Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/8GVN-gwElybqhWRnFV3e5NEBiR4.roa
File: 8GVN-gwElybqhWRnFV3e5NEBiR4.roa (raw, json)
Hash identifier: WyHqjn0cJ9ddQl7AEKDEg3PSzEyT10yxH7gxUuYiQjY=
Subject key identifier: F0:65:4D:FA:0C:04:97:26:EA:85:64:67:15:5D:DE:E4:D1:01:89:1E
Certificate issuer: /CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Certificate serial: 018405DF5238AA4FC7E4DB4118416A953B69
Authority key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/8GVN-gwElybqhWRnFV3e5NEBiR4.roa
Signing time: Sun 23 Oct 2022 17:23:52 +0000
ROA not before: Sun 23 Oct 2022 17:23:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202754
IP address blocks: 45.84.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:df:52:38:aa:4f:c7:e4:db:41:18:41:6a:95:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Validity
Not Before: Oct 23 17:23:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0654dfa0c049726ea856467155ddee4d101891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:7e:42:3a:74:36:84:07:68:9c:d3:cc:b2:
29:15:6d:fb:a9:cc:d5:e1:ea:98:13:e6:42:01:58:
62:ae:a8:84:75:e3:f0:98:b5:eb:b2:f3:95:de:82:
a5:57:97:c7:2e:26:32:ba:7a:62:fa:a3:7b:40:f3:
0d:71:89:58:ce:90:9a:d8:e3:64:2d:06:c8:b3:b3:
0e:5c:59:15:f7:69:14:8f:8e:4e:ef:20:76:e7:60:
69:3c:8d:53:0b:b7:eb:8e:49:4a:0b:7c:1f:0e:cd:
7e:f2:b7:d6:4d:ac:92:96:8c:97:d8:d9:bb:e9:de:
49:66:c6:99:e5:d0:ae:b8:3d:4f:d3:d6:7a:84:3f:
c0:3e:87:78:a5:e7:76:11:f3:69:6b:9d:b6:c5:e3:
b8:8f:5c:e7:34:79:df:c4:7d:cf:da:bc:37:e6:fd:
4c:eb:ff:0c:11:f1:ae:e3:2e:cb:58:76:2d:87:31:
3a:9c:72:18:84:f2:ba:2b:be:f1:1f:54:cb:c5:97:
84:2a:9d:ad:d4:6b:fc:a6:a8:16:8e:55:73:b2:41:
cd:f2:10:dc:4c:22:ea:0c:08:b9:72:83:9a:09:22:
0c:f5:7f:8d:e2:0f:6a:68:06:7b:e7:fe:d2:bb:18:
63:db:14:04:68:45:db:52:ee:3b:f2:97:8d:bb:37:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:4D:FA:0C:04:97:26:EA:85:64:67:15:5D:DE:E4:D1:01:89:1E
X509v3 Authority Key Identifier:
keyid:C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/8GVN-gwElybqhWRnFV3e5NEBiR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.48.0/22
Signature Algorithm: sha256WithRSAEncryption
54:7b:02:ea:be:fa:d6:e6:fd:2f:52:b9:38:47:e9:eb:c2:2d:
3e:41:27:36:ec:1a:5e:d5:cd:93:a5:3b:c2:72:ac:e0:2e:6f:
71:fa:a8:7d:4d:47:e2:a1:4a:a1:29:92:7e:97:73:6f:d1:67:
fc:34:73:8f:33:9b:bd:f9:59:bc:d7:bc:17:3c:d0:f9:b7:ae:
c9:6e:9d:b9:5e:64:e6:ca:7b:e3:6b:2c:15:5e:73:ac:c2:23:
af:7c:ff:bc:ef:33:c8:96:24:f8:b5:25:13:5c:e5:5f:6d:d7:
c6:ee:35:29:dc:da:f6:3e:08:ef:d8:d7:14:cf:a4:55:fe:c5:
a8:c0:c5:48:f9:f9:3f:2e:3d:9d:5b:9b:b0:cf:3b:fe:05:5e:
c3:79:27:a1:1d:00:a9:6a:38:70:4a:6f:30:c3:84:21:d8:00:
8d:f4:79:fc:84:a2:23:6d:ad:33:3c:6b:ff:7e:d3:46:ae:c4:
ee:22:9c:0b:92:28:91:3d:06:e6:5c:cc:d4:29:4f:23:03:18:
da:4c:00:58:70:e2:fe:74:d0:b4:36:42:55:be:3d:0d:12:74:
63:43:86:ac:bf:24:cd:1d:bc:86:03:09:7c:28:15:50:bc:28:
7b:78:d1:b5:a4:e1:81:bf:3b:c1:49:90:19:fc:29:7e:47:d1:
4b:21:7a:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQF31I4qk/H5NtBGEFqlTtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDAyYTlhM2EzMzM4YWU2M2Q0ODRlZjMwMDZiOGFkNmVh
ZmFhMWEwHhcNMjIxMDIzMTcyMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDY1NGRmYTBjMDQ5NzI2ZWE4NTY0NjcxNTVkZGVlNGQxMDE4OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjZ+Qjp0NoQHaJzTzLIpFW37qczV
4eqYE+ZCAVhirqiEdePwmLXrsvOV3oKlV5fHLiYyunpi+qN7QPMNcYlYzpCa2ONk
LQbIs7MOXFkV92kUj45O7yB252BpPI1TC7frjklKC3wfDs1+8rfWTaySloyX2Nm7
6d5JZsaZ5dCuuD1P09Z6hD/APod4ped2EfNpa522xeO4j1znNHnfxH3P2rw35v1M
6/8MEfGu4y7LWHYthzE6nHIYhPK6K77xH1TLxZeEKp2t1Gv8pqgWjlVzskHN8hDc
TCLqDAi5coOaCSIM9X+N4g9qaAZ75/7Suxhj2xQEaEXbUu478peNuzfKnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBlTfoMBJcm6oVkZxVd3uTRAYkeMB8GA1UdIwQY
MBaAFMjQKpo6MziuY9SE7zAGuK1ur6oaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5BcW1qb3pPSzVqMUlUdk1BYTRyVzZ2cWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MTUxYzUtZmFhNC00NWVmLWIyMzgt
YjY5Y2RiNGVmZDgyLzEvOEdWTi1nd0VseWJxaFdSbkZWM2U1TkVCaVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MTUxYzUtZmFhNC00NWVmLWIyMzgtYjY5Y2RiNGVmZDgy
LzEveU5BcW1qb3pPSzVqMUlUdk1BYTRyVzZ2cWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVQwMA0G
CSqGSIb3DQEBCwUAA4IBAQBUewLqvvrW5v0vUrk4R+nrwi0+QSc27Bpe1c2TpTvC
cqzgLm9x+qh9TUfioUqhKZJ+l3Nv0Wf8NHOPM5u9+Vm817wXPND5t67Jbp25XmTm
ynvjaywVXnOswiOvfP+87zPIliT4tSUTXOVfbdfG7jUp3Nr2Pgjv2NcUz6RV/sWo
wMVI+fk/Lj2dW5uwzzv+BV7DeSehHQCpajhwSm8ww4Qh2ACN9Hn8hKIjba0zPGv/
ftNGrsTuIpwLkiiRPQbmXMzUKU8jAxjaTABYcOL+dNC0NkJVvj0NEnRjQ4asvyTN
HbyGAwl8KBVQvCh7eNG1pOGBvzvBSZAZ/Cl+R9FLIXpA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:36 2024 by rpki-client on console-ams.rpki-client.org