:22:c4:7f:d8:02:7b:74:63:91:bc:a8:dc:16:
52:a8:77:a7:de:a5:86:51:e5:19:06:49:08:17:24:
51:24:19:78:86:ac:35:c9:01:6f:f8:0c:94:cb:0f:
d4:88:a2:13:13:15:dc:fe:45:dd:32:76:1d:39:51:
af:39:c4:62:89:b1:f3:a7:ee:af:00:a3:0c:e4:65:
17:f4:ad:c3:ce:d0:40:4e:8d:48:ef:af:e1:29:0e:
9c:bc:93:29:8a:c0:18:78:56:0c:8f:40:72:65:ec:
64:d4:b7:76:e0:80:b1:3d:6d:a1:a1:d1:73:aa:33:
19:29:68:9d:f4:13:e7:9f:c3:78:e9:74:8a:ea:79:
c5:df:71:73:ca:18:56:79:ce:a0:f0:5a:cc:b0:75:
38:cf:70:26:df:91:50:97:18:ae:0d:e0:dd:65:6a:
a1:8b:0d:25:2e:98:ff:62:db:8c:2e:bb:02:d7:72:
6c:1f:d2:81:11:0a:bf:7b:9d:75:2c:eb:73:73:8d:
35:71:67:d1:cc:16:ef:b3:be:6e:5f:74:3e:c4:a0:
bb:fd:b3:f2:2b:ea:8f:0b:d2:c2:90:61:f9:ec:35:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:68:52:98:87:75:0B:10:97:1E:63:2D:10:42:DB:76:64:A1:D1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jZloUpiHdQsQlx5jLRBC23ZkodE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.64.0/20
81.180.84.0/23
Signature Algorithm: sha256WithRSAEncryption
20:5c:bc:c2:96:3d:0a:39:06:57:6f:19:b1:3b:46:d5:32:66:
36:7e:97:76:2b:2f:63:85:53:0f:f3:77:b5:f7:df:13:9d:cf:
9f:7a:3d:66:db:be:f2:e9:04:ec:d4:31:b9:7e:a7:9a:e1:75:
f5:82:7c:32:bb:74:f1:e2:6d:b4:9f:94:db:99:77:19:be:6d:
22:86:7c:cf:71:6d:72:c9:b2:9f:06:9a:d9:c4:f2:fa:09:c8:
8c:7b:43:25:05:fd:0e:95:22:fb:c0:2e:50:df:9a:38:0d:44:
f1:fe:67:d4:ef:b5:53:70:b9:10:d3:5a:14:32:4b:30:6b:b9:
df:e8:32:42:c9:27:a8:6f:62:d5:0c:a7:bb:ea:fe:bc:d7:9d:
fd:70:9b:a4:05:48:5d:74:8e:14:c3:3a:b1:6f:30:2d:9b:9a:
17:5a:d3:5f:0c:37:56:3a:00:0f:e0:68:25:23:52:49:24:32:
a4:85:2b:f7:1b:34:db:d4:53:4c:1e:6a:ae:95:e3:f5:05:36:
d6:8e:98:77:7d:8e:f0:10:c7:d1:d3:5d:d9:c4:55:02:0b:5d:
b3:17:d8:8b:b4:f1:35:4d:3e:f3:32:db:35:58:6c:0f:7d:41:
ab:cf:b7:6d:36:75:78:6f:14:ea:99:20:79:9c:6d:f5:53:e5:
3f:af:c1:13
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGS987zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDEw
MTExNTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQ5OTY4NTI5ODg3
NzUwYjEwOTcxZTYzMmQxMDQyZGI3NjY0YTFkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALk5l9kc0vbYp7mUmpLnfoItIHtDHtpzcQw4f3/3fD8ixH/Y
Ant0Y5G8qNwWUqh3p96lhlHlGQZJCBckUSQZeIasNckBb/gMlMsP1IiiExMV3P5F
3TJ2HTlRrznEYomx86furwCjDORlF/Stw87QQE6NSO+v4SkOnLyTKYrAGHhWDI9A
cmXsZNS3duCAsT1toaHRc6ozGSlonfQT55/DeOl0iup5xd9xc8oYVnnOoPBazLB1
OM9wJt+RUJcYrg3g3WVqoYsNJS6Y/2LbjC67AtdybB/SgREKv3uddSzrc3ONNXFn
0cwW77O+bl90PsSgu/2z8ivqjwvSwpBh+ew1nYkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSNmWhSmId1CxCXHmMtEELbdmSh0TAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L2pabG9VcGlIZFFzUWx4NWpMUkJDMjNaa29kRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFG0QAMEAVG0VDANBgkqhkiG9w0B
AQsFAAOCAQEAIFy8wpY9CjkGV28ZsTtG1TJmNn6XdisvY4VTD/N3tfffE53Pn3o9
Ztu+8ukE7NQxuX6nmuF19YJ8Mrt08eJttJ+U25l3Gb5tIoZ8z3Ftcsmynwaa2cTy
+gnIjHtDJQX9DpUi+8AuUN+aOA1E8f5n1O+1U3C5ENNaFDJLMGu53+gyQsknqG9i
1Qynu+r+vNed/XCbpAVIXXSOFMM6sW8wLZuaF1rTXww3VjoAD+BoJSNSSSQypIUr
9xs029RTTB5qrpXj9QU21o6Yd32O8BDH0dNd2cRVAgtdsxfYi7TxNU0+8zLbNVhs
D31Bq8+3bTZ1eG8U6pkgeZxt9VPlP6/BEw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org