Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0D1V4FGHEr5F2Fl1DDiT-sizyfg.roa
File: 0D1V4FGHEr5F2Fl1DDiT-sizyfg.roa (raw, json)
Hash identifier: Orpvr/02K9zhP8LF8lZRYinCt4VGH7gba/YnNxF7IN0=
Subject key identifier: D0:3D:55:E0:51:87:12:BE:45:D8:59:75:0C:38:93:FA:C8:B3:C9:F8
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018544E207A0D2551D273CFFFA31E503630F
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0D1V4FGHEr5F2Fl1DDiT-sizyfg.roa
Signing time: Sat 24 Dec 2022 16:05:41 +0000
ROA not before: Sat 24 Dec 2022 16:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50045
IP address blocks: 80.77.160.0/24 maxlen: 24
2a02:2518:e000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:e2:07:a0:d2:55:1d:27:3c:ff:fa:31:e5:03:63:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Dec 24 16:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d03d55e0518712be45d859750c3893fac8b3c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:1a:d8:b3:99:04:78:90:71:16:21:f7:f7:
7e:2f:85:f0:73:c8:c8:ec:c8:bf:b5:73:84:5c:83:
7e:c9:4d:63:fe:fc:ed:3f:ee:1e:69:c3:1b:c4:34:
fe:df:7c:42:b2:3c:02:94:3b:f9:c4:2b:12:95:ab:
99:69:fb:0e:8a:57:0e:da:7a:78:6d:3a:52:6d:62:
8f:ce:6e:b1:79:f7:77:71:ab:c0:b5:f1:59:95:71:
11:78:a9:80:52:a7:4b:f1:9c:a8:13:3e:d7:f3:05:
fa:3a:1a:0b:a3:c7:96:57:04:52:ac:e8:77:1f:26:
e8:a6:be:62:3f:87:49:6f:56:88:1c:38:1b:30:9a:
b3:57:21:a3:3a:23:cc:c4:43:a4:6d:91:c1:84:0d:
59:50:67:f1:62:b6:21:bd:85:e5:92:b6:7b:cc:4d:
bf:32:dd:b6:a5:a9:bb:66:fc:5f:ce:41:34:b5:03:
f8:18:e6:1d:41:8c:74:e1:98:10:83:5e:86:c7:23:
a6:a2:cc:a2:59:6b:6c:c2:bb:81:71:f4:1d:a8:bf:
11:c1:6e:3f:00:f1:2e:b9:33:f7:37:9e:ef:25:e7:
e7:4c:15:d9:8a:17:27:0a:40:ed:3d:c1:1a:d2:7e:
6b:cd:21:8d:51:77:aa:f1:99:b9:42:7c:77:25:74:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:55:E0:51:87:12:BE:45:D8:59:75:0C:38:93:FA:C8:B3:C9:F8
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0D1V4FGHEr5F2Fl1DDiT-sizyfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.160.0/24
IPv6:
2a02:2518:e000::/36
Signature Algorithm: sha256WithRSAEncryption
17:44:ef:87:17:5e:89:8e:22:ea:bf:f6:7d:31:c1:55:c8:66:
57:6a:00:c5:2a:53:5f:2c:00:30:65:db:37:2e:16:f6:e0:13:
df:7d:b0:dc:8a:36:4b:c0:25:6a:23:9c:f7:58:8d:7f:db:ee:
4b:24:57:60:bd:0c:79:83:65:0a:72:91:45:2d:a2:f6:f8:f2:
cf:ba:97:c2:72:68:01:62:69:19:1a:a6:e0:18:57:0b:39:a8:
5a:14:61:9d:64:63:ea:35:a0:74:9c:90:a3:6a:c2:b8:f6:0c:
4f:1b:85:98:46:e9:14:87:f4:11:08:35:ed:d4:bf:f5:68:72:
09:26:f7:da:3b:06:9e:c5:14:af:0e:a7:ce:63:f9:f0:60:73:
5f:f9:ee:30:10:e2:d4:35:72:d7:55:81:ec:89:9d:aa:df:21:
35:cc:26:3a:90:e5:6a:56:66:cb:bb:c1:7f:4c:61:1b:ac:c0:
90:68:65:71:54:d4:be:02:7c:f4:c2:9f:62:cf:4f:6b:d6:a9:
c9:38:9a:79:e8:bb:bc:de:df:7e:60:3f:33:11:bf:10:41:c7:
4b:a1:ad:9b:fc:23:79:d7:87:ff:0b:c6:af:b7:7e:e3:3e:05:
0d:48:06:e4:8d:79:df:be:83:5d:80:7f:0a:bd:1b:82:f1:30:
f0:71:0d:51
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVE4geg0lUdJzz/+jHlA2MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjIxMjI0MTYwNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDNkNTVlMDUxODcxMmJlNDVkODU5NzUwYzM4OTNmYWM4YjNjOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxsa2LOZBHiQcRYh9/d+L4Xwc8jI
7Mi/tXOEXIN+yU1j/vztP+4eacMbxDT+33xCsjwClDv5xCsSlauZafsOilcO2np4
bTpSbWKPzm6xefd3cavAtfFZlXEReKmAUqdL8ZyoEz7X8wX6OhoLo8eWVwRSrOh3
Hybopr5iP4dJb1aIHDgbMJqzVyGjOiPMxEOkbZHBhA1ZUGfxYrYhvYXlkrZ7zE2/
Mt22pam7ZvxfzkE0tQP4GOYdQYx04ZgQg16GxyOmosyiWWtswruBcfQdqL8RwW4/
APEuuTP3N57vJefnTBXZihcnCkDtPcEa0n5rzSGNUXeq8Zm5Qnx3JXShUQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFNA9VeBRhxK+RdhZdQw4k/rIs8n4MB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvMEQxVjRGR0hFcjVGMkZsMUREaVQtc2l6eWZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAUE2gMA4E
AgACMAgDBgQqAiUY4DANBgkqhkiG9w0BAQsFAAOCAQEAF0TvhxdeiY4i6r/2fTHB
VchmV2oAxSpTXywAMGXbNy4W9uAT332w3Io2S8AlaiOc91iNf9vuSyRXYL0MeYNl
CnKRRS2i9vjyz7qXwnJoAWJpGRqm4BhXCzmoWhRhnWRj6jWgdJyQo2rCuPYMTxuF
mEbpFIf0EQg17dS/9WhyCSb32jsGnsUUrw6nzmP58GBzX/nuMBDi1DVy11WB7Imd
qt8hNcwmOpDlalZmy7vBf0xhG6zAkGhlcVTUvgJ89MKfYs9Pa9apyTiaeei7vN7f
fmA/MxG/EEHHS6Gtm/wjedeH/wvGr7d+4z4FDUgG5I15376DXYB/Cr0bgvEw8HEN
UQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org