Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H2KVOzcp3WjWyTXudgoEDSS0hn8.roa
File: H2KVOzcp3WjWyTXudgoEDSS0hn8.roa (raw, json)
Hash identifier: tbG4y8JW5+/oOmit0Y1ncEi4+0MuthELRp/ZCrfrtB4=
Subject key identifier: 1F:62:95:3B:37:29:DD:68:D6:C9:35:EE:76:0A:04:0D:24:B4:86:7F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03CD916A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H2KVOzcp3WjWyTXudgoEDSS0hn8.roa
Signing time: Sat 01 Jan 2022 13:03:57 +0000
ROA not before: Sat 01 Jan 2022 13:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27882
IP address blocks: 181.41.144.0/21 maxlen: 21
181.41.156.0/22 maxlen: 22
203.88.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63803754 (0x3cd916a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f62953b3729dd68d6c935ee760a040d24b4867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:32:b6:e5:94:2b:9d:a0:e2:07:84:14:6b:
ba:f0:f7:9d:79:4d:ac:c4:c7:91:3b:a0:69:12:23:
28:fe:42:22:43:a7:03:10:7e:12:d4:32:67:76:66:
c6:44:66:68:95:88:54:ff:ff:5b:5e:a4:90:ac:c7:
ea:ea:8d:9d:a4:25:d7:2f:4a:96:ba:54:f6:f8:f3:
8a:54:82:07:5c:c1:89:28:de:5f:d1:98:58:5f:7f:
98:b3:8a:bc:95:f1:b6:ac:7a:c0:87:fb:19:86:ca:
f0:61:5c:d4:f3:d3:74:d8:50:2a:1b:6a:42:64:fe:
0e:86:69:71:38:ef:d2:4c:a0:f7:2a:d6:28:90:44:
10:25:da:81:ab:a8:10:00:f7:0a:d1:fd:ed:b5:bf:
85:f1:7e:02:96:56:6e:08:4d:e7:33:f0:c8:b4:04:
cc:e6:ab:dc:2f:c0:4b:23:dc:0b:f7:bd:3b:b8:3d:
00:ed:34:fe:51:96:ba:69:06:84:04:29:5d:05:f0:
e8:97:33:74:1a:11:dd:a6:34:b4:14:ec:92:0f:31:
99:f6:ff:c0:56:6f:0c:df:39:5d:ae:bb:43:7b:cf:
e0:c6:9f:3e:57:37:b8:8e:73:2d:18:53:54:da:f7:
b8:dc:5b:bf:ad:ff:68:38:34:63:73:e6:bd:d8:03:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:62:95:3B:37:29:DD:68:D6:C9:35:EE:76:0A:04:0D:24:B4:86:7F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H2KVOzcp3WjWyTXudgoEDSS0hn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.144.0/21
181.41.156.0/22
203.88.96.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ae:85:0a:a5:29:40:25:cb:ed:43:b7:e6:1e:41:98:01:1f:
fa:68:9b:8f:28:b7:6f:a1:3a:0f:3e:46:43:b7:6e:45:14:7d:
f9:36:2a:3e:e0:f6:12:5d:69:2d:29:a9:6a:2b:3c:fa:1c:4a:
0b:71:bb:60:1d:af:dd:94:6e:4d:ca:d8:7c:00:7e:5b:0a:63:
47:b2:fa:b5:79:df:92:65:b2:90:58:27:37:d1:d8:0b:29:d3:
14:43:ba:b1:cc:c3:90:16:81:6e:1c:2b:6b:f8:b5:26:f2:1e:
ba:f8:00:ee:c5:70:b4:ee:5b:44:da:9f:80:ca:6a:c6:d3:02:
62:5e:ab:b3:bb:e5:65:3e:ff:03:32:99:99:3e:c3:51:ac:73:
d9:f1:9f:31:dd:1c:db:2d:ba:3d:07:0d:17:34:09:b3:46:33:
af:10:c2:83:19:46:50:32:62:3d:1b:f8:5b:96:74:f3:c0:61:
8e:cc:a4:f9:e4:90:40:07:69:06:78:28:eb:da:a4:23:45:34:
3b:11:50:1b:a1:6b:17:4f:1c:e9:ef:3e:94:35:70:7a:41:57:
9f:05:c3:3b:1a:bd:bc:a6:8e:ed:9f:ab:4a:f7:c0:42:44:99:
e8:67:f5:eb:7a:70:1d:fd:5b:0e:2a:a5:4d:49:e6:a8:e5:6a:
58:6e:fd:b0
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA82RajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDM1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY2Mjk1M2IzNzI5
ZGQ2OGQ2YzkzNWVlNzYwYTA0MGQyNGI0ODY3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANsRMrbllCudoOIHhBRruvD3nXlNrMTHkTugaRIjKP5CIkOn
AxB+EtQyZ3ZmxkRmaJWIVP//W16kkKzH6uqNnaQl1y9KlrpU9vjzilSCB1zBiSje
X9GYWF9/mLOKvJXxtqx6wIf7GYbK8GFc1PPTdNhQKhtqQmT+DoZpcTjv0kyg9yrW
KJBEECXagauoEAD3CtH97bW/hfF+ApZWbghN5zPwyLQEzOar3C/ASyPcC/e9O7g9
AO00/lGWumkGhAQpXQXw6JczdBoR3aY0tBTskg8xmfb/wFZvDN85Xa67Q3vP4Maf
Plc3uI5zLRhTVNr3uNxbv63/aDg0Y3PmvdgDyosCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQfYpU7NyndaNbJNe52CgQNJLSGfzAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L0gyS1ZPemNwM1dqV3lUWHVkZ29FRFNTMGhuOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA7UpkAMEArUpnAMEAstYYDANBgkq
hkiG9w0BAQsFAAOCAQEAVq6FCqUpQCXL7UO35h5BmAEf+mibjyi3b6E6Dz5GQ7du
RRR9+TYqPuD2El1pLSmpais8+hxKC3G7YB2v3ZRuTcrYfAB+WwpjR7L6tXnfkmWy
kFgnN9HYCynTFEO6sczDkBaBbhwra/i1JvIeuvgA7sVwtO5bRNqfgMpqxtMCYl6r
s7vlZT7/AzKZmT7DUaxz2fGfMd0c2y26PQcNFzQJs0YzrxDCgxlGUDJiPRv4W5Z0
88Bhjsyk+eSQQAdpBngo69qkI0U0OxFQG6FrF08c6e8+lDVwekFXnwXDOxq9vKaO
7Z+rSvfAQkSZ6Gf163pwHf1bDiqlTUnmqOVqWG79sA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org