Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/9yUR8lvmBKUFIndGtg-W-mfT8cw.roa
File: 9yUR8lvmBKUFIndGtg-W-mfT8cw.roa (raw, json)
Hash identifier: edvZhGt7b3aJHrolFPDKUQvf1jmj9mN6T+KBoDjbenA=
Subject key identifier: F7:25:11:F2:5B:E6:04:A5:05:22:77:46:B6:0F:96:FA:67:D3:F1:CC
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 01821F80FD0D4600B368264875E4B7DF4435
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/9yUR8lvmBKUFIndGtg-W-mfT8cw.roa
Signing time: Thu 21 Jul 2022 06:45:23 +0000
ROA not before: Thu 21 Jul 2022 06:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 216.247.232.0/22 maxlen: 22
185.217.166.0/24 maxlen: 24
113.30.192.0/21 maxlen: 21
5.183.88.0/22 maxlen: 22
2a10:d502::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:80:fd:0d:46:00:b3:68:26:48:75:e4:b7:df:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jul 21 06:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f72511f25be604a505227746b60f96fa67d3f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:46:5b:4a:a4:79:9d:19:5f:ad:36:28:b7:
dd:e4:ad:d6:f7:56:f6:cf:7b:a8:f8:a6:c5:76:91:
ed:3d:86:b8:f5:2e:21:64:27:fe:34:48:38:dc:80:
4e:b3:d6:44:98:f7:13:8a:ce:62:90:af:24:30:d3:
16:22:32:7c:18:a7:58:0c:cb:7e:a6:38:56:d2:99:
41:4d:19:de:1c:08:e6:f7:f1:8d:a4:f1:d3:25:de:
13:ff:fa:c2:18:4a:3e:a9:da:de:11:7a:6d:b5:58:
0a:e9:9e:13:4a:4e:b1:e8:fc:a1:5a:32:d9:fc:bd:
36:22:be:54:2b:4b:ac:df:06:a2:04:8c:89:6a:02:
9f:8b:e3:f4:61:5e:28:77:81:0b:4b:ab:28:3b:75:
26:d6:c6:30:a9:a1:eb:e6:fb:9b:34:83:1b:1d:f6:
98:06:69:6b:6e:f5:46:9c:87:f9:0b:5b:70:8a:50:
ed:93:02:70:26:55:21:87:ab:5c:19:15:06:c7:bb:
0e:52:a4:03:2b:47:fb:20:24:07:30:47:69:66:3b:
08:55:19:4a:df:51:eb:02:de:05:31:78:af:61:73:
81:5c:60:c7:ec:4b:54:87:66:03:3c:b1:9a:db:60:
8b:51:03:ce:0d:49:67:c9:62:c7:cf:22:62:a3:2b:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:11:F2:5B:E6:04:A5:05:22:77:46:B6:0F:96:FA:67:D3:F1:CC
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/9yUR8lvmBKUFIndGtg-W-mfT8cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
113.30.192.0/21
185.217.166.0/24
216.247.232.0/22
IPv6:
2a10:d502::/32
Signature Algorithm: sha256WithRSAEncryption
a8:e6:9f:5a:20:c7:ea:99:ea:9b:66:bb:00:e1:06:30:ee:78:
59:25:a7:1d:ac:83:cb:ce:a4:55:70:46:6b:30:1b:e7:c0:63:
66:ad:0b:25:12:bc:bb:65:e9:a7:bb:ab:8e:50:f5:ab:2e:f3:
62:33:5d:ed:27:d9:78:f9:93:fe:59:bc:9f:9b:42:16:4a:29:
c8:e3:4b:d7:9f:e6:0b:20:36:49:fc:71:4f:2f:10:1a:94:c7:
bb:c6:61:99:7d:dd:b5:1d:11:6c:f7:b8:66:c6:bd:93:14:9c:
c4:c8:2b:1b:91:31:e7:2f:c8:1d:e2:ef:cc:69:b5:77:db:24:
be:34:5c:de:41:70:d0:c4:f6:72:1f:70:1b:40:1f:af:21:bd:
2e:e3:be:fe:af:1b:6d:a7:5e:2d:b9:2c:f2:2d:d2:03:6a:e7:
fd:d8:94:78:52:c4:9d:11:80:66:d7:28:88:8a:94:4b:9d:fc:
c0:84:3e:3b:04:07:71:26:1b:0d:4e:7c:9c:55:67:b7:aa:da:
01:5f:b3:ff:40:d8:5f:14:a9:d6:a4:ed:59:16:2d:72:0f:5e:
9e:61:51:d3:53:fd:d8:0b:2e:a8:10:34:ef:77:a2:cb:34:bc:
0b:21:27:b7:1b:1c:6d:72:8f:ac:28:81:1b:e1:2f:ae:07:41:
7e:8d:6b:5f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYIfgP0NRgCzaCZIdeS330Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTQ2ODdhYjhiMWViNmRlMWFiZDA0YTA3NjE3Yzg2ZDEx
ODUxOGQwHhcNMjIwNzIxMDY0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI1MTFmMjViZTYwNGE1MDUyMjc3NDZiNjBmOTZmYTY3ZDNmMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOpGW0qkeZ0ZX602KLfd5K3W91b2
z3uo+KbFdpHtPYa49S4hZCf+NEg43IBOs9ZEmPcTis5ikK8kMNMWIjJ8GKdYDMt+
pjhW0plBTRneHAjm9/GNpPHTJd4T//rCGEo+qdreEXpttVgK6Z4TSk6x6PyhWjLZ
/L02Ir5UK0us3waiBIyJagKfi+P0YV4od4ELS6soO3Um1sYwqaHr5vubNIMbHfaY
BmlrbvVGnIf5C1twilDtkwJwJlUhh6tcGRUGx7sOUqQDK0f7ICQHMEdpZjsIVRlK
31HrAt4FMXivYXOBXGDH7EtUh2YDPLGa22CLUQPODUlnyWLHzyJioyt/swIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPclEfJb5gSlBSJ3RrYPlvpn0/HMMB8GA1UdIwQY
MBaAFObkaHq4sett4avQSgdhfIbRGFGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMt
MTM4YmJhYWM3ZmUyLzEvOXlVUjhsdm1CS1VGSW5kR3RnLVctbWZUOGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMtMTM4YmJhYWM3ZmUy
LzEvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBbdYAwQD
cR7AAwQAudmmAwQC2PfoMA0EAgACMAcDBQAqENUCMA0GCSqGSIb3DQEBCwUAA4IB
AQCo5p9aIMfqmeqbZrsA4QYw7nhZJacdrIPLzqRVcEZrMBvnwGNmrQslEry7Zemn
u6uOUPWrLvNiM13tJ9l4+ZP+Wbyfm0IWSinI40vXn+YLIDZJ/HFPLxAalMe7xmGZ
fd21HRFs97hmxr2TFJzEyCsbkTHnL8gd4u/MabV32yS+NFzeQXDQxPZyH3AbQB+v
Ib0u477+rxttp14tuSzyLdIDauf92JR4UsSdEYBm1yiIipRLnfzAhD47BAdxJhsN
TnycVWe3qtoBX7P/QNhfFKnWpO1ZFi1yD16eYVHTU/3YCy6oEDTvd6LLNLwLISe3
Gxxtco+sKIEb4S+uB0F+jWtf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-fra.rpki-client.org