Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cGwgTCKnF1dsjC84GBx-4x8qpO8.roa
File: cGwgTCKnF1dsjC84GBx-4x8qpO8.roa (raw, json)
Hash identifier: Xkjj4w2k+roHEd76Tl5pMOOpJtq3Vw8qjCWmdnytOtg=
Subject key identifier: 70:6C:20:4C:22:A7:17:57:6C:8C:2F:38:18:1C:7E:E3:1F:2A:A4:EF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01888BAD054C69F99E1711B154D367A55421
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cGwgTCKnF1dsjC84GBx-4x8qpO8.roa
Signing time: Mon 05 Jun 2023 13:09:12 +0000
ROA not before: Mon 05 Jun 2023 13:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:ad:05:4c:69:f9:9e:17:11:b1:54:d3:67:a5:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 5 13:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706c204c22a717576c8c2f38181c7ee31f2aa4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:a2:ce:af:01:5d:8d:bf:e3:9d:c7:53:f4:
86:bc:09:8f:6a:eb:51:51:13:9d:6c:2c:c2:c6:43:
4e:1b:a1:99:0a:c9:41:70:7d:0e:cb:b9:44:a2:51:
b6:8e:9a:49:25:2c:27:1f:c3:be:01:05:6c:ea:a1:
0c:bf:17:2e:a0:5b:e7:26:ae:ae:29:96:7c:2e:83:
2f:4b:99:62:bf:0a:8e:df:21:56:3c:70:0a:ce:49:
b3:24:74:8b:27:a1:eb:30:7a:63:7a:05:0e:29:86:
0f:30:e0:cb:bc:b3:cb:05:dc:3a:2e:82:eb:09:46:
40:7a:54:11:79:49:42:0e:65:9b:33:59:4d:42:f6:
84:81:e5:ca:58:61:a7:d6:78:6d:bc:0a:48:c5:6a:
5f:4c:a7:49:0b:07:31:e9:c3:6a:4a:09:4a:dd:5e:
18:8e:44:87:d4:2b:1a:7b:fd:f2:80:14:d7:d9:54:
97:2d:d8:31:0b:cc:31:73:4b:62:18:d6:29:08:73:
06:f8:24:ff:05:a3:6d:5a:2f:c2:90:4a:b9:d3:b6:
1d:26:46:d3:0f:68:c9:45:66:d2:6a:b8:84:60:18:
5b:40:be:88:c6:1a:a6:ef:63:35:59:35:06:30:8e:
80:ad:89:14:0a:4d:ad:1b:81:c6:9e:c6:5a:82:d7:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:20:4C:22:A7:17:57:6C:8C:2F:38:18:1C:7E:E3:1F:2A:A4:EF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cGwgTCKnF1dsjC84GBx-4x8qpO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
5.253.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:23:83:66:f2:e6:16:06:30:55:c5:a9:98:64:32:d6:2f:af:
2d:19:1d:71:a0:6d:d6:23:df:eb:d5:32:73:c2:d4:10:3a:00:
b5:61:7f:dd:87:95:93:59:a3:e4:e5:25:02:cf:20:01:0a:7c:
97:cb:47:b1:22:cd:78:50:b0:24:07:81:a8:d1:78:72:6c:e7:
29:9f:f2:c5:83:90:b6:aa:68:63:17:2d:6d:bc:a6:cf:ee:37:
85:27:ed:9b:1a:b4:44:22:c7:dd:66:75:eb:f8:31:db:bb:ff:
aa:cf:38:1a:2b:77:9d:e3:07:de:39:3c:e0:47:68:02:ba:8b:
80:26:41:4d:15:af:4e:7a:5f:f9:d2:6d:f5:41:83:e9:b1:8f:
36:15:47:32:61:51:9a:f3:1d:59:89:fd:89:80:be:62:83:8f:
80:41:c7:09:e4:9b:61:68:30:59:95:2e:b9:96:e3:7f:ce:f3:
66:43:25:b1:bc:a5:ca:14:22:eb:49:60:66:36:b2:0f:4e:4a:
94:71:fc:f8:b3:e3:89:24:36:7f:00:f0:f4:0c:de:d7:cc:48:
f9:84:ab:c9:bf:d1:b8:bf:97:3e:13:e1:88:b3:46:30:65:dc:
9a:32:9e:35:34:5c:b7:9e:7a:17:78:cd:cf:8c:ba:d7:5d:17:
56:91:45:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiLrQVMafmeFxGxVNNnpVQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNjA1MTMwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDZjMjA0YzIyYTcxNzU3NmM4YzJmMzgxODFjN2VlMzFmMmFhNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi86izq8BXY2/453HU/SGvAmPautR
UROdbCzCxkNOG6GZCslBcH0Oy7lEolG2jppJJSwnH8O+AQVs6qEMvxcuoFvnJq6u
KZZ8LoMvS5livwqO3yFWPHAKzkmzJHSLJ6HrMHpjegUOKYYPMODLvLPLBdw6LoLr
CUZAelQReUlCDmWbM1lNQvaEgeXKWGGn1nhtvApIxWpfTKdJCwcx6cNqSglK3V4Y
jkSH1Csae/3ygBTX2VSXLdgxC8wxc0tiGNYpCHMG+CT/BaNtWi/CkEq507YdJkbT
D2jJRWbSariEYBhbQL6Ixhqm72M1WTUGMI6ArYkUCk2tG4HGnsZagteOSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHBsIEwipxdXbIwvOBgcfuMfKqTvMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvY0d3Z1RDS25GMWRzakM4NEdCeC00eDhxcE84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbTpAwQA
Bf0mMA0GCSqGSIb3DQEBCwUAA4IBAQAfI4Nm8uYWBjBVxamYZDLWL68tGR1xoG3W
I9/r1TJzwtQQOgC1YX/dh5WTWaPk5SUCzyABCnyXy0exIs14ULAkB4Go0XhybOcp
n/LFg5C2qmhjFy1tvKbP7jeFJ+2bGrREIsfdZnXr+DHbu/+qzzgaK3ed4wfeOTzg
R2gCuouAJkFNFa9Oel/50m31QYPpsY82FUcyYVGa8x1Zif2JgL5ig4+AQccJ5Jth
aDBZlS65luN/zvNmQyWxvKXKFCLrSWBmNrIPTkqUcfz4s+OJJDZ/APD0DN7XzEj5
hKvJv9G4v5c+E+GIs0YwZdyaMp41NFy3nnoXeM3PjLrXXRdWkUV9
-----END CERTIFICATE-----
Generated at Tue May 13 19:18:53 2025 by rpki-client