Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/HLqDsTqkGENBI1UFDVaMdokhI1k.roa
File: HLqDsTqkGENBI1UFDVaMdokhI1k.roa (raw, json)
Hash identifier: a0U7yniFpomaEwrvs8RiK7Z7VF6txlJfCpuJmz2wMtI=
Subject key identifier: 1C:BA:83:B1:3A:A4:18:43:41:23:55:05:0D:56:8C:76:89:21:23:59
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 0597F90E
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/HLqDsTqkGENBI1UFDVaMdokhI1k.roa
Signing time: Sat 01 Jan 2022 01:03:02 +0000
ROA not before: Sat 01 Jan 2022 01:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209141
IP address blocks: 5.180.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93845774 (0x597f90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: Jan 1 01:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cba83b13aa41843412355050d568c7689212359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:d8:2c:69:04:7a:8f:16:63:5a:12:d3:a0:
f3:fe:c0:d3:ae:e7:b9:a7:17:b5:31:eb:b2:e2:3b:
6d:6a:8a:62:61:b4:b2:e1:20:b5:12:ba:a3:8d:25:
68:c0:41:cf:cd:52:26:47:cf:25:5c:df:f7:94:e2:
49:50:4f:b5:a9:0b:da:df:5f:66:21:e9:10:8d:fc:
61:0b:41:d7:c0:fe:64:e4:ee:1d:cc:e0:7c:0b:28:
bb:43:bf:74:66:a6:65:23:07:db:f4:84:ee:ce:78:
e8:bb:6c:39:2b:cd:d9:a6:32:91:35:ba:bf:c7:14:
b4:87:48:5a:64:e4:24:99:60:2a:be:bc:37:84:6a:
a3:bd:c2:32:39:d4:e4:f3:c4:8e:04:c2:c5:46:2b:
e0:50:88:06:14:a9:44:aa:0f:9b:2c:fb:d8:bd:49:
9f:89:89:87:6d:3c:de:01:ea:fb:2a:06:28:9a:1b:
56:38:24:c8:f1:4a:ff:51:fb:0a:55:5b:d4:aa:02:
96:34:79:fd:bb:0e:8c:d5:9e:7a:e9:b9:77:b8:ba:
2f:4d:96:cd:49:dc:71:5c:0f:50:40:e3:25:c1:64:
83:63:82:16:44:0a:7d:6d:f2:27:24:db:99:c0:c1:
c3:53:c0:74:bd:a9:e9:f6:6f:cc:c8:5e:28:7a:3b:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:83:B1:3A:A4:18:43:41:23:55:05:0D:56:8C:76:89:21:23:59
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/HLqDsTqkGENBI1UFDVaMdokhI1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ae:b3:7e:69:b8:ac:77:09:5a:09:de:e2:3a:03:41:a4:70:
f7:48:ee:4b:82:e3:71:fc:0c:73:22:47:53:4d:50:e2:48:93:
82:a0:d4:a9:37:47:3f:02:cd:8d:04:cc:70:c4:b3:d2:d0:20:
23:b6:83:ed:97:32:63:c6:75:76:18:bd:d0:91:ad:1b:9b:c0:
1e:d8:8e:17:6b:8f:21:f0:5a:99:57:a6:c0:3f:82:92:25:45:
02:d4:ad:9d:01:34:ec:f8:8a:21:80:3c:61:cd:84:ba:d1:6f:
a4:b0:8f:5e:54:c2:d1:64:8d:e0:18:21:3c:f8:a1:61:80:39:
c5:22:84:94:42:7e:ce:76:f4:06:c7:79:4f:fb:59:d5:67:28:
e8:70:ca:92:45:13:4a:e5:f5:36:ad:e9:77:00:80:1b:77:5c:
fc:e8:8b:6d:97:b8:ea:bd:4c:fc:b5:da:a2:47:7c:77:c4:b3:
6d:6e:da:57:33:76:2e:b8:82:b5:5b:35:e2:bf:b5:cf:18:ce:
d1:78:27:a7:19:77:7e:35:15:80:d6:7f:9d:37:e3:3f:41:84:
38:c8:e1:a1:7d:6b:ff:ee:f8:3e:de:f2:c5:35:d4:d4:bd:41:
e5:7d:0f:bd:62:79:69:51:2b:40:7f:52:cb:91:2a:af:d9:7a:
36:01:70:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZf5DjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NGMxMjcyOTg4MmQ2ZmNjNDAwZDI0YzdhMTYxOTFlYmY3OWFkM2FlMB4XDTIyMDEw
MTAxMDMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWNiYTgzYjEzYWE0
MTg0MzQxMjM1NTA1MGQ1NjhjNzY4OTIxMjM1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5U2CxpBHqPFmNaEtOg8/7A067nuacXtTHrsuI7bWqKYmG0
suEgtRK6o40laMBBz81SJkfPJVzf95TiSVBPtakL2t9fZiHpEI38YQtB18D+ZOTu
HczgfAsou0O/dGamZSMH2/SE7s546LtsOSvN2aYykTW6v8cUtIdIWmTkJJlgKr68
N4Rqo73CMjnU5PPEjgTCxUYr4FCIBhSpRKoPmyz72L1Jn4mJh2083gHq+yoGKJob
VjgkyPFK/1H7ClVb1KoCljR5/bsOjNWeeum5d7i6L02WzUnccVwPUEDjJcFkg2OC
FkQKfW3yJyTbmcDBw1PAdL2p6fZvzMheKHo7t3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQcuoOxOqQYQ0EjVQUNVox2iSEjWTAfBgNVHSMEGDAWgBQUwScpiC1vzEAN
JMehYZHr95rTrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZNRW5LWWd0Yjh4QURTVEhvV0dSNl9lYTA2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvY2IzYTUzLTA4ODctNGMyYS05ZGQyLWRkNzBmZDY3OWVmYi8x
L0hMcURzVHFrR0VOQkkxVUZEVmFNZG9raEkxay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
Y2IzYTUzLTA4ODctNGMyYS05ZGQyLWRkNzBmZDY3OWVmYi8xL0ZNRW5LWWd0Yjh4
QURTVEhvV0dSNl9lYTA2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW0XDANBgkqhkiG9w0BAQsFAAOC
AQEADq6zfmm4rHcJWgne4joDQaRw90juS4LjcfwMcyJHU01Q4kiTgqDUqTdHPwLN
jQTMcMSz0tAgI7aD7ZcyY8Z1dhi90JGtG5vAHtiOF2uPIfBamVemwD+CkiVFAtSt
nQE07PiKIYA8Yc2EutFvpLCPXlTC0WSN4BghPPihYYA5xSKElEJ+znb0Bsd5T/tZ
1Wco6HDKkkUTSuX1Nq3pdwCAG3dc/OiLbZe46r1M/LXaokd8d8SzbW7aVzN2LriC
tVs14r+1zxjO0Xgnpxl3fjUVgNZ/nTfjP0GEOMjhoX1r/+74Pt7yxTXU1L1B5X0P
vWJ5aVErQH9Sy5Eqr9l6NgFwGA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org