Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/j77rYAw-WwiW85vxKrEycmsIxEg.roa
File: j77rYAw-WwiW85vxKrEycmsIxEg.roa (raw, json)
Hash identifier: 4REIYdKzv7yGUJXqoHIUPzyxzaJcmyx4sRZPg+qoYWc=
Subject key identifier: 8F:BE:EB:60:0C:3E:5B:08:96:F3:9B:F1:2A:B1:32:72:6B:08:C4:48
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0A29DF8F
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/j77rYAw-WwiW85vxKrEycmsIxEg.roa
Signing time: Fri 20 May 2022 13:30:14 +0000
ROA not before: Fri 20 May 2022 13:30:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8637
IP address blocks: 5.180.229.0/24 maxlen: 24
5.180.228.0/24 maxlen: 24
5.180.228.0/22 maxlen: 24
2a0b:c800:1::/48 maxlen: 48
2a0b:c800:4::/48 maxlen: 48
2a0b:c800:2::/48 maxlen: 48
2a0b:c800:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170516367 (0xa29df8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: May 20 13:30:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbeeb600c3e5b0896f39bf12ab132726b08c448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:8d:37:52:4d:d4:35:81:4a:6a:7d:34:40:
89:79:1d:90:f6:14:1c:91:68:da:6e:eb:e6:5c:1b:
14:50:cb:b2:49:44:e2:9d:91:b0:88:02:04:07:1b:
e2:4e:13:b0:78:a2:1c:fc:71:53:8f:9e:db:cc:77:
e3:16:da:e9:00:e0:75:ad:68:ae:26:27:69:f3:df:
f8:67:8f:06:9b:f5:b8:8e:cb:d5:3d:9b:59:dd:bb:
34:39:62:fd:8c:22:ea:34:94:4b:eb:56:ca:e5:18:
92:a2:9a:4c:e9:c3:e1:3b:05:09:19:77:d4:2e:12:
b9:59:e3:33:4e:60:70:f8:03:9f:20:72:6f:88:81:
a1:b8:c9:f8:46:1e:72:ea:7f:1d:db:b9:69:6e:c5:
78:80:ae:96:0a:91:66:51:7f:1e:26:b4:45:3f:d3:
f4:c1:9c:39:5b:3e:1e:09:65:db:37:ee:74:b4:2a:
b8:bb:f2:e5:56:25:8b:37:24:a0:d1:b6:37:cf:bd:
b2:76:95:f2:61:bf:55:0b:47:fa:89:17:64:5f:77:
59:16:0d:7c:db:f7:71:b9:e0:34:9c:84:c9:9c:f2:
32:2e:ff:26:49:1a:57:81:86:47:ba:ec:93:49:f8:
1b:89:6b:c6:1d:09:bc:2f:83:db:97:45:c6:e3:39:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:EB:60:0C:3E:5B:08:96:F3:9B:F1:2A:B1:32:72:6B:08:C4:48
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/j77rYAw-WwiW85vxKrEycmsIxEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.228.0/22
IPv6:
2a0b:c800:1::-2a0b:c800:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:7b:d1:84:fc:ae:14:31:e9:4f:7d:d8:c6:34:60:86:0a:05:
4b:62:a8:92:4d:69:50:21:36:74:42:68:9f:54:e6:ca:37:55:
37:66:04:a3:38:d3:eb:af:73:1b:6f:05:81:58:84:78:95:15:
5b:66:22:8f:d7:8f:cf:4f:da:72:e5:b5:97:4a:1c:c6:0d:85:
8f:18:13:d2:f8:f6:e7:25:fe:56:21:89:16:c0:63:61:25:cb:
18:55:10:dc:5a:b4:ff:52:42:36:f0:45:e2:47:4f:35:e4:d7:
38:05:e3:71:95:ea:75:7c:22:c0:25:32:62:8c:af:27:7d:82:
81:42:e5:6c:65:31:b9:cf:08:62:97:b1:80:73:97:29:b7:dc:
8a:52:71:77:4e:66:47:e1:f6:e6:78:30:35:01:01:13:ea:bb:
26:02:28:07:41:59:99:e5:7a:02:a4:fd:3f:02:cd:f3:f2:90:
29:76:b2:a7:31:f1:79:29:65:e0:3c:c8:20:4b:9f:4d:d6:d9:
2e:c3:9f:60:08:49:49:ef:54:bf:47:1c:f5:b9:4c:af:f4:62:
0b:73:10:2e:a3:67:83:15:02:3b:52:43:37:e0:07:7a:fb:ca:
c3:13:f7:4f:19:12:f0:e6:a7:e6:d5:60:1b:45:36:16:74:4b:
13:6b:4f:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-ams.rpki-client.org