Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/OKxxBXk8g1Y7FntEI-ldTXZSY4o.roa
File: OKxxBXk8g1Y7FntEI-ldTXZSY4o.roa (raw, json)
Hash identifier: e92LObRvw7Kbt0Ad6XmI4vb3pe/PLPOTtY4ctADu3KE=
Subject key identifier: 38:AC:71:05:79:3C:83:56:3B:16:7B:44:23:E9:5D:4D:76:52:63:8A
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 08180F40
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/OKxxBXk8g1Y7FntEI-ldTXZSY4o.roa
Signing time: Sat 01 Jan 2022 05:59:51 +0000
ROA not before: Sat 01 Jan 2022 05:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208849
IP address blocks: 45.82.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135794496 (0x8180f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Jan 1 05:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38ac7105793c83563b167b4423e95d4d7652638a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:aa:5c:1e:b0:38:71:88:37:d2:1a:4f:07:
45:7a:82:22:10:01:48:0b:68:42:28:c7:fb:dc:e4:
9b:f4:31:cb:94:a0:de:70:33:12:72:cf:8c:af:5f:
1a:97:b3:c4:d0:cb:9b:fb:58:18:a1:8a:eb:71:f7:
25:a1:cb:c5:e7:dc:c5:d8:0c:00:ca:36:8f:03:05:
f3:d7:6d:99:ea:8c:f0:69:59:13:01:fd:60:57:51:
4f:0d:a0:3c:68:f6:a1:ee:12:33:c6:22:6b:0a:b6:
98:29:2a:64:89:0e:23:1f:5d:0e:29:9a:a0:3b:f5:
d4:88:7c:b0:17:7a:81:f7:88:e2:1c:4b:7f:b6:32:
3b:27:cf:7f:69:c6:c0:5b:0c:eb:59:73:fb:c3:cf:
4a:e0:27:55:a6:7c:18:ed:a7:da:05:af:25:9e:1c:
80:5d:74:29:47:14:55:22:f8:f1:57:ca:f2:fe:91:
e4:cf:45:85:68:57:c9:81:5b:a6:15:b2:37:5f:19:
1a:fa:bc:f5:09:5f:27:17:10:33:10:0f:13:2a:2f:
e5:24:49:af:5e:7e:44:48:0a:16:ca:79:df:d3:4d:
0f:9d:4c:1c:b6:e3:04:b7:fc:e0:db:fd:2f:40:11:
df:07:02:36:3d:a7:9d:51:d4:94:a5:b4:dc:d2:56:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:71:05:79:3C:83:56:3B:16:7B:44:23:E9:5D:4D:76:52:63:8A
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/OKxxBXk8g1Y7FntEI-ldTXZSY4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.212.0/22
Signature Algorithm: sha256WithRSAEncryption
55:3f:dc:9d:6d:bf:b8:5d:e7:f7:cd:da:d5:73:76:3f:77:8f:
22:f4:d6:6b:41:0a:de:30:21:21:2f:1e:1a:f6:89:80:3e:6e:
a0:0a:1c:eb:4e:5d:66:8f:dc:c5:2d:f3:4b:17:4d:e8:20:ea:
18:4a:67:66:11:e5:89:6f:a3:43:b8:35:70:cb:94:3c:ed:b8:
3e:d4:d0:75:15:27:32:7f:24:02:60:1f:32:8d:58:6d:ee:e0:
eb:37:bd:a4:0f:3e:5f:dd:2a:d4:12:1f:01:5c:ac:e0:c5:24:
ca:7c:39:1f:23:f5:46:06:9b:b0:6e:54:c7:d5:3f:b8:a5:e7:
96:3c:82:78:d6:b3:aa:a1:1d:a1:26:a2:5a:53:67:c2:85:af:
e2:f8:0f:78:4a:93:8c:75:88:f7:3f:96:ac:cc:27:7e:1b:51:
11:f3:e8:a7:25:ae:5f:ae:37:d6:33:91:6d:4f:15:1c:2f:b0:
15:22:94:79:c1:5c:63:37:d3:38:55:4c:ff:66:28:05:14:9f:
a4:1b:30:38:92:9f:bc:e0:e3:11:0e:25:94:db:d5:1f:ba:a7:
15:9e:cb:6b:94:14:3a:75:7a:ab:6a:ed:74:f9:98:21:da:2a:
ca:7f:99:e8:cb:fe:88:a4:b2:5f:c5:9f:81:96:5a:67:34:4e:
37:59:c9:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECBgPQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ODk5NDdhOWE1ZDg4Y2M2MmNjODk4MjY4ZjJiY2FmZDZhN2ZmYzViMB4XDTIyMDEw
MTA1NTk1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhhYzcxMDU3OTNj
ODM1NjNiMTY3YjQ0MjNlOTVkNGQ3NjUyNjM4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALi0qlwesDhxiDfSGk8HRXqCIhABSAtoQijH+9zkm/Qxy5Sg
3nAzEnLPjK9fGpezxNDLm/tYGKGK63H3JaHLxefcxdgMAMo2jwMF89dtmeqM8GlZ
EwH9YFdRTw2gPGj2oe4SM8Yiawq2mCkqZIkOIx9dDimaoDv11Ih8sBd6gfeI4hxL
f7YyOyfPf2nGwFsM61lz+8PPSuAnVaZ8GO2n2gWvJZ4cgF10KUcUVSL48VfK8v6R
5M9FhWhXyYFbphWyN18ZGvq89QlfJxcQMxAPEyov5SRJr15+REgKFsp539NND51M
HLbjBLf84Nv9L0AR3wcCNj2nnVHUlKW03NJWXo0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4rHEFeTyDVjsWe0Qj6V1NdlJjijAfBgNVHSMEGDAWgBQYmUeppdiMxizI
mCaPK8r9an/8WzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dKbEhxYVhZak1Zc3lKZ21qeXZLX1dwX19Gcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvNzI5ZjkyLTVmMDMtNDE1OC05MGFjLTZkNDI4ZjFjMTVmZC8x
L09LeHhCWGs4ZzFZN0ZudEVJLWxkVFhaU1k0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
NzI5ZjkyLTVmMDMtNDE1OC05MGFjLTZkNDI4ZjFjMTVmZC8xL0dKbEhxYVhZak1Z
c3lKZ21qeXZLX1dwX19Gcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1S1DANBgkqhkiG9w0BAQsFAAOC
AQEAVT/cnW2/uF3n983a1XN2P3ePIvTWa0EK3jAhIS8eGvaJgD5uoAoc605dZo/c
xS3zSxdN6CDqGEpnZhHliW+jQ7g1cMuUPO24PtTQdRUnMn8kAmAfMo1Ybe7g6ze9
pA8+X90q1BIfAVys4MUkynw5HyP1RgabsG5Ux9U/uKXnljyCeNazqqEdoSaiWlNn
woWv4vgPeEqTjHWI9z+WrMwnfhtREfPopyWuX6431jORbU8VHC+wFSKUecFcYzfT
OFVM/2YoBRSfpBswOJKfvODjEQ4llNvVH7qnFZ7La5QUOnV6q2rtdPmYIdoqyn+Z
6Mv+iKSyX8WfgZZaZzRON1nJRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org