Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gikKY3xBuTDfkmcgbwzh1p3vbEM.roa
File: gikKY3xBuTDfkmcgbwzh1p3vbEM.roa (raw, json)
Hash identifier: PD2ky2fdi+gfSpb5Glfsy/5u5fUAtXa7L7gUaBmH5ck=
Subject key identifier: 82:29:0A:63:7C:41:B9:30:DF:92:67:20:6F:0C:E1:D6:9D:EF:6C:43
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 05A0820E
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gikKY3xBuTDfkmcgbwzh1p3vbEM.roa
Signing time: Mon 18 Apr 2022 04:52:44 +0000
ROA not before: Mon 18 Apr 2022 04:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20803
IP address blocks: 80.66.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94405134 (0x5a0820e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Apr 18 04:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82290a637c41b930df9267206f0ce1d69def6c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:31:38:25:e1:f9:1b:0f:0e:67:2f:ad:9e:
6f:33:4b:2f:4f:ab:8f:7f:dc:91:a5:40:e5:d9:b8:
63:ea:13:56:30:77:4c:e0:eb:ea:de:c0:71:70:a3:
81:41:c5:ce:a6:6b:f9:f0:b9:35:32:e2:af:1c:c4:
e8:21:ea:af:58:ac:ef:43:43:57:93:4a:cc:1f:8d:
97:81:83:b3:1a:3c:6f:fc:04:6c:dd:da:29:26:93:
64:86:8a:7e:74:44:96:52:02:cf:64:b7:53:36:aa:
d4:2f:c3:39:25:31:f9:1a:10:73:62:26:b9:03:08:
78:5b:36:a1:68:66:b5:8a:0a:f8:bb:eb:f1:77:0e:
6e:e7:1f:14:f6:b5:03:9a:4a:a7:44:44:78:12:d6:
cf:63:05:24:0a:3b:ec:cb:1a:6a:29:cf:be:5c:42:
45:b3:7b:8b:d5:d4:88:c4:4f:71:b4:87:8e:d3:c6:
20:3d:64:34:d1:e8:57:1d:ba:0b:05:52:ad:13:f3:
97:f9:bc:65:26:c1:0c:e0:0b:16:c3:23:c0:a4:90:
f6:7e:ca:0c:59:da:7b:d3:0a:24:6f:0f:dc:f1:be:
92:13:cf:48:10:29:2f:b3:fc:51:d4:e4:46:7a:40:
76:06:50:1a:96:81:15:1a:ff:35:d2:12:ae:75:4a:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:0A:63:7C:41:B9:30:DF:92:67:20:6F:0C:E1:D6:9D:EF:6C:43
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gikKY3xBuTDfkmcgbwzh1p3vbEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0a:e8:76:74:9c:ec:d6:01:0d:60:a3:06:3d:e9:58:5b:81:
1a:52:42:57:07:45:ab:2d:7b:3e:84:3f:91:ff:d2:e0:8e:7c:
8d:05:02:5e:9b:02:88:a3:87:3d:e9:83:a9:5c:c6:ea:34:0a:
e2:56:38:d8:9c:67:9a:fc:7e:de:5a:c8:06:76:fd:96:4f:ed:
22:3d:83:99:a2:f6:47:e9:58:9b:16:f7:3f:26:cb:b1:a6:73:
0f:97:5a:bd:52:f7:db:4a:d7:7f:61:22:89:6d:4b:09:df:ac:
8c:b3:6e:ea:ca:37:8c:55:b8:a2:d7:8c:00:90:ce:2d:7a:f3:
76:b8:c2:6f:60:5e:19:45:12:15:4e:c8:5c:e1:2f:22:31:cc:
7b:5e:3d:6a:bc:22:ec:3e:7f:4c:79:6e:4a:af:f2:d7:2f:7b:
c5:89:31:93:b3:5f:e3:cd:48:04:fb:d3:96:9e:42:e4:cb:33:
93:4a:00:2d:c6:7a:45:c2:6e:a3:10:ab:6e:5f:3f:fb:75:74:
18:66:aa:26:e8:7b:f7:5e:90:f9:96:c9:76:91:4f:d0:7f:31:
ad:11:dc:3c:ae:42:84:62:3a:e9:0e:f8:84:f8:03:36:f0:b7:
b1:5f:7b:e1:6f:f3:7f:11:76:80:bd:6f:ec:27:68:85:f2:77:
56:61:c7:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaCCDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzNiNGMxMjQ4YzRiY2YyMmIwNTc3ZGZjYTliMTRkOTA2M2MyOGMwMB4XDTIyMDQx
ODA0NTI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODIyOTBhNjM3YzQx
YjkzMGRmOTI2NzIwNmYwY2UxZDY5ZGVmNmM0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhwMTgl4fkbDw5nL62ebzNLL0+rj3/ckaVA5dm4Y+oTVjB3
TODr6t7AcXCjgUHFzqZr+fC5NTLirxzE6CHqr1is70NDV5NKzB+Nl4GDsxo8b/wE
bN3aKSaTZIaKfnREllICz2S3Uzaq1C/DOSUx+RoQc2ImuQMIeFs2oWhmtYoK+Lvr
8XcObucfFPa1A5pKp0REeBLWz2MFJAo77MsaainPvlxCRbN7i9XUiMRPcbSHjtPG
ID1kNNHoVx26CwVSrRPzl/m8ZSbBDOALFsMjwKSQ9n7KDFnae9MKJG8P3PG+khPP
SBApL7P8UdTkRnpAdgZQGpaBFRr/NdISrnVKpX0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSCKQpjfEG5MN+SZyBvDOHWne9sQzAfBgNVHSMEGDAWgBQHO0wSSMS88isF
d9/KmxTZBjwowDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J6dE1Fa2pFdlBJckJYZmZ5cHNVMlFZOEtNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8x
L2dpa0tZM3hCdVREZmttY2did3poMXAzdmJFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8xL0J6dE1Fa2pFdlBJ
ckJYZmZ5cHNVMlFZOEtNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBCSzANBgkqhkiG9w0BAQsFAAOC
AQEAQArodnSc7NYBDWCjBj3pWFuBGlJCVwdFqy17PoQ/kf/S4I58jQUCXpsCiKOH
PemDqVzG6jQK4lY42Jxnmvx+3lrIBnb9lk/tIj2DmaL2R+lYmxb3PybLsaZzD5da
vVL320rXf2EiiW1LCd+sjLNu6so3jFW4oteMAJDOLXrzdrjCb2BeGUUSFU7IXOEv
IjHMe149arwi7D5/THluSq/y1y97xYkxk7Nf481IBPvTlp5C5Mszk0oALcZ6RcJu
oxCrbl8/+3V0GGaqJuh7916Q+ZbJdpFP0H8xrRHcPK5ChGI66Q74hPgDNvC3sV97
4W/zfxF2gL1v7CdohfJ3VmHHsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org