Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/s_730g6lKwvur2jQ4CvGIyqsdEE.roa
File: s_730g6lKwvur2jQ4CvGIyqsdEE.roa (raw, json)
Hash identifier: FeLJm98jpoPjmmN4UqmBbsAmttc0l85lYQi5x1y2e8s=
Subject key identifier: B3:FE:F7:D2:0E:A5:2B:0B:EE:AF:68:D0:E0:2B:C6:23:2A:AC:74:41
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01829301244779B440C4E19E528451AAFAD6
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/s_730g6lKwvur2jQ4CvGIyqsdEE.roa
Signing time: Fri 12 Aug 2022 17:01:41 +0000
ROA not before: Fri 12 Aug 2022 17:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210504
IP address blocks: 45.11.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:01:24:47:79:b4:40:c4:e1:9e:52:84:51:aa:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Aug 12 17:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3fef7d20ea52b0beeaf68d0e02bc6232aac7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:0b:5a:4b:16:8e:42:e4:d9:7b:e4:df:69:
d7:b0:38:c7:fd:7b:b1:ff:39:70:76:d3:e7:a9:ef:
5e:f3:95:49:fc:b2:2d:e3:0f:3c:91:da:92:4c:71:
4e:37:c5:9c:b1:59:24:05:c1:94:f4:de:90:c1:1e:
13:30:68:f1:4f:63:e3:5e:c3:ea:1c:ff:40:d5:ba:
9a:82:a7:45:68:38:50:5e:44:d1:db:75:76:e8:e7:
c0:e0:b2:51:a7:30:0c:36:5e:3a:24:99:f6:af:0d:
94:88:f4:f6:11:bb:78:d3:a2:dc:bc:d7:f5:a7:2c:
85:0f:ef:53:92:50:c3:19:34:2b:22:74:26:9b:5c:
62:f5:5d:16:5e:dc:ab:39:ca:63:01:b5:6e:12:bb:
fd:14:8d:3e:0d:73:59:f2:fb:66:7d:8a:7c:a6:d0:
3b:8f:8d:53:00:e0:13:c9:2d:60:78:17:9b:b2:ea:
a0:61:07:59:66:b9:19:b0:dd:30:e6:b5:63:52:c7:
24:6f:af:01:46:54:c9:c1:43:d9:91:16:f1:a8:5b:
db:df:64:4d:f7:3c:f1:d3:f7:d3:63:ce:10:d7:a9:
1a:1f:3f:11:52:f8:2f:98:87:3a:65:0c:d8:83:43:
05:7b:a7:d7:68:40:dd:0f:4e:b0:66:2f:04:5a:6a:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:F7:D2:0E:A5:2B:0B:EE:AF:68:D0:E0:2B:C6:23:2A:AC:74:41
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/s_730g6lKwvur2jQ4CvGIyqsdEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.78.0/24
Signature Algorithm: sha256WithRSAEncryption
35:25:0e:01:15:34:98:4f:9f:33:25:e6:a4:4d:c9:c0:7a:48:
08:fd:01:4f:f4:f6:84:00:83:db:72:ab:7f:f0:ae:63:cb:d3:
c9:9b:0b:14:af:ba:b7:37:dc:17:59:f5:71:f1:06:b3:bf:da:
85:78:7e:62:a9:48:2e:5a:4c:8d:35:ce:bb:c5:72:1b:65:10:
34:99:6f:48:b7:eb:9e:6d:8a:b3:21:dc:30:79:72:c7:61:08:
9d:f3:ad:97:aa:91:be:7b:d4:67:7a:9b:c8:8a:ee:99:88:5a:
be:ce:cf:a7:70:93:d7:da:42:7e:ce:85:64:7b:f3:e0:06:ed:
c9:b9:1e:2e:12:f4:62:8f:14:26:b0:13:04:3e:41:26:34:39:
d9:aa:96:58:5f:c1:12:4f:c3:9c:9d:de:e4:54:d0:1f:f7:70:
20:5f:22:a4:5e:98:39:af:7d:ec:28:ea:0d:a7:88:28:b6:b4:
0f:de:68:b0:a3:74:ad:17:d0:a1:15:32:aa:be:de:db:30:ee:
9e:b9:84:11:1e:ca:3c:af:38:51:5a:66:5c:e6:c0:db:21:04:
7f:89:c8:42:ee:12:ca:50:39:77:05:ac:c2:ff:1a:e1:1f:82:
9b:c5:c4:32:e1:1d:dc:14:e9:ca:c0:28:97:ed:54:e2:92:49:
4c:97:25:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKTASRHebRAxOGeUoRRqvrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjIwODEyMTcwMTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2ZlZjdkMjBlYTUyYjBiZWVhZjY4ZDBlMDJiYzYyMzJhYWM3NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4LWksWjkLk2Xvk32nXsDjH/Xux
/zlwdtPnqe9e85VJ/LIt4w88kdqSTHFON8WcsVkkBcGU9N6QwR4TMGjxT2PjXsPq
HP9A1bqagqdFaDhQXkTR23V26OfA4LJRpzAMNl46JJn2rw2UiPT2Ebt406LcvNf1
pyyFD+9TklDDGTQrInQmm1xi9V0WXtyrOcpjAbVuErv9FI0+DXNZ8vtmfYp8ptA7
j41TAOATyS1geBebsuqgYQdZZrkZsN0w5rVjUsckb68BRlTJwUPZkRbxqFvb32RN
9zzx0/fTY84Q16kaHz8RUvgvmIc6ZQzYg0MFe6fXaEDdD06wZi8EWmoaGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLP+99IOpSsL7q9o0OArxiMqrHRBMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEvc183MzBnNmxLd3Z1cjJqUTRDdkdJeXFzZEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQtOMA0G
CSqGSIb3DQEBCwUAA4IBAQA1JQ4BFTSYT58zJeakTcnAekgI/QFP9PaEAIPbcqt/
8K5jy9PJmwsUr7q3N9wXWfVx8Qazv9qFeH5iqUguWkyNNc67xXIbZRA0mW9It+ue
bYqzIdwweXLHYQid862XqpG+e9RnepvIiu6ZiFq+zs+ncJPX2kJ+zoVke/PgBu3J
uR4uEvRijxQmsBMEPkEmNDnZqpZYX8EST8Ocnd7kVNAf93AgXyKkXpg5r33sKOoN
p4gotrQP3miwo3StF9ChFTKqvt7bMO6euYQRHso8rzhRWmZc5sDbIQR/ichC7hLK
UDl3BazC/xrhH4KbxcQy4R3cFOnKwCiX7VTikklMlyVf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:26 2024 by rpki-client on console-fra.rpki-client.org