Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/3Yek55xzXUhXv2MTJo0rEhkPJRA.roa
File: 3Yek55xzXUhXv2MTJo0rEhkPJRA.roa (raw, json)
Hash identifier: ok0ZRDJs49Ww5LXZ1E68e/ExKXRAkbsq2m+fXLvQxhw=
Subject key identifier: DD:87:A4:E7:9C:73:5D:48:57:BF:63:13:26:8D:2B:12:19:0F:25:10
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018362E069F84D1C83EAC3FB777B5CCBC4D0
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/3Yek55xzXUhXv2MTJo0rEhkPJRA.roa
Signing time: Thu 22 Sep 2022 01:46:57 +0000
ROA not before: Thu 22 Sep 2022 01:46:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19318
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:62:e0:69:f8:4d:1c:83:ea:c3:fb:77:7b:5c:cb:c4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Sep 22 01:46:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd87a4e79c735d4857bf6313268d2b12190f2510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:66:61:be:17:8c:c8:00:c0:6b:4c:37:2c:
09:09:9d:56:71:2b:09:23:44:4e:5d:1c:72:a2:cf:
f2:6c:c8:67:35:db:02:60:c5:26:de:a6:90:c6:e9:
09:4d:1e:25:23:ca:88:0c:f3:de:eb:fa:9c:ef:b2:
fb:43:60:a5:c0:4c:cb:5f:97:41:d9:b8:f8:85:06:
78:25:05:74:00:e9:42:e5:61:72:d0:4b:50:0c:66:
54:ed:69:97:b3:8a:54:84:1a:52:da:f2:6d:11:64:
49:a4:b1:bb:8e:75:9f:ab:52:ef:9e:24:e4:64:01:
9c:b8:bc:e0:80:c7:10:84:e7:4e:70:65:5a:47:69:
00:68:fd:4c:41:f1:91:d8:a6:10:4b:4d:6c:ea:1d:
4e:58:83:ae:0c:8c:b3:c3:c5:28:3a:af:b4:2a:92:
73:10:e3:88:cc:60:e0:6f:6e:69:50:43:a9:84:62:
02:29:6f:1e:03:b0:70:90:87:7b:21:d8:22:91:4d:
80:d8:85:94:a3:e7:02:2c:b0:71:5d:a6:5a:20:c3:
66:8a:1b:31:cf:04:36:6f:76:6f:ae:fb:72:33:06:
d7:5d:43:fb:64:f6:54:9d:08:55:83:cb:d3:e1:b7:
56:4d:07:b7:8c:de:2a:18:f9:66:af:3b:c4:08:8a:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:A4:E7:9C:73:5D:48:57:BF:63:13:26:8D:2B:12:19:0F:25:10
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/3Yek55xzXUhXv2MTJo0rEhkPJRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:ce:d8:d7:80:82:b3:c8:64:ca:97:00:5e:f5:50:dc:92:42:
f7:d7:55:8f:5a:b8:04:b6:87:1b:f4:c4:72:f3:a9:17:dc:71:
62:d8:69:ad:bb:b8:49:80:46:27:f4:22:9b:69:e8:c6:cf:b9:
7b:64:5e:75:3a:bb:54:e6:a8:67:c6:b8:1b:a9:21:b9:16:f2:
b7:9f:21:d0:1f:d4:5c:42:2a:7f:80:23:19:31:31:f6:dc:e1:
0f:25:fc:23:9a:a9:1a:8f:7e:85:f4:4d:70:ad:70:3a:dd:c6:
06:91:97:e1:5c:3e:9c:3a:c8:e3:1b:98:1f:ef:5b:5b:19:f0:
9a:97:1d:bf:18:ba:7a:5d:b7:fc:87:96:da:a6:2d:b1:cd:7b:
eb:ae:56:b0:b7:1b:c6:3d:5e:5a:f1:7c:9e:5f:c6:66:52:78:
01:a6:dc:9d:f6:e5:8d:27:bb:95:02:b4:46:e1:2d:3a:5e:e1:
57:3f:8c:3e:0e:9f:07:ad:66:8c:89:53:20:61:92:23:90:0c:
0d:43:2b:82:36:e5:e9:48:be:c4:40:4b:12:62:d4:18:ef:51:
51:93:80:d0:35:c1:aa:c2:37:31:aa:62:bf:ac:ac:e6:50:c0:
c3:19:cd:b5:ac:31:09:d1:30:e9:a4:e1:ab:49:1a:fc:26:d5:
11:f1:65:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNi4Gn4TRyD6sP7d3tcy8TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjIwOTIyMDE0NjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDg3YTRlNzljNzM1ZDQ4NTdiZjYzMTMyNjhkMmIxMjE5MGYyNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFNmYb4XjMgAwGtMNywJCZ1WcSsJ
I0ROXRxyos/ybMhnNdsCYMUm3qaQxukJTR4lI8qIDPPe6/qc77L7Q2ClwEzLX5dB
2bj4hQZ4JQV0AOlC5WFy0EtQDGZU7WmXs4pUhBpS2vJtEWRJpLG7jnWfq1LvniTk
ZAGcuLzggMcQhOdOcGVaR2kAaP1MQfGR2KYQS01s6h1OWIOuDIyzw8UoOq+0KpJz
EOOIzGDgb25pUEOphGICKW8eA7BwkId7IdgikU2A2IWUo+cCLLBxXaZaIMNmihsx
zwQ2b3ZvrvtyMwbXXUP7ZPZUnQhVg8vT4bdWTQe3jN4qGPlmrzvECIqLNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN2HpOecc11IV79jEyaNKxIZDyUQMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvM1llazU1eHpYVWhYdjJNVEpvMHJFaGtQSlJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmkMA0G
CSqGSIb3DQEBCwUAA4IBAQDKztjXgIKzyGTKlwBe9VDckkL311WPWrgEtocb9MRy
86kX3HFi2Gmtu7hJgEYn9CKbaejGz7l7ZF51OrtU5qhnxrgbqSG5FvK3nyHQH9Rc
Qip/gCMZMTH23OEPJfwjmqkaj36F9E1wrXA63cYGkZfhXD6cOsjjG5gf71tbGfCa
lx2/GLp6Xbf8h5bapi2xzXvrrlawtxvGPV5a8XyeX8ZmUngBptyd9uWNJ7uVArRG
4S06XuFXP4w+Dp8HrWaMiVMgYZIjkAwNQyuCNuXpSL7EQEsSYtQY71FRk4DQNcGq
wjcxqmK/rKzmUMDDGc21rDEJ0TDppOGrSRr8JtUR8WWs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org