Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XHGgtxp5PJ-xzAeUx1XSm28ctjI.roa
File: XHGgtxp5PJ-xzAeUx1XSm28ctjI.roa (raw, json)
Hash identifier: SPZPPCoe2foVcCR5nTsq1vlLT3vwzxpPaLVtqVSH72s=
Subject key identifier: 5C:71:A0:B7:1A:79:3C:9F:B1:CC:07:94:C7:55:D2:9B:6F:1C:B6:32
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 06303B9C
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XHGgtxp5PJ-xzAeUx1XSm28ctjI.roa
Signing time: Wed 15 Jun 2022 09:22:45 +0000
ROA not before: Wed 15 Jun 2022 09:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35039
IP address blocks: 80.66.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103824284 (0x6303b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jun 15 09:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c71a0b71a793c9fb1cc0794c755d29b6f1cb632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:6b:18:3e:e9:50:89:ad:01:df:ef:12:15:
df:d8:4a:6f:6e:ac:d6:6e:42:80:9c:80:08:d7:bd:
a3:bf:10:79:ff:35:9d:5a:e2:63:5f:c2:b1:df:7b:
76:40:18:68:ad:be:dc:b4:d5:c3:5c:eb:03:c1:62:
0c:48:38:f7:ec:a2:c6:fb:2a:0c:19:52:2c:40:cf:
fc:63:28:82:ea:87:ef:d0:86:b3:1a:84:58:da:f3:
15:08:39:e9:46:14:58:98:b0:b3:a7:6b:81:ba:7b:
00:a9:6a:1d:e4:be:c1:00:a1:c9:1c:d3:3d:77:1d:
0e:45:32:2a:59:b3:4f:32:1d:55:be:64:38:85:ac:
79:69:3f:57:29:a3:c0:64:0d:52:03:c8:c8:c7:0b:
55:04:d4:42:01:22:0c:09:c9:bc:c0:0e:f1:9d:62:
f5:24:bf:4b:c5:b3:5a:93:68:e3:bc:f5:31:17:50:
0d:d6:50:94:64:bf:82:1c:99:c8:4b:61:e0:99:81:
14:81:4f:6a:d4:a7:1f:13:74:b3:f6:8a:4c:73:dd:
b1:4c:eb:c4:59:ee:79:23:a8:ae:07:4f:7d:3a:ca:
14:da:62:6c:cd:55:5a:32:1f:43:f7:14:86:5a:1f:
ba:78:b2:f0:7e:0d:ca:e1:90:d1:a1:33:8b:90:b3:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:A0:B7:1A:79:3C:9F:B1:CC:07:94:C7:55:D2:9B:6F:1C:B6:32
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XHGgtxp5PJ-xzAeUx1XSm28ctjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
38:03:1b:ea:6f:b7:c7:bf:49:51:86:06:67:13:06:39:81:66:
2c:b2:ce:92:75:f8:06:b6:7d:4b:c6:a9:85:70:19:de:f9:ad:
18:52:01:83:39:1e:ce:c8:7e:6b:fc:1f:c5:bf:0b:c9:c9:c3:
19:fa:39:ab:b4:6e:9e:4e:96:17:27:ca:32:3f:c9:d2:a7:28:
ca:44:c6:48:f6:fd:18:1a:cb:23:22:60:48:c4:86:c8:22:04:
72:a1:1a:47:3e:97:f3:1a:02:32:6f:e8:f6:88:72:50:56:86:
b2:73:8c:07:8c:8e:42:0b:1b:43:31:11:f4:3f:e2:53:d3:15:
3e:f3:7f:74:c8:bd:ef:01:65:3a:e4:0f:47:23:87:4a:43:1c:
10:bd:7d:b1:14:ff:d0:1e:ae:83:f2:c2:f8:14:fd:71:22:0f:
91:f6:cf:5b:95:46:8d:20:63:6a:41:7e:3a:56:fd:bc:ca:a5:
d3:c2:98:b8:ad:dc:f1:a9:70:9e:3c:c6:3d:7e:78:25:ca:52:
eb:b6:65:55:ef:01:cc:d9:c6:a9:a8:b8:97:09:0a:dc:7c:a6:
25:38:2e:c5:b8:5d:24:50:cd:b8:2b:8e:63:e2:55:e9:0c:f1:
39:55:de:1d:a2:79:1f:89:92:30:90:df:4c:cd:85:f2:b2:d0:
43:bb:c1:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBjA7nDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzNiNGMxMjQ4YzRiY2YyMmIwNTc3ZGZjYTliMTRkOTA2M2MyOGMwMB4XDTIyMDYx
NTA5MjI0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWM3MWEwYjcxYTc5
M2M5ZmIxY2MwNzk0Yzc1NWQyOWI2ZjFjYjYzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHGaxg+6VCJrQHf7xIV39hKb26s1m5CgJyACNe9o78Qef81
nVriY1/Csd97dkAYaK2+3LTVw1zrA8FiDEg49+yixvsqDBlSLEDP/GMoguqH79CG
sxqEWNrzFQg56UYUWJiws6drgbp7AKlqHeS+wQChyRzTPXcdDkUyKlmzTzIdVb5k
OIWseWk/VymjwGQNUgPIyMcLVQTUQgEiDAnJvMAO8Z1i9SS/S8WzWpNo47z1MRdQ
DdZQlGS/ghyZyEth4JmBFIFPatSnHxN0s/aKTHPdsUzrxFnueSOorgdPfTrKFNpi
bM1VWjIfQ/cUhlofuniy8H4NyuGQ0aEzi5CzKX8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRccaC3Gnk8n7HMB5THVdKbbxy2MjAfBgNVHSMEGDAWgBQHO0wSSMS88isF
d9/KmxTZBjwowDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J6dE1Fa2pFdlBJckJYZmZ5cHNVMlFZOEtNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8x
L1hIR2d0eHA1UEoteHpBZVV4MVhTbTI4Y3RqSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8xL0J6dE1Fa2pFdlBJ
ckJYZmZ5cHNVMlFZOEtNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBCTTANBgkqhkiG9w0BAQsFAAOC
AQEAOAMb6m+3x79JUYYGZxMGOYFmLLLOknX4BrZ9S8aphXAZ3vmtGFIBgzkezsh+
a/wfxb8LycnDGfo5q7Runk6WFyfKMj/J0qcoykTGSPb9GBrLIyJgSMSGyCIEcqEa
Rz6X8xoCMm/o9ohyUFaGsnOMB4yOQgsbQzER9D/iU9MVPvN/dMi97wFlOuQPRyOH
SkMcEL19sRT/0B6ug/LC+BT9cSIPkfbPW5VGjSBjakF+Olb9vMql08KYuK3c8alw
njzGPX54JcpS67ZlVe8BzNnGqai4lwkK3HymJTguxbhdJFDNuCuOY+JV6QzxOVXe
HaJ5H4mSMJDfTM2F8rLQQ7vBhA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org