Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Epy6K92qeav8N9Hzbyhd819Zt3s.roa
File: Epy6K92qeav8N9Hzbyhd819Zt3s.roa (raw, json)
Hash identifier: Ha0CdGXW6fKMjVNFAtJ6acF9wxOX1P+zGkcS5wA4WqQ=
Subject key identifier: 12:9C:BA:2B:DD:AA:79:AB:FC:37:D1:F3:6F:28:5D:F3:5F:59:B7:7B
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AAE1174
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Epy6K92qeav8N9Hzbyhd819Zt3s.roa
Signing time: Sat 01 Jan 2022 12:02:42 +0000
ROA not before: Sat 01 Jan 2022 12:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.43.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447615348 (0x1aae1174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=129cba2bddaa79abfc37d1f36f285df35f59b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:e8:07:8e:31:8e:9d:13:55:42:6d:0b:c1:
6c:72:ee:e6:82:c2:28:54:fb:e4:78:cb:49:b4:7c:
bd:de:50:e5:91:64:21:50:ce:1a:e6:2f:d9:97:f6:
00:c7:5c:d0:e6:80:1c:0b:43:cf:5a:88:63:9d:26:
2e:43:3d:d8:b8:6f:bb:20:e7:c5:1b:4a:fd:47:c4:
76:2b:a1:60:59:46:b2:0c:58:1d:57:c9:98:5d:5b:
af:7d:67:5f:57:44:f7:45:8c:a7:f1:90:61:17:ff:
01:e5:29:f2:39:bf:87:0a:03:1c:16:ba:f2:f3:ba:
44:e4:c9:9b:cd:35:fb:61:17:9e:a6:8c:7b:ea:31:
61:41:44:c8:8e:50:ee:da:3c:cd:39:2e:70:cb:df:
c5:d3:98:95:11:f4:e6:9d:5c:2c:3a:81:66:9e:47:
f9:0a:b9:0b:1a:09:07:ef:39:5e:83:54:e5:87:bb:
93:98:1b:d2:88:f9:13:80:a5:81:bb:d5:af:2a:58:
75:ff:16:55:3c:4a:d9:e7:03:18:49:fa:3d:4b:41:
11:4a:9a:21:97:be:42:fe:3f:5b:87:d6:43:bb:35:
a3:29:c4:e7:9c:fd:88:a1:a7:18:2a:47:eb:e4:f6:
cb:68:6a:23:3c:d1:10:7c:ad:20:03:72:f9:5a:10:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:BA:2B:DD:AA:79:AB:FC:37:D1:F3:6F:28:5D:F3:5F:59:B7:7B
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Epy6K92qeav8N9Hzbyhd819Zt3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:16:88:b8:3f:b2:c7:6d:84:90:11:b3:3a:d6:99:1c:77:f7:
3f:ff:eb:cf:96:cb:01:a9:a6:c5:be:c0:be:83:f1:86:6a:21:
22:65:ed:70:77:40:1c:d5:3b:cc:c4:b1:d6:9b:2f:32:70:9c:
3d:48:60:f5:0b:66:10:8c:dd:1c:c9:4f:92:d5:dd:68:79:4e:
f9:59:fa:d2:49:fd:2e:05:ab:3c:7b:cc:92:88:18:e1:29:8b:
b9:d6:ff:a0:6a:03:99:96:0a:30:c4:b4:f3:dd:43:5c:06:f1:
4c:73:9f:3b:73:3e:5f:f5:6f:7e:6e:a0:f2:19:5f:09:cb:22:
aa:6b:61:d5:24:b7:8b:a7:9b:9b:c5:e5:cd:b1:c6:b4:c1:2b:
a2:4d:bd:6d:ee:3e:82:8a:45:7c:92:bd:42:92:e8:d0:b0:17:
c1:4e:c9:c6:ff:a3:db:86:31:e0:93:bb:86:ba:45:3b:41:8a:
9d:76:af:70:0a:43:4b:41:62:0b:ab:ff:50:87:0a:29:5e:bc:
09:12:3e:0b:96:bd:d1:d1:71:be:aa:a9:98:0a:79:22:84:c5:
24:92:79:6d:cb:38:6b:89:6e:6e:2d:17:59:c2:e2:11:46:88:
53:c3:85:36:b7:75:94:e1:81:24:7f:0d:07:00:e7:91:39:10:
55:8c:04:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGq4RdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzU0YzM0N2Q2OGQxNTQ5M2RlNzFiYjk2MmYwYTU2N2UxMzRkNjAzMB4XDTIyMDEw
MTEyMDI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI5Y2JhMmJkZGFh
NzlhYmZjMzdkMWYzNmYyODVkZjM1ZjU5Yjc3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJY6AeOMY6dE1VCbQvBbHLu5oLCKFT75HjLSbR8vd5Q5ZFk
IVDOGuYv2Zf2AMdc0OaAHAtDz1qIY50mLkM92LhvuyDnxRtK/UfEdiuhYFlGsgxY
HVfJmF1br31nX1dE90WMp/GQYRf/AeUp8jm/hwoDHBa68vO6ROTJm801+2EXnqaM
e+oxYUFEyI5Q7to8zTkucMvfxdOYlRH05p1cLDqBZp5H+Qq5CxoJB+85XoNU5Ye7
k5gb0oj5E4ClgbvVrypYdf8WVTxK2ecDGEn6PUtBEUqaIZe+Qv4/W4fWQ7s1oynE
55z9iKGnGCpH6+T2y2hqIzzREHytIANy+VoQ7F0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSnLor3ap5q/w30fNvKF3zX1m3ezAfBgNVHSMEGDAWgBTnVMNH1o0VST3n
G7li8KVn4TTWAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzUxVERSOWFORlVrOTV4dTVZdkNsWi1FMDFnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8x
L0VweTZLOTJxZWF2OE45SHpieWhkODE5WnQzcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8xLzUxVERSOWFORlVr
OTV4dTVZdkNsWi1FMDFnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0rRTANBgkqhkiG9w0BAQsFAAOC
AQEAmhaIuD+yx22EkBGzOtaZHHf3P//rz5bLAammxb7AvoPxhmohImXtcHdAHNU7
zMSx1psvMnCcPUhg9QtmEIzdHMlPktXdaHlO+Vn60kn9LgWrPHvMkogY4SmLudb/
oGoDmZYKMMS0891DXAbxTHOfO3M+X/Vvfm6g8hlfCcsiqmth1SS3i6ebm8XlzbHG
tMErok29be4+gopFfJK9QpLo0LAXwU7Jxv+j24Yx4JO7hrpFO0GKnXavcApDS0Fi
C6v/UIcKKV68CRI+C5a90dFxvqqpmAp5IoTFJJJ5bcs4a4lubi0XWcLiEUaIU8OF
Nrd1lOGBJH8NBwDnkTkQVYwE7Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org