Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxvU2KLumcdwnGzDSYrmMwLekiA.roa
File: XxvU2KLumcdwnGzDSYrmMwLekiA.roa (raw, json)
Hash identifier: 4prKoof8sHFgGlt/ZHGLEEIeuJ7XV/KsDBov9W0SNhk=
Subject key identifier: 5F:1B:D4:D8:A2:EE:99:C7:70:9C:6C:C3:49:8A:E6:33:02:DE:92:20
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A59447
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxvU2KLumcdwnGzDSYrmMwLekiA.roa
Signing time: Sat 01 Jan 2022 08:55:48 +0000
ROA not before: Sat 01 Jan 2022 08:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51469
IP address blocks: 81.12.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933598279 (0x37a59447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f1bd4d8a2ee99c7709c6cc3498ae63302de9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:5d:d5:64:a1:cb:b5:cb:91:b6:4f:99:e6:
d9:ab:05:6e:e8:19:1f:1c:ba:6c:eb:fe:6c:fb:d7:
3e:bf:8b:71:c9:70:7e:37:47:a2:3f:5f:bc:bf:f1:
84:02:df:33:97:bc:5a:70:6a:18:3a:eb:05:78:1c:
cc:22:24:2d:68:dd:c9:24:90:a6:97:21:60:8e:8d:
20:95:e5:4f:f7:05:45:b9:f0:0a:05:9d:26:38:9b:
cd:87:fc:23:ab:2d:32:6c:d1:b7:07:45:cc:a4:9d:
df:d2:45:25:ad:93:08:c9:f5:02:f2:ec:1b:21:31:
9f:8d:19:94:18:b5:1a:40:b4:4c:36:a2:3d:d7:b7:
dd:43:d6:dd:48:2f:51:bb:69:ad:30:03:dd:35:c6:
81:10:ad:25:a8:ff:aa:b1:94:01:fe:27:6c:b8:f2:
d7:29:ba:0d:fb:c0:aa:90:7d:65:f1:21:14:61:1c:
16:8d:98:59:bb:b4:f4:a0:48:ce:bc:2e:d0:73:56:
df:4b:64:6b:f7:4b:71:e2:08:79:01:82:17:43:a2:
ba:bc:00:3b:dd:c2:3f:65:84:b9:a3:3c:3c:92:aa:
0b:bf:c3:00:a7:a8:6e:e2:b6:63:ef:c3:63:9c:76:
b0:6b:2f:ed:e6:42:d6:2c:68:9c:6e:f7:45:37:b9:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1B:D4:D8:A2:EE:99:C7:70:9C:6C:C3:49:8A:E6:33:02:DE:92:20
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XxvU2KLumcdwnGzDSYrmMwLekiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:bb:89:59:89:df:3a:09:25:bb:f2:9e:77:08:d6:8a:13:ce:
2c:2f:ee:57:2c:e5:47:2d:b4:f1:06:76:be:ac:df:00:53:e4:
d0:48:4c:da:d8:cc:3c:c1:65:0c:64:57:ae:c5:68:ee:aa:06:
f8:93:c2:30:04:c7:c3:8f:56:b1:9d:b0:b4:1c:2c:f5:91:38:
c5:9f:d3:53:a4:a9:77:6a:36:24:d5:e3:0e:d6:26:94:94:66:
04:a0:76:a1:ed:d9:c0:1d:b6:af:e6:f0:b6:b4:3c:8b:b6:03:
47:41:93:85:0f:8c:59:a5:2f:4a:b1:32:65:a2:9e:72:75:b1:
f1:2c:c0:f4:06:91:04:5f:c8:10:fe:b5:04:80:7f:53:2f:6f:
2a:4a:c8:40:d8:02:77:f3:83:c5:cb:50:4a:bb:93:92:cd:54:
9b:b6:ed:c1:b5:e3:96:d9:5e:0a:7d:a9:1e:75:fe:db:a3:a4:
d4:c6:5b:17:43:3a:4c:8e:61:eb:fa:8b:86:92:12:48:b0:ba:
03:4a:c3:e2:dd:98:2e:98:8c:dc:e8:c9:6f:57:54:7b:73:f9:
7f:a0:86:07:6a:47:70:c6:39:a0:07:98:10:fc:59:e2:90:3c:
ef:07:10:dc:2e:17:e1:a8:f9:e1:d5:8c:ab:f0:48:26:5f:82:
13:8e:a5:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN6WURzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMB4XDTIyMDEw
MTA4NTU0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWYxYmQ0ZDhhMmVl
OTljNzcwOWM2Y2MzNDk4YWU2MzMwMmRlOTIyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIFXdVkocu1y5G2T5nm2asFbugZHxy6bOv+bPvXPr+Lcclw
fjdHoj9fvL/xhALfM5e8WnBqGDrrBXgczCIkLWjdySSQppchYI6NIJXlT/cFRbnw
CgWdJjibzYf8I6stMmzRtwdFzKSd39JFJa2TCMn1AvLsGyExn40ZlBi1GkC0TDai
Pde33UPW3UgvUbtprTAD3TXGgRCtJaj/qrGUAf4nbLjy1ym6DfvAqpB9ZfEhFGEc
Fo2YWbu09KBIzrwu0HNW30tka/dLceIIeQGCF0OiurwAO93CP2WEuaM8PJKqC7/D
AKeobuK2Y+/DY5x2sGsv7eZC1ixonG73RTe5ey0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfG9TYou6Zx3CcbMNJiuYzAt6SIDAfBgNVHSMEGDAWgBQAd12Ucbhdlj/v
bSg1kOLZQt1cITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8x
L1h4dlUyS0x1bWNkd25HekRTWXJtTXdMZWtpQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZ
XzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlEMIDANBgkqhkiG9w0BAQsFAAOC
AQEAqLuJWYnfOgklu/KedwjWihPOLC/uVyzlRy208QZ2vqzfAFPk0EhM2tjMPMFl
DGRXrsVo7qoG+JPCMATHw49WsZ2wtBws9ZE4xZ/TU6Spd2o2JNXjDtYmlJRmBKB2
oe3ZwB22r+bwtrQ8i7YDR0GThQ+MWaUvSrEyZaKecnWx8SzA9AaRBF/IEP61BIB/
Uy9vKkrIQNgCd/ODxctQSruTks1Um7btwbXjltleCn2pHnX+26Ok1MZbF0M6TI5h
6/qLhpISSLC6A0rD4t2YLpiM3OjJb1dUe3P5f6CGB2pHcMY5oAeYEPxZ4pA87wcQ
3C4X4aj54dWMq/BIJl+CE46lHQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org