Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zCLguGWiqe5FgqENbOxOROQp_H8.roa
File: zCLguGWiqe5FgqENbOxOROQp_H8.roa (raw, json)
Hash identifier: PkEuHjcUCVUafSVWPM9zD2X7MTqzq9iQVZsqS3/gB8s=
Subject key identifier: CC:22:E0:B8:65:A2:A9:EE:45:82:A1:0D:6C:EC:4E:44:E4:29:FC:7F
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 35EE9A9E
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zCLguGWiqe5FgqENbOxOROQp_H8.roa
Signing time: Sat 01 Jan 2022 03:02:13 +0000
ROA not before: Sat 01 Jan 2022 03:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29462
IP address blocks: 82.150.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904829598 (0x35ee9a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 03:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc22e0b865a2a9ee4582a10d6cec4e44e429fc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:45:fb:c2:9b:d6:ca:fa:fc:75:18:22:5a:
1d:30:59:fa:1d:e6:6e:77:de:86:e1:7a:1b:a8:78:
19:78:19:f6:4e:f6:d3:b4:ed:fb:30:ba:54:01:40:
b2:af:ef:84:fa:7e:50:8c:e7:32:1b:a1:0b:6b:a3:
3f:ed:54:95:a3:9c:5f:ff:39:2d:29:88:44:4c:e7:
40:de:10:8d:8f:67:a6:85:38:08:48:12:4b:08:4f:
78:ae:d2:94:08:66:e7:02:0c:4c:64:47:6b:0b:5c:
03:d2:c9:70:ce:70:37:10:41:4f:2f:d6:4d:8e:3f:
1e:6e:16:02:67:9c:86:d7:bd:49:ba:12:86:c0:1e:
c6:af:12:94:d9:18:c5:4e:3e:8f:6b:69:e0:67:ea:
c6:56:e1:e0:10:09:98:8d:d3:77:ae:74:7e:3f:f4:
16:00:4c:49:cb:6c:28:75:96:fa:1e:ce:cd:74:4e:
4b:1a:c7:9c:97:ab:5c:10:e4:04:63:72:53:7e:22:
51:4e:73:52:4e:15:b6:aa:72:d4:3d:b1:ef:44:4c:
40:25:67:16:65:b3:0e:f7:9b:3a:4b:8a:31:fa:6d:
39:d2:05:c4:db:04:27:4e:fb:f2:22:e6:fe:8c:a3:
64:9b:70:f8:17:ff:18:19:3e:a9:c2:56:c7:a5:9e:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:E0:B8:65:A2:A9:EE:45:82:A1:0D:6C:EC:4E:44:E4:29:FC:7F
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zCLguGWiqe5FgqENbOxOROQp_H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.128.0/22
Signature Algorithm: sha256WithRSAEncryption
43:b3:3c:7c:d1:4a:77:8b:25:b9:db:48:47:ce:6a:83:a7:ab:
1b:e3:a0:4d:39:35:af:46:06:07:6e:26:68:94:e8:66:34:41:
7f:b3:f1:a5:fb:4a:56:5f:c1:be:16:30:a6:8f:15:e0:83:f4:
6d:90:c7:67:f3:dd:73:f2:8b:7d:3f:c7:45:2c:fe:2b:af:e1:
57:56:93:b4:77:9b:be:91:dd:6e:b9:0a:fd:05:37:0e:9b:22:
89:d1:07:b7:d8:6c:3d:d7:7e:34:06:cb:63:a9:ec:5f:c4:f5:
fb:11:5d:23:c5:c9:81:4f:63:b7:ff:d3:d1:1e:fc:9a:98:ed:
a9:8c:87:5a:d2:63:02:2f:59:03:6e:2c:00:3a:aa:d9:90:15:
8f:86:13:70:07:d8:d8:be:bd:27:fd:62:f0:fc:0a:94:ae:8b:
b9:ea:c3:38:85:62:4b:d1:ca:0d:61:36:4b:34:e9:01:8f:b7:
0d:9b:e3:20:a3:00:78:14:9b:f9:33:40:ed:c3:67:80:c6:bc:
8e:bb:31:ea:53:94:31:f2:a2:5e:13:e6:02:a8:e9:ac:24:e8:
4d:02:a9:14:9c:d7:74:da:4c:15:48:ed:fd:c7:b9:5e:4c:f9:
7f:01:c2:41:79:b9:05:0d:71:2d:e0:8e:e4:3c:96:4a:e7:17:
f1:d3:50:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENe6anjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MDFmZTMwZmM2YjRiMGQwZjZkYjRlMWJmYmJkNTAxOTVkY2E1NzVjMB4XDTIyMDEw
MTAzMDIxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MyMmUwYjg2NWEy
YTllZTQ1ODJhMTBkNmNlYzRlNDRlNDI5ZmM3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCzRfvCm9bK+vx1GCJaHTBZ+h3mbnfehuF6G6h4GXgZ9k72
07Tt+zC6VAFAsq/vhPp+UIznMhuhC2ujP+1UlaOcX/85LSmIREznQN4QjY9npoU4
CEgSSwhPeK7SlAhm5wIMTGRHawtcA9LJcM5wNxBBTy/WTY4/Hm4WAmechte9SboS
hsAexq8SlNkYxU4+j2tp4Gfqxlbh4BAJmI3Td650fj/0FgBMSctsKHWW+h7OzXRO
SxrHnJerXBDkBGNyU34iUU5zUk4Vtqpy1D2x70RMQCVnFmWzDvebOkuKMfptOdIF
xNsEJ0778iLm/oyjZJtw+Bf/GBk+qcJWx6WeXN0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMIuC4ZaKp7kWCoQ1s7E5E5Cn8fzAfBgNVHSMEGDAWgBQgH+MPxrSw0Pbb
Thv7vVAZXcpXXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lCX2pEOGEwc05EMjIwNGItNzFRR1YzS1Yxdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvOGQ4MGY5LTQ5NGUtNGFiYi05OTU2LWZjMTIxYzgwMGIzMC8x
L3pDTGd1R1dpcWU1RmdxRU5iT3hPUk9RcF9IOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
OGQ4MGY5LTQ5NGUtNGFiYi05OTU2LWZjMTIxYzgwMGIzMC8xL0lCX2pEOGEwc05E
MjIwNGItNzFRR1YzS1Yxdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlKWgDANBgkqhkiG9w0BAQsFAAOC
AQEAQ7M8fNFKd4sludtIR85qg6erG+OgTTk1r0YGB24maJToZjRBf7PxpftKVl/B
vhYwpo8V4IP0bZDHZ/Pdc/KLfT/HRSz+K6/hV1aTtHebvpHdbrkK/QU3DpsiidEH
t9hsPdd+NAbLY6nsX8T1+xFdI8XJgU9jt//T0R78mpjtqYyHWtJjAi9ZA24sADqq
2ZAVj4YTcAfY2L69J/1i8PwKlK6LuerDOIViS9HKDWE2SzTpAY+3DZvjIKMAeBSb
+TNA7cNngMa8jrsx6lOUMfKiXhPmAqjprCToTQKpFJzXdNpMFUjt/ce5Xkz5fwHC
QXm5BQ1xLeCO5DyWSucX8dNQrg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-fra.rpki-client.org