Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kIjqU13x3X5u6g6YfRkVazpTQDg.roa
File: kIjqU13x3X5u6g6YfRkVazpTQDg.roa (raw, json)
Hash identifier: YFRTfOH7URoht8yC88T+uCZH9Mmc61fBs1dJxYKzmLU=
Subject key identifier: 90:88:EA:53:5D:F1:DD:7E:6E:EA:0E:98:7D:19:15:6B:3A:53:40:38
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 1BDAFF2E
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kIjqU13x3X5u6g6YfRkVazpTQDg.roa
Signing time: Sat 01 Jan 2022 05:03:00 +0000
ROA not before: Sat 01 Jan 2022 05:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12571
IP address blocks: 45.128.100.0/22 maxlen: 22
212.76.192.0/19 maxlen: 19
2a00:1d48::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467337006 (0x1bdaff2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Jan 1 05:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9088ea535df1dd7e6eea0e987d19156b3a534038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:b2:b2:22:7e:f8:01:62:33:02:7b:78:34:
1e:f4:8d:e7:01:49:b7:8c:62:82:8b:5b:8a:b2:51:
76:a0:60:f9:61:29:02:80:20:7d:06:00:f1:0e:1b:
1f:1b:1d:cd:e3:ef:af:70:15:06:4a:f2:3f:47:40:
aa:0b:67:73:f4:ad:cc:ba:61:d6:cf:e4:06:95:6d:
ca:93:f0:82:14:08:f4:65:c4:92:d4:32:35:45:b9:
6a:8d:1e:fe:96:a6:0e:0e:2e:d9:a9:ab:ca:85:4b:
85:ac:57:8d:f4:63:79:7b:eb:06:48:4d:aa:6f:81:
d2:c5:60:5a:c3:c2:2e:ca:0c:68:65:f7:74:07:8f:
b0:15:8a:02:23:f1:f6:d1:a0:3a:fa:3e:81:8f:d8:
ae:91:a0:41:6b:23:ca:32:4d:9f:23:a2:ed:7a:8a:
d8:57:1e:d7:44:24:02:0b:be:1f:8c:c0:6c:93:42:
3a:da:eb:b2:b5:3f:bc:d1:64:9e:b8:60:05:26:3c:
d9:43:db:ec:16:39:e2:5e:e4:86:9e:13:79:31:5e:
38:df:70:cb:83:1f:7a:95:9a:ec:ed:81:a4:6a:17:
9d:26:69:4d:19:2e:19:1a:40:ae:25:ce:6d:81:66:
2d:50:05:17:11:c8:ee:13:f1:5b:32:2d:70:a2:4d:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:EA:53:5D:F1:DD:7E:6E:EA:0E:98:7D:19:15:6B:3A:53:40:38
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/kIjqU13x3X5u6g6YfRkVazpTQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.100.0/22
212.76.192.0/19
IPv6:
2a00:1d48::/32
Signature Algorithm: sha256WithRSAEncryption
35:6a:fc:35:73:78:9c:1e:5c:b0:c2:38:f8:8c:a5:f5:ff:34:
7a:ed:3e:c5:b6:d6:70:69:76:68:2f:32:f5:55:01:85:d4:c8:
4f:91:47:90:f6:8d:1c:d1:2f:7e:e6:26:a0:93:d6:8a:4b:f2:
a3:32:a3:b2:e4:19:18:6a:2d:44:1a:2b:d2:bd:cb:8a:79:c3:
51:a9:71:08:a0:72:a9:1d:a9:2e:e4:63:fc:2c:20:0f:5c:a8:
73:eb:c7:54:ed:09:26:92:e2:fe:1a:64:4e:4b:c7:ef:ee:87:
13:77:03:0a:9f:ef:cb:50:eb:b0:ca:8f:3d:4f:c4:ef:b0:31:
01:8f:e3:9b:c1:40:65:92:55:57:74:d2:ee:d9:e6:b7:a8:27:
b1:1e:f0:b4:13:65:2c:0f:e0:33:89:08:c1:73:91:26:32:86:
25:ac:a0:7d:c5:e2:53:51:2c:60:25:eb:9b:79:6c:27:18:5d:
ea:85:ac:ef:a2:a7:1d:94:c8:85:3a:7b:a5:f4:f4:c0:ee:9e:
04:2d:e4:75:53:05:eb:9a:0c:bf:3b:be:90:9d:50:7b:fc:2e:
4d:4c:e5:6d:3b:0b:ed:84:e5:a2:8c:a3:6b:f0:b1:e1:a5:94:
82:37:a1:e1:04:cf:53:ec:bb:be:36:96:ec:8f:87:d9:b4:1e:
66:c7:6c:ae
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEG9r/LjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MzMyNGVhN2JiOWVkNThkOGQ3Yjg1ZDVkMWNkYzBmZTQzYmNlMjM2MB4XDTIyMDEw
MTA1MDMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTA4OGVhNTM1ZGYx
ZGQ3ZTZlZWEwZTk4N2QxOTE1NmIzYTUzNDAzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALwPsrIifvgBYjMCe3g0HvSN5wFJt4xigotbirJRdqBg+WEp
AoAgfQYA8Q4bHxsdzePvr3AVBkryP0dAqgtnc/StzLph1s/kBpVtypPwghQI9GXE
ktQyNUW5ao0e/pamDg4u2amryoVLhaxXjfRjeXvrBkhNqm+B0sVgWsPCLsoMaGX3
dAePsBWKAiPx9tGgOvo+gY/YrpGgQWsjyjJNnyOi7XqK2Fce10QkAgu+H4zAbJNC
OtrrsrU/vNFknrhgBSY82UPb7BY54l7khp4TeTFeON9wy4MfepWa7O2BpGoXnSZp
TRkuGRpAriXObYFmLVAFFxHI7hPxWzItcKJNCQ0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSQiOpTXfHdfm7qDph9GRVrOlNAODAfBgNVHSMEGDAWgBRTMk6nu57VjY17
hdXRzcD+Q7ziNjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1V6Sk9wN3VlMVkyTmU0WFYwYzNBX2tPODRqWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvNjU1MDgwLWE0ODgtNGViZS1hNDcxLTI4OGZjZGYwY2QwYi8x
L2tJanFVMTN4M1g1dTZnNllmUmtWYXpwVFFEZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
NjU1MDgwLWE0ODgtNGViZS1hNDcxLTI4OGZjZGYwY2QwYi8xL1V6Sk9wN3VlMVky
TmU0WFYwYzNBX2tPODRqWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi2AZAMEBdRMwDANBAIAAjAHAwUA
KgAdSDANBgkqhkiG9w0BAQsFAAOCAQEANWr8NXN4nB5csMI4+Iyl9f80eu0+xbbW
cGl2aC8y9VUBhdTIT5FHkPaNHNEvfuYmoJPWikvyozKjsuQZGGotRBor0r3LinnD
UalxCKByqR2pLuRj/CwgD1yoc+vHVO0JJpLi/hpkTkvH7+6HE3cDCp/vy1DrsMqP
PU/E77AxAY/jm8FAZZJVV3TS7tnmt6gnsR7wtBNlLA/gM4kIwXORJjKGJaygfcXi
U1EsYCXrm3lsJxhd6oWs76KnHZTIhTp7pfT0wO6eBC3kdVMF65oMvzu+kJ1Qe/wu
TUzlbTsL7YTlooyja/Cx4aWUgjeh4QTPU+y7vjaW7I+H2bQeZsdsrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:04 2024 by rpki-client on console-ams.rpki-client.org