Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/lA7V1RxSiD8CGxPnYEaHdxfF8sg.roa
File: lA7V1RxSiD8CGxPnYEaHdxfF8sg.roa (raw, json)
Hash identifier: 93EsUw/72rZqN1HGeWUNR+5b7GRpTsduWOrP82N5FtU=
Subject key identifier: 94:0E:D5:D5:1C:52:88:3F:02:1B:13:E7:60:46:87:77:17:C5:F2:C8
Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial: 07FC70E3
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/lA7V1RxSiD8CGxPnYEaHdxfF8sg.roa
Signing time: Sat 01 Jan 2022 05:54:53 +0000
ROA not before: Sat 01 Jan 2022 05:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14717
IP address blocks: 5.133.72.0/22 maxlen: 24
94.125.192.0/21 maxlen: 24
91.199.136.0/24 maxlen: 24
2a02:2ba8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133984483 (0x7fc70e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Validity
Not Before: Jan 1 05:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=940ed5d51c52883f021b13e76046877717c5f2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:7d:e7:d0:cd:3b:77:72:5d:eb:be:9d:aa:
73:88:dd:f9:99:4a:93:30:6d:9b:c4:e3:46:46:f0:
a6:ea:88:02:1e:4a:e5:c7:c0:49:2f:65:f6:2b:e4:
e5:3d:7c:b5:39:81:b1:e6:e5:64:b8:bd:5c:bd:c1:
6b:61:64:c2:93:d8:97:dc:ec:e6:55:f4:6b:13:81:
b2:05:1a:18:13:7b:36:f5:49:d3:40:8a:f5:ef:95:
09:b5:06:96:3f:6d:f0:2f:89:25:8c:bd:cc:f6:8a:
9d:ca:81:ad:0f:65:fb:87:02:ea:0e:12:5b:d7:7f:
46:69:98:5a:63:99:26:f0:cf:ef:f6:da:a6:8d:42:
2e:00:ce:77:dd:b0:08:bf:18:74:e8:32:33:03:c2:
fc:1b:4e:27:df:51:4f:35:e7:3c:75:17:c1:64:7f:
1c:d7:17:cf:99:d8:73:11:db:fa:2e:70:55:b4:22:
00:48:45:f6:53:58:d8:06:96:0b:db:10:5a:50:76:
9f:6a:0c:eb:78:ac:93:41:f5:96:7b:d1:f3:2a:f5:
a8:22:62:c6:d4:1e:6c:01:c2:b6:d1:52:6c:15:31:
65:c1:43:05:1f:f8:ef:8b:0d:09:86:0e:92:55:d1:
a2:30:78:5a:d9:48:94:c9:66:5a:f2:a8:ff:bd:f9:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:D5:D5:1C:52:88:3F:02:1B:13:E7:60:46:87:77:17:C5:F2:C8
X509v3 Authority Key Identifier:
keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/lA7V1RxSiD8CGxPnYEaHdxfF8sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.72.0/22
91.199.136.0/24
94.125.192.0/21
IPv6:
2a02:2ba8::/32
Signature Algorithm: sha256WithRSAEncryption
84:9e:5d:2f:00:92:96:26:38:96:30:fd:11:31:79:95:e0:6e:
eb:3f:ff:8a:79:99:13:21:74:ba:19:26:bc:c9:50:cb:07:0d:
24:3b:32:91:39:dc:ba:e5:ef:59:35:14:15:b8:51:eb:2e:88:
4f:f7:2c:71:71:49:b6:6b:17:72:d0:d9:cf:6a:b2:82:d6:64:
72:21:6c:54:f2:b1:91:94:34:d2:c5:24:a7:c4:01:46:39:c4:
af:44:6f:45:6d:11:a4:0c:87:ee:1b:f0:46:f1:1a:6e:09:e3:
be:3e:3a:55:d5:32:4d:4e:33:ee:08:cc:f5:a6:06:5c:94:ba:
42:b7:6f:94:89:24:59:c7:70:32:34:48:9a:59:79:91:64:8d:
b4:a4:ad:62:e1:0b:05:cc:8c:2a:53:39:59:4d:14:c7:9b:f8:
49:32:68:78:41:9d:f1:e8:95:77:c3:77:a8:04:05:8f:49:31:
7a:4b:7e:f3:bd:8d:f4:ab:f8:ef:4f:c4:70:f1:a4:cc:9d:ce:
92:15:b6:38:2f:a8:7d:c5:61:9e:1d:e1:f2:43:68:df:d8:3f:
27:20:d4:4d:8d:93:7f:27:d1:55:3c:bc:06:27:af:89:eb:5d:
38:eb:9d:ef:bd:1a:67:c9:55:70:2d:b1:a4:1f:12:2d:f8:85:
08:fa:77:4b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEB/xw4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MGIwZGEyMDJkMmMzNGE0NzNhNmQ3NmFmMDkzZThkZTAzMTFiOTViMB4XDTIyMDEw
MTA1NTQ1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQwZWQ1ZDUxYzUy
ODgzZjAyMWIxM2U3NjA0Njg3NzcxN2M1ZjJjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOQQfefQzTt3cl3rvp2qc4jd+ZlKkzBtm8TjRkbwpuqIAh5K
5cfASS9l9ivk5T18tTmBseblZLi9XL3Ba2FkwpPYl9zs5lX0axOBsgUaGBN7NvVJ
00CK9e+VCbUGlj9t8C+JJYy9zPaKncqBrQ9l+4cC6g4SW9d/RmmYWmOZJvDP7/ba
po1CLgDOd92wCL8YdOgyMwPC/BtOJ99RTzXnPHUXwWR/HNcXz5nYcxHb+i5wVbQi
AEhF9lNY2AaWC9sQWlB2n2oM63isk0H1lnvR8yr1qCJixtQebAHCttFSbBUxZcFD
BR/474sNCYYOklXRojB4WtlIlMlmWvKo/735ECUCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSUDtXVHFKIPwIbE+dgRod3F8XyyDAfBgNVHSMEGDAWgBQgsNogLSw0pHOm
12rwk+jeAxG5WzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lMRGFJQzBzTktSenB0ZHE4SlBvM2dNUnVWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvZGVhOTc4LTVkYWUtNGM4ZC05YjJjLWQ4ZWZmNWQ2YTYzYi8x
L2xBN1YxUnhTaUQ4Q0d4UG5ZRWFIZHhmRjhzZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
ZGVhOTc4LTVkYWUtNGM4ZC05YjJjLWQ4ZWZmNWQ2YTYzYi8xL0lMRGFJQzBzTktS
enB0ZHE4SlBvM2dNUnVWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAgWFSAMEAFvHiAMEA159wDANBAIA
AjAHAwUAKgIrqDANBgkqhkiG9w0BAQsFAAOCAQEAhJ5dLwCSliY4ljD9ETF5leBu
6z//inmZEyF0uhkmvMlQywcNJDsykTncuuXvWTUUFbhR6y6IT/cscXFJtmsXctDZ
z2qygtZkciFsVPKxkZQ00sUkp8QBRjnEr0RvRW0RpAyH7hvwRvEabgnjvj46VdUy
TU4z7gjM9aYGXJS6QrdvlIkkWcdwMjRImll5kWSNtKStYuELBcyMKlM5WU0Ux5v4
STJoeEGd8eiVd8N3qAQFj0kxekt+872N9Kv470/EcPGkzJ3OkhW2OC+ofcVhnh3h
8kNo39g/JyDUTY2TfyfRVTy8BievietdOOud770aZ8lVcC2xpB8SLfiFCPp3Sw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:22 2023 by rpki-client on console-ams.rpki-client.org