Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DCG0KZQEP0tYvvolVt9d79xRzWI.roa
File: DCG0KZQEP0tYvvolVt9d79xRzWI.roa (raw, json)
Hash identifier: YeGKo5fsPEDokvd98R5OXMnN4hWe6Zl+LmVWRa5LtMU=
Subject key identifier: 0C:21:B4:29:94:04:3F:4B:58:BE:FA:25:56:DF:5D:EF:DC:51:CD:62
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01839EFD563025F36C8A5E1747819998B818
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DCG0KZQEP0tYvvolVt9d79xRzWI.roa
Signing time: Mon 03 Oct 2022 17:55:46 +0000
ROA not before: Mon 03 Oct 2022 17:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 5.180.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:fd:56:30:25:f3:6c:8a:5e:17:47:81:99:98:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 3 17:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c21b42994043f4b58befa2556df5defdc51cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:05:a3:9f:a7:13:81:0b:ed:de:77:b9:52:
57:9f:80:ff:49:6c:cf:c4:50:e7:f8:61:5f:a0:58:
8b:f5:71:f6:03:20:fc:28:6b:bc:54:27:13:73:35:
0b:f7:d2:05:de:2c:f7:fd:67:7b:8e:1e:fa:83:dd:
69:c6:59:ba:56:f1:92:7d:71:09:43:a2:60:af:c1:
b5:2f:99:60:fd:5c:52:19:51:23:0b:8d:b4:40:e7:
b4:64:75:c0:53:9a:93:7b:e5:4e:62:11:8b:a8:13:
18:c1:9f:3f:33:c1:43:2f:99:85:b8:b1:32:7d:e3:
80:59:8c:d0:48:98:70:8c:40:08:ae:d8:c5:83:c3:
e7:6c:d2:2a:b7:59:71:a5:de:b2:af:2c:49:81:f2:
e7:b8:dd:b3:6f:5d:08:d4:3e:4c:48:66:55:c4:79:
75:af:14:b6:97:cd:a7:a2:83:79:90:e3:e1:78:ef:
3d:ea:5a:0d:4a:67:f3:f3:3a:35:cb:c2:61:12:65:
a8:d0:49:a8:b9:59:d7:1a:6f:a5:45:f5:8e:df:99:
23:8d:bb:e7:11:f8:c8:6b:2f:44:03:31:d5:80:6c:
53:27:b3:1d:67:b0:9c:af:ad:72:24:2d:23:a9:1f:
dd:64:0d:16:08:2c:38:bb:bd:f3:fd:d6:23:08:77:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:B4:29:94:04:3F:4B:58:BE:FA:25:56:DF:5D:EF:DC:51:CD:62
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DCG0KZQEP0tYvvolVt9d79xRzWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:93:22:60:e8:2d:19:a1:a2:15:60:f6:b0:49:da:4b:60:e7:
b8:7b:e3:a3:12:c6:f7:67:8c:a9:69:92:a6:dd:16:aa:1f:ed:
cc:d3:9c:03:01:24:5e:e2:f7:09:07:c0:7a:d7:f9:ba:1c:91:
8b:e9:ac:97:19:da:24:58:39:fe:61:3c:23:a4:e2:7e:c0:a9:
15:51:8c:f8:3d:36:d1:c8:fa:56:15:5e:07:d7:58:0a:79:1d:
9c:76:cc:11:c9:f4:72:ef:e4:b9:1b:62:95:ab:6c:9f:77:15:
ad:f7:e0:b0:7a:17:88:58:00:8d:5d:5c:0c:d9:ea:21:fb:5e:
1d:23:b1:0c:4e:71:a3:5a:7a:49:de:39:a6:61:85:71:28:a1:
78:9b:e0:da:52:20:04:90:b2:67:af:71:ba:81:cb:92:a4:29:
a5:ab:b0:c7:0d:48:77:9d:3b:55:42:73:0e:3f:c3:e6:d5:53:
1a:e4:94:16:37:ab:5e:a3:f3:d6:a8:8b:d6:13:47:69:46:26:
e5:83:02:85:bd:15:bf:8a:5d:ad:8d:80:96:dd:4a:bd:7c:9c:
80:3f:3a:3d:be:62:42:eb:6b:d7:b1:8d:20:fe:a6:c4:bb:0c:
4b:17:28:80:ec:d7:03:88:47:67:5b:48:7e:5b:e0:38:86:b9:
94:db:81:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOe/VYwJfNsil4XR4GZmLgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIxMDAzMTc1NTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzIxYjQyOTk0MDQzZjRiNThiZWZhMjU1NmRmNWRlZmRjNTFjZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBgFo5+nE4EL7d53uVJXn4D/SWzP
xFDn+GFfoFiL9XH2AyD8KGu8VCcTczUL99IF3iz3/Wd7jh76g91pxlm6VvGSfXEJ
Q6Jgr8G1L5lg/VxSGVEjC420QOe0ZHXAU5qTe+VOYhGLqBMYwZ8/M8FDL5mFuLEy
feOAWYzQSJhwjEAIrtjFg8PnbNIqt1lxpd6yryxJgfLnuN2zb10I1D5MSGZVxHl1
rxS2l82nooN5kOPheO896loNSmfz8zo1y8JhEmWo0EmouVnXGm+lRfWO35kjjbvn
EfjIay9EAzHVgGxTJ7MdZ7Ccr61yJC0jqR/dZA0WCCw4u73z/dYjCHfKswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwhtCmUBD9LWL76JVbfXe/cUc1iMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRENHMEtaUUVQMHRZdnZvbFZ0OWQ3OXhSeldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRRMA0G
CSqGSIb3DQEBCwUAA4IBAQBqkyJg6C0ZoaIVYPawSdpLYOe4e+OjEsb3Z4ypaZKm
3RaqH+3M05wDASRe4vcJB8B61/m6HJGL6ayXGdokWDn+YTwjpOJ+wKkVUYz4PTbR
yPpWFV4H11gKeR2cdswRyfRy7+S5G2KVq2yfdxWt9+CweheIWACNXVwM2eoh+14d
I7EMTnGjWnpJ3jmmYYVxKKF4m+DaUiAEkLJnr3G6gcuSpCmlq7DHDUh3nTtVQnMO
P8Pm1VMa5JQWN6teo/PWqIvWE0dpRiblgwKFvRW/il2tjYCW3Uq9fJyAPzo9vmJC
62vXsY0g/qbEuwxLFyiA7NcDiEdnW0h+W+A4hrmU24GG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org