Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Ciz_GwHGBkQddaOI1RR7vXDnWoM.roa
File: Ciz_GwHGBkQddaOI1RR7vXDnWoM.roa (raw, json)
Hash identifier: KVVxksQ/NCrndfn+gsir6R0LufMH/1eONoLtC8zaFkc=
Subject key identifier: 0A:2C:FF:1B:01:C6:06:44:1D:75:A3:88:D5:14:7B:BD:70:E7:5A:83
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 07F3526C
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Ciz_GwHGBkQddaOI1RR7vXDnWoM.roa
Signing time: Sat 01 Jan 2022 14:01:21 +0000
ROA not before: Sat 01 Jan 2022 14:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39448
IP address blocks: 80.68.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133386860 (0x7f3526c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 1 14:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a2cff1b01c606441d75a388d5147bbd70e75a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:24:ef:9b:16:c0:fb:5e:d6:fa:8c:89:45:
4c:ba:44:8a:fd:85:36:98:f4:0e:0c:c8:f6:4a:c5:
6e:e2:ff:e4:e9:6d:10:10:5d:c8:b6:69:11:6f:58:
a4:7b:b2:dd:ca:91:44:9f:df:88:36:f8:05:2a:12:
7c:ce:7b:a5:d8:3f:b0:99:11:db:c5:90:24:e2:21:
6b:60:96:a1:17:b7:d9:fd:87:45:4d:de:cb:72:43:
46:4f:b0:66:99:43:33:3a:01:b5:24:6d:10:af:3f:
08:3b:01:c1:22:3b:ab:aa:b0:ee:6b:84:af:11:36:
e4:fd:2b:dd:35:fe:d2:ff:7c:28:b9:65:57:d6:59:
a4:0d:5f:a5:b7:e5:71:47:6c:29:e5:34:ff:d6:b1:
f1:69:1a:96:71:35:11:7b:45:ae:82:24:d1:f8:14:
d9:3f:0f:bb:ce:8c:81:72:b8:44:61:0b:6a:ff:23:
57:31:dc:bd:0c:5e:7b:ff:ca:f3:14:66:19:69:b3:
00:d5:0e:c3:fb:9e:5c:7f:60:f8:cb:63:55:ae:cf:
eb:f3:66:2c:ed:94:4b:b6:7b:11:82:e7:ff:f1:52:
a0:67:9d:1d:73:47:8b:31:1c:17:cd:ef:1a:64:97:
e3:00:4c:2b:04:3a:34:c8:4c:06:5c:9c:8c:00:73:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:FF:1B:01:C6:06:44:1D:75:A3:88:D5:14:7B:BD:70:E7:5A:83
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Ciz_GwHGBkQddaOI1RR7vXDnWoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.176.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0f:73:17:c6:7a:52:e4:1c:8c:2b:a4:25:34:57:bf:7f:63:
ef:ac:f7:f6:51:49:45:9e:7d:fa:1e:fa:c2:1c:57:c9:d6:70:
26:81:07:f4:5e:de:66:c3:9e:43:c5:71:52:7a:93:9f:e0:de:
29:fa:42:b3:2a:c0:5b:fe:8f:b8:8f:5b:fc:97:fa:4a:96:83:
56:ef:12:3e:1d:cb:95:bd:5d:09:3a:3d:c7:f3:92:ad:8f:99:
4b:49:d3:29:50:e4:b0:b9:ca:3f:54:30:5c:04:2f:ae:30:7e:
89:22:0b:4a:de:e9:20:8f:9c:7e:c3:1e:dc:8c:15:6d:56:c7:
6d:51:78:1e:e6:08:4a:95:a0:9e:1a:c0:b1:95:38:9f:23:f0:
7b:50:9a:60:59:ef:4c:0b:16:b3:ff:d0:8a:14:2d:54:8e:55:
2a:fd:87:07:2c:75:56:2b:8f:ab:66:36:70:9d:b6:11:75:e4:
c8:00:c6:3f:13:ca:c4:97:ab:06:1e:dc:b0:f2:c0:d5:4d:25:
5a:62:aa:e8:b1:76:ec:f3:7e:39:ea:cc:77:be:d4:3b:8f:84:
b8:8d:cc:9c:e7:fd:d9:ae:27:84:80:fd:86:e4:8d:98:d8:0c:
75:d4:c7:f3:db:62:44:08:b4:d1:94:ed:48:23:9d:9d:29:63:
99:40:8a:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/NSbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NmVlYTEwYWZhY2YzYTljMjZlYTFiMWVjNDg4ZTk1NWU0ZGZhMDZhMB4XDTIyMDEw
MTE0MDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEyY2ZmMWIwMWM2
MDY0NDFkNzVhMzg4ZDUxNDdiYmQ3MGU3NWE4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6dJO+bFsD7Xtb6jIlFTLpEiv2FNpj0DgzI9krFbuL/5Olt
EBBdyLZpEW9YpHuy3cqRRJ/fiDb4BSoSfM57pdg/sJkR28WQJOIha2CWoRe32f2H
RU3ey3JDRk+wZplDMzoBtSRtEK8/CDsBwSI7q6qw7muErxE25P0r3TX+0v98KLll
V9ZZpA1fpbflcUdsKeU0/9ax8WkalnE1EXtFroIk0fgU2T8Pu86MgXK4RGELav8j
VzHcvQxee//K8xRmGWmzANUOw/ueXH9g+MtjVa7P6/NmLO2US7Z7EYLn//FSoGed
HXNHizEcF83vGmSX4wBMKwQ6NMhMBlycjABzt0MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKLP8bAcYGRB11o4jVFHu9cOdagzAfBgNVHSMEGDAWgBT27qEK+s86nCbq
Gx7EiOlV5N+gajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzl1NmhDdnJQT3B3bTZoc2V4SWpwVmVUZm9Hby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvNmY1NzQ2LWI0MDYtNGMwNS05NzQxLTU0ZDhmNmIwNmI4My8x
L0Npel9Hd0hHQmtRZGRhT0kxUlI3dlhEbldvTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
NmY1NzQ2LWI0MDYtNGMwNS05NzQxLTU0ZDhmNmIwNmI4My8xLzl1NmhDdnJQT3B3
bTZoc2V4SWpwVmVUZm9Hby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBEsDANBgkqhkiG9w0BAQsFAAOC
AQEABA9zF8Z6UuQcjCukJTRXv39j76z39lFJRZ59+h76whxXydZwJoEH9F7eZsOe
Q8VxUnqTn+DeKfpCsyrAW/6PuI9b/Jf6SpaDVu8SPh3Llb1dCTo9x/OSrY+ZS0nT
KVDksLnKP1QwXAQvrjB+iSILSt7pII+cfsMe3IwVbVbHbVF4HuYISpWgnhrAsZU4
nyPwe1CaYFnvTAsWs//QihQtVI5VKv2HByx1ViuPq2Y2cJ22EXXkyADGPxPKxJer
Bh7csPLA1U0lWmKq6LF27PN+OerMd77UO4+EuI3MnOf92a4nhID9huSNmNgMddTH
89tiRAi00ZTtSCOdnSljmUCKAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org