Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/zuS7wN7EyFKs6Kl7vNLKrbNzkkE.roa
File: zuS7wN7EyFKs6Kl7vNLKrbNzkkE.roa (raw, json)
Hash identifier: 6SYbRw9lmCkHcriXNZPuDOkQyv5xtDCt30wObBi9Md4=
Subject key identifier: CE:E4:BB:C0:DE:C4:C8:52:AC:E8:A9:7B:BC:D2:CA:AD:B3:73:92:41
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 081F82E2
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/zuS7wN7EyFKs6Kl7vNLKrbNzkkE.roa
Signing time: Sat 01 Jan 2022 02:56:41 +0000
ROA not before: Sat 01 Jan 2022 02:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.159.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136282850 (0x81f82e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jan 1 02:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cee4bbc0dec4c852ace8a97bbcd2caadb3739241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:76:a3:dd:63:8c:e0:35:2e:7a:dd:83:a8:
6b:3f:b2:5e:41:ef:22:87:a1:64:b1:89:ba:82:6a:
cb:f8:9c:33:c1:fb:8e:73:bb:76:ca:29:fc:c0:d1:
c5:17:4f:c1:00:7d:6f:95:f7:18:35:35:22:d2:7b:
f7:96:89:29:cc:ae:e3:8e:1f:3f:63:87:53:76:65:
39:28:c7:bb:cc:61:e4:04:87:ed:71:ad:b3:56:94:
bb:68:02:f4:65:01:8c:19:83:41:a8:d1:b2:0d:21:
65:bc:d1:21:9b:56:61:db:2a:cd:65:ef:38:cf:96:
8b:72:5b:06:b9:46:07:bc:fb:4a:c4:b7:8b:9f:4b:
2a:65:f8:6b:4d:65:a9:aa:51:6c:a6:16:df:f0:e3:
6f:a4:f9:7d:0e:b2:96:62:54:9d:39:d8:9f:e1:4b:
5c:2f:a9:b6:c5:37:a4:c4:56:23:bf:fe:d6:2d:71:
c0:42:3d:21:f7:f1:1d:19:e1:85:90:5d:f5:19:b5:
cd:76:71:3c:e4:ca:6b:42:3f:d5:eb:4a:21:9d:0d:
f4:08:ad:e6:ae:49:af:03:18:33:2f:54:db:54:24:
0c:7b:24:1b:d6:f6:4c:fa:64:e8:5c:a0:4d:df:69:
fa:10:72:5f:14:d0:97:67:a3:9e:ad:8a:a4:70:de:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:BB:C0:DE:C4:C8:52:AC:E8:A9:7B:BC:D2:CA:AD:B3:73:92:41
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/zuS7wN7EyFKs6Kl7vNLKrbNzkkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:2e:b7:eb:26:f6:33:ba:4c:51:46:e3:39:f4:11:db:dc:b4:
ef:39:dc:9a:fd:8d:9f:69:46:39:99:31:b9:73:7b:25:9f:46:
91:45:c2:b4:48:7a:16:fe:4f:55:a0:58:ff:fb:cb:34:3b:53:
27:d9:6d:88:92:47:30:86:dc:d2:11:c3:a8:43:72:3a:bb:ed:
1f:ef:a7:be:c1:64:ae:31:b7:46:a2:d9:4a:48:05:10:7a:2a:
64:52:9d:f4:d6:09:7a:bb:59:c6:a6:ee:a0:d8:97:b8:52:be:
51:ed:7c:23:a3:2c:b3:50:9f:1f:77:bd:9c:ed:f0:cf:87:1d:
9d:3f:8a:c8:88:b2:22:72:63:a2:90:1d:c9:c2:86:74:c3:9f:
ab:56:05:bd:7c:f1:1f:d3:d5:ac:9a:49:27:c3:13:d6:c5:56:
b0:ea:a1:90:b6:c5:76:31:6e:ae:11:73:fa:6e:a4:00:eb:07:
34:c7:63:c6:a2:50:3a:dc:ad:6c:80:11:1f:fa:fd:f9:7e:d1:
c5:dd:c8:9c:03:61:34:8c:dc:09:5b:c7:d7:a7:5c:a9:c9:79:
ba:52:4a:ce:bf:44:4d:56:1c:3b:03:cb:21:06:ec:c9:e4:43:
1d:1d:c1:ac:5d:de:39:2d:91:12:9e:af:ad:c5:1a:ab:77:41:
12:53:9c:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECB+C4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MzM0ZmMyYjViODIyN2I2ZGYzZjIxZDFhZDNhNzRiMTRlYzA2ODVhMB4XDTIyMDEw
MTAyNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VlNGJiYzBkZWM0
Yzg1MmFjZThhOTdiYmNkMmNhYWRiMzczOTI0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZ1dqPdY4zgNS563YOoaz+yXkHvIoehZLGJuoJqy/icM8H7
jnO7dsop/MDRxRdPwQB9b5X3GDU1ItJ795aJKcyu444fP2OHU3ZlOSjHu8xh5ASH
7XGts1aUu2gC9GUBjBmDQajRsg0hZbzRIZtWYdsqzWXvOM+Wi3JbBrlGB7z7SsS3
i59LKmX4a01lqapRbKYW3/Djb6T5fQ6ylmJUnTnYn+FLXC+ptsU3pMRWI7/+1i1x
wEI9IffxHRnhhZBd9Rm1zXZxPOTKa0I/1etKIZ0N9Ait5q5JrwMYMy9U21QkDHsk
G9b2TPpk6FygTd9p+hByXxTQl2ejnq2KpHDe8Y0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTO5LvA3sTIUqzoqXu80sqts3OSQTAfBgNVHSMEGDAWgBSzNPwrW4Intt8/
IdGtOnSxTsBoWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N6VDhLMXVDSjdiZlB5SFJyVHAwc1U3QWFGby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvNjgyZWNlLWViZTItNGEyMy04YWI1LTM2ZTY0YWM2NDU0Mi8x
L3p1Uzd3TjdFeUZLczZLbDd2TkxLcmJOemtrRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
NjgyZWNlLWViZTItNGEyMy04YWI1LTM2ZTY0YWM2NDU0Mi8xL3N6VDhLMXVDSjdi
ZlB5SFJyVHAwc1U3QWFGby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2f4DANBgkqhkiG9w0BAQsFAAOC
AQEAty636yb2M7pMUUbjOfQR29y07zncmv2Nn2lGOZkxuXN7JZ9GkUXCtEh6Fv5P
VaBY//vLNDtTJ9ltiJJHMIbc0hHDqENyOrvtH++nvsFkrjG3RqLZSkgFEHoqZFKd
9NYJertZxqbuoNiXuFK+Ue18I6Mss1CfH3e9nO3wz4cdnT+KyIiyInJjopAdycKG
dMOfq1YFvXzxH9PVrJpJJ8MT1sVWsOqhkLbFdjFurhFz+m6kAOsHNMdjxqJQOtyt
bIARH/r9+X7Rxd3InANhNIzcCVvH16dcqcl5ulJKzr9ETVYcOwPLIQbsyeRDHR3B
rF3eOS2REp6vrcUaq3dBElOcwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:40 2024 by rpki-client on console-ams.rpki-client.org