Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h2tHb42H9r19pKdC1eoSAHXieGo.roa
File: h2tHb42H9r19pKdC1eoSAHXieGo.roa (raw, json)
Hash identifier: OklveOWEyjYVcijZcADFJiw5NcNrkGInPqCJ27s2sjI=
Subject key identifier: 87:6B:47:6F:8D:87:F6:BD:7D:A4:A7:42:D5:EA:12:00:75:E2:78:6A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01833D1346AE40FD7505119AAC025FF721B9
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h2tHb42H9r19pKdC1eoSAHXieGo.roa
Signing time: Wed 14 Sep 2022 17:36:56 +0000
ROA not before: Wed 14 Sep 2022 17:36:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59979
IP address blocks: 45.130.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:13:46:ae:40:fd:75:05:11:9a:ac:02:5f:f7:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 14 17:36:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=876b476f8d87f6bd7da4a742d5ea120075e2786a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:44:4b:98:9d:9e:dd:86:a7:4e:f3:45:14:
ca:49:df:af:4e:8e:1d:70:4d:fb:00:3a:1f:43:33:
3a:40:49:1f:09:4b:6c:af:9b:bb:c4:e7:c7:77:ec:
12:de:f4:f5:a5:8a:5d:8c:fa:56:b6:d0:8f:ad:a2:
29:c8:f4:5e:1d:a8:9d:7e:08:e8:8e:d8:31:6a:39:
49:59:aa:c5:67:39:8c:e8:aa:43:fa:8b:05:3a:ed:
94:58:50:b2:fb:bf:b8:f4:e7:75:f1:49:ec:69:b5:
8b:2c:47:f4:2d:48:d3:8c:8a:bf:02:30:da:97:e1:
b9:26:80:8c:d0:37:04:67:81:4b:e1:16:85:ec:ab:
33:c7:3d:a0:c2:78:7b:c7:54:cf:49:1a:3a:e6:45:
ad:b5:f2:9b:fe:72:4b:5a:79:b8:62:f3:46:60:2c:
64:d2:82:88:6d:6a:82:ff:8f:a2:3f:ec:8e:8c:91:
72:aa:8d:3d:6b:1c:8c:f1:2e:f2:42:b6:a1:fd:89:
cc:74:d9:f3:ee:ef:ad:fa:fc:0d:4f:9c:c7:dd:2f:
78:28:e1:53:29:54:dc:23:3c:51:3f:c8:a5:3f:84:
d6:9a:30:5d:b0:3c:f0:ef:c1:e0:49:4c:ef:6a:b1:
e8:9e:da:16:cb:d0:1d:79:a1:62:20:71:0f:43:99:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:47:6F:8D:87:F6:BD:7D:A4:A7:42:D5:EA:12:00:75:E2:78:6A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/h2tHb42H9r19pKdC1eoSAHXieGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f5:56:47:fd:69:03:b7:16:59:50:e7:f9:34:ea:21:83:44:
57:a1:d4:c8:a6:c2:cc:76:f1:8b:bb:56:1b:62:88:0f:3b:56:
5d:a1:6c:2f:79:28:74:be:8b:74:2d:9e:e0:ee:57:58:48:48:
74:84:d5:3a:d9:b5:ee:2f:18:0a:fa:2a:8d:2e:96:39:9d:b0:
f4:91:61:8d:64:fa:84:40:ec:fd:21:d0:41:60:0d:30:bc:a7:
ec:8e:75:c2:90:ec:9b:ae:87:84:7a:02:82:31:80:e0:71:ac:
7e:8b:b2:03:db:2f:c1:6a:32:a4:2a:18:69:fc:7b:8c:9e:9c:
df:5b:62:47:6e:2f:29:5f:22:ae:6e:37:05:05:9d:f6:d8:f9:
74:2a:ca:12:3c:72:64:dd:ce:8a:7a:55:6d:bb:64:16:1a:2c:
d8:23:f4:5d:39:19:95:be:b7:9a:da:77:e6:0b:26:68:98:b4:
54:66:a0:2e:1d:28:4e:0c:35:9b:d6:bf:13:ae:a7:a6:b9:7a:
29:3d:07:03:dc:16:4e:bb:13:97:b1:d8:fe:01:e6:40:37:4d:
c8:be:47:2b:ca:28:13:9f:8c:82:10:af:0e:c4:b0:e1:f9:7a:
50:d3:d0:77:cb:10:b6:97:95:c7:9c:6f:3a:93:df:1f:3a:f5:
2a:76:53:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM9E0auQP11BRGarAJf9yG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjIwOTE0MTczNjU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzZiNDc2ZjhkODdmNmJkN2RhNGE3NDJkNWVhMTIwMDc1ZTI3ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpBES5idnt2Gp07zRRTKSd+vTo4d
cE37ADofQzM6QEkfCUtsr5u7xOfHd+wS3vT1pYpdjPpWttCPraIpyPReHaidfgjo
jtgxajlJWarFZzmM6KpD+osFOu2UWFCy+7+49Od18UnsabWLLEf0LUjTjIq/AjDa
l+G5JoCM0DcEZ4FL4RaF7Kszxz2gwnh7x1TPSRo65kWttfKb/nJLWnm4YvNGYCxk
0oKIbWqC/4+iP+yOjJFyqo09axyM8S7yQrah/YnMdNnz7u+t+vwNT5zH3S94KOFT
KVTcIzxRP8ilP4TWmjBdsDzw78HgSUzvarHontoWy9AdeaFiIHEPQ5l8FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdrR2+Nh/a9faSnQtXqEgB14nhqMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvaDJ0SGI0Mkg5cjE5cEtkQzFlb1NBSFhpZUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYKPMA0G
CSqGSIb3DQEBCwUAA4IBAQBB9VZH/WkDtxZZUOf5NOohg0RXodTIpsLMdvGLu1Yb
YogPO1ZdoWwveSh0vot0LZ7g7ldYSEh0hNU62bXuLxgK+iqNLpY5nbD0kWGNZPqE
QOz9IdBBYA0wvKfsjnXCkOybroeEegKCMYDgcax+i7ID2y/BajKkKhhp/HuMnpzf
W2JHbi8pXyKubjcFBZ322Pl0KsoSPHJk3c6KelVtu2QWGizYI/RdORmVvrea2nfm
CyZomLRUZqAuHShODDWb1r8TrqemuXopPQcD3BZOuxOXsdj+AeZAN03IvkcryigT
n4yCEK8OxLDh+XpQ09B3yxC2l5XHnG86k98fOvUqdlNC
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org