Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/djI4CUYq0v5KWFXuqU5bqxrpkcM.roa
File: djI4CUYq0v5KWFXuqU5bqxrpkcM.roa (raw, json)
Hash identifier: Vt0e/ykjbTjCuMl9+m0gSmJaj8BokMjeufGa4eml1ss=
Subject key identifier: 76:32:38:09:46:2A:D2:FE:4A:58:55:EE:A9:4E:5B:AB:1A:E9:91:C3
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 448923FA
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/djI4CUYq0v5KWFXuqU5bqxrpkcM.roa
Signing time: Sat 01 Jan 2022 02:50:52 +0000
ROA not before: Sat 01 Jan 2022 02:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201921
IP address blocks: 5.63.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149838330 (0x448923fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 02:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76323809462ad2fe4a5855eea94e5bab1ae991c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:e2:94:8b:f9:c9:1e:b1:05:ff:60:fb:fd:
bb:a8:e0:75:db:c2:27:90:59:13:e7:a4:52:da:83:
83:cf:9e:a8:5a:62:40:c4:47:04:de:94:32:7e:06:
f1:7c:2a:29:6b:19:eb:61:a0:4a:9f:0e:54:d8:85:
02:d3:c2:d6:bf:3b:36:a2:16:e0:6c:e0:e6:34:8f:
97:0f:2b:41:b9:a5:81:8a:9e:b6:4a:c9:5c:46:fb:
aa:e9:27:c4:e0:60:34:1d:a4:ff:46:6b:77:f4:0e:
51:47:99:a6:a8:54:22:b1:41:7f:13:8a:86:d5:b2:
ea:f7:4f:56:8d:b5:58:d5:7a:3b:ac:b3:03:e7:ed:
d5:8b:dc:f8:06:c0:12:65:f2:60:21:db:ed:76:8b:
9f:44:07:72:86:c7:1b:86:f6:48:d5:06:bc:03:7e:
c9:e8:67:da:e7:c1:15:99:8c:b4:5e:07:a3:ba:ec:
df:e7:b1:ab:72:35:d4:27:13:38:95:14:a6:c0:fd:
38:a7:0b:31:ea:af:1d:f3:27:11:f0:2e:18:73:85:
7e:0a:6c:a0:17:ec:40:c3:50:1f:76:24:ba:9a:7b:
82:6e:bd:72:ee:8d:39:28:51:2b:07:0c:da:92:ab:
82:93:58:be:74:0e:7e:39:6b:76:ae:48:8b:fb:62:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:38:09:46:2A:D2:FE:4A:58:55:EE:A9:4E:5B:AB:1A:E9:91:C3
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/djI4CUYq0v5KWFXuqU5bqxrpkcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c0:c7:68:8f:90:2a:c7:f8:b4:3d:fc:3a:8c:00:c8:71:c0:
ce:14:8d:2a:79:4c:46:d5:0a:82:47:c3:f1:91:86:6e:73:3f:
79:4e:a0:06:97:ec:e3:53:f3:5c:9b:cf:22:cc:1c:d8:47:cf:
7b:ce:26:77:fa:2c:c2:60:ca:9f:b0:83:1f:0e:9b:0f:c6:2e:
ec:e7:8e:db:77:a0:22:e4:da:5e:27:d1:3d:e0:c9:0a:ee:82:
b6:17:7f:cd:e8:01:13:9d:8d:bb:50:e9:e8:69:11:34:98:ae:
3c:56:14:5a:df:42:cb:e2:40:2a:b6:d3:b4:27:2e:c7:d2:25:
f7:cf:ce:e0:a9:f2:7d:f2:57:53:56:23:cc:07:55:2a:d6:87:
06:6d:0d:46:5a:03:2b:0a:2e:30:70:39:87:d3:48:a7:c0:23:
f8:22:df:cd:8b:5b:51:9e:92:93:f9:06:ad:1a:8d:d4:f2:a0:
47:b5:0a:80:0c:2c:28:70:89:77:26:59:d5:6e:9a:7a:75:77:
f9:41:6a:c7:cf:e5:62:ea:61:23:f6:c2:53:26:6d:c8:0c:57:
ce:86:90:ea:fb:19:69:f5:74:c2:6a:a9:24:f6:d0:68:62:ea:
95:8e:1c:e4:50:f7:b5:f6:26:b2:1f:55:94:0d:c4:de:fb:6a:
70:13:69:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIERIkj+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MjkzMGY4YzY4OGMwNGQxNzQzM2EyYjljNzI0OWJjNjI1YmNlMzE2MB4XDTIyMDEw
MTAyNTA1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzYzMjM4MDk0NjJh
ZDJmZTRhNTg1NWVlYTk0ZTViYWIxYWU5OTFjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANA04pSL+ckesQX/YPv9u6jgddvCJ5BZE+ekUtqDg8+eqFpi
QMRHBN6UMn4G8XwqKWsZ62GgSp8OVNiFAtPC1r87NqIW4Gzg5jSPlw8rQbmlgYqe
tkrJXEb7quknxOBgNB2k/0Zrd/QOUUeZpqhUIrFBfxOKhtWy6vdPVo21WNV6O6yz
A+ft1Yvc+AbAEmXyYCHb7XaLn0QHcobHG4b2SNUGvAN+yehn2ufBFZmMtF4Ho7rs
3+exq3I11CcTOJUUpsD9OKcLMeqvHfMnEfAuGHOFfgpsoBfsQMNQH3Ykupp7gm69
cu6NOShRKwcM2pKrgpNYvnQOfjlrdq5Ii/tidicCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR2MjgJRirS/kpYVe6pTlurGumRwzAfBgNVHSMEGDAWgBQCkw+MaIwE0XQz
ornHJJvGJbzjFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FwTVBqR2lNQk5GME02SzV4eVNieGlXODR4WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvYjIwNjRiLWJlMDktNDNkOS1iMDg3LWE0ZTk5MWIwZjE0NC8x
L2RqSTRDVVlxMHY1S1dGWHVxVTVicXhycGtjTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
YjIwNjRiLWJlMDktNDNkOS1iMDg3LWE0ZTk5MWIwZjE0NC8xL0FwTVBqR2lNQk5G
ME02SzV4eVNieGlXODR4WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAU/oDANBgkqhkiG9w0BAQsFAAOC
AQEADcDHaI+QKsf4tD38OowAyHHAzhSNKnlMRtUKgkfD8ZGGbnM/eU6gBpfs41Pz
XJvPIswc2EfPe84md/oswmDKn7CDHw6bD8Yu7OeO23egIuTaXifRPeDJCu6Cthd/
zegBE52Nu1Dp6GkRNJiuPFYUWt9Cy+JAKrbTtCcux9Il98/O4KnyffJXU1YjzAdV
KtaHBm0NRloDKwouMHA5h9NIp8Aj+CLfzYtbUZ6Sk/kGrRqN1PKgR7UKgAwsKHCJ
dyZZ1W6aenV3+UFqx8/lYuphI/bCUyZtyAxXzoaQ6vsZafV0wmqpJPbQaGLqlY4c
5FD3tfYmsh9VlA3E3vtqcBNp0g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org