Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/3WHwhvW8hMibO7lBmH4KSHpRa1E.roa
File: 3WHwhvW8hMibO7lBmH4KSHpRa1E.roa (raw, json)
Hash identifier: lyLGwsCPOLVAhcu7u/iwYN6Ng40bJkLmBa9Cj+hqREM=
Subject key identifier: DD:61:F0:86:F5:BC:84:C8:9B:3B:B9:41:98:7E:0A:48:7A:51:6B:51
Certificate issuer: /CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Certificate serial: 0826E8EB
Authority key identifier: 24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/3WHwhvW8hMibO7lBmH4KSHpRa1E.roa
Signing time: Sat 01 Jan 2022 11:56:19 +0000
ROA not before: Sat 01 Jan 2022 11:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21267
IP address blocks: 45.88.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136767723 (0x826e8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Validity
Not Before: Jan 1 11:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd61f086f5bc84c89b3bb941987e0a487a516b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:c0:ff:62:5e:36:63:e6:9f:82:78:76:4e:
0e:ac:42:7e:45:32:52:89:d2:65:39:37:5d:8a:1d:
44:2f:0e:48:ad:e9:37:ed:c6:25:26:45:30:14:e1:
4c:a5:f1:a6:e5:d5:54:7d:43:de:a6:f9:67:e5:e0:
71:50:45:76:95:1e:11:0f:2a:e2:df:a8:cb:1f:c9:
ad:d0:3d:a6:63:76:62:2b:f3:aa:11:11:d3:f8:4b:
68:7d:34:f4:58:9a:7a:8a:6b:81:26:ee:cf:39:28:
6a:7a:36:59:9b:a4:ef:74:6f:47:c0:de:01:7a:76:
ff:e6:8b:88:66:0f:af:66:9b:9f:94:16:4b:a7:06:
0f:58:30:87:b9:25:50:92:2c:8b:41:69:7d:6d:62:
17:6d:74:d9:03:5b:6b:e6:9a:a0:08:c1:7a:4d:cc:
cc:dd:d0:0c:8a:a0:f1:7f:6a:0c:9d:1e:5f:da:05:
d9:c4:38:4f:c6:f1:30:bb:f8:5d:0b:37:fc:e9:53:
be:31:b0:e4:c7:47:65:19:76:33:80:da:1a:5f:69:
ab:8c:3a:ce:d5:4d:e9:cb:4d:e7:03:b5:63:35:7f:
a7:49:e3:b6:c5:2a:ce:08:5f:0e:28:55:b9:a3:aa:
5b:92:a9:59:bf:a6:1f:2e:0d:18:15:42:6e:fd:06:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:F0:86:F5:BC:84:C8:9B:3B:B9:41:98:7E:0A:48:7A:51:6B:51
X509v3 Authority Key Identifier:
keyid:24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/3WHwhvW8hMibO7lBmH4KSHpRa1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:be:13:74:ed:07:2e:47:a6:15:54:24:16:27:ad:f7:89:25:
d0:f0:0e:d7:8a:c0:1a:06:78:84:e4:5b:de:8a:fd:0b:6e:36:
4e:83:18:e1:40:64:d9:87:4a:b0:86:64:94:08:bf:51:2c:a5:
d3:a6:a3:35:93:c0:4c:89:35:a6:96:0a:4f:ac:20:02:28:91:
d4:df:c1:2c:70:6e:c2:3c:69:ca:ea:34:49:3a:9d:32:ec:74:
aa:be:0d:d4:df:b6:0d:c1:5b:32:8a:bc:3f:d6:5f:d1:fc:38:
1a:06:b7:20:1a:ae:52:ab:97:9e:5c:9f:1b:0f:c5:c3:77:93:
36:29:ac:8b:29:3c:c2:11:80:49:72:69:6f:99:0b:82:e3:f3:
de:1a:e4:75:1f:0d:8e:37:5c:64:11:f3:e9:8a:2d:38:0e:09:
4e:36:fa:02:b7:78:86:ef:a3:07:f0:e2:50:bc:43:7c:5e:a9:
d1:8b:fa:e5:cb:ff:9b:f6:1d:02:43:bc:31:30:20:58:2a:8b:
41:6f:11:c8:84:c1:13:0e:1c:a8:49:51:47:43:53:9b:9e:0b:
ef:4e:70:83:17:6f:29:6f:af:68:fa:52:38:47:41:47:f3:f7:
14:60:d8:8f:7f:65:72:75:5a:c4:00:b8:8c:b0:86:de:34:38:
60:a6:f4:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECCbo6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDhiOGNkMmJiNzQ0YzU3MjA1NzA0NjVkZTU3YjRjYTM1YTM3MmYwMB4XDTIyMDEw
MTExNTYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ2MWYwODZmNWJj
ODRjODliM2JiOTQxOTg3ZTBhNDg3YTUxNmI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkXwP9iXjZj5p+CeHZODqxCfkUyUonSZTk3XYodRC8OSK3p
N+3GJSZFMBThTKXxpuXVVH1D3qb5Z+XgcVBFdpUeEQ8q4t+oyx/JrdA9pmN2Yivz
qhER0/hLaH009FiaeoprgSbuzzkoano2WZuk73RvR8DeAXp2/+aLiGYPr2abn5QW
S6cGD1gwh7klUJIsi0FpfW1iF2102QNba+aaoAjBek3MzN3QDIqg8X9qDJ0eX9oF
2cQ4T8bxMLv4XQs3/OlTvjGw5MdHZRl2M4DaGl9pq4w6ztVN6ctN5wO1YzV/p0nj
tsUqzghfDihVuaOqW5KpWb+mHy4NGBVCbv0G/5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTdYfCG9byEyJs7uUGYfgpIelFrUTAfBgNVHSMEGDAWgBQki4zSu3RMVyBX
BGXeV7TKNaNy8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pJdU0wcnQwVEZjZ1Z3UmwzbGUweWpXamN2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvMTNhMmNmLTBmMGQtNGU0NC1hYTkyLTg1MThjYTRhNWZjYS8x
LzNXSHdodlc4aE1pYk83bEJtSDRLU0hwUmExRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
MTNhMmNmLTBmMGQtNGU0NC1hYTkyLTg1MThjYTRhNWZjYS8xL0pJdU0wcnQwVEZj
Z1Z3UmwzbGUweWpXamN2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1YPDANBgkqhkiG9w0BAQsFAAOC
AQEAjb4TdO0HLkemFVQkFiet94kl0PAO14rAGgZ4hORb3or9C242ToMY4UBk2YdK
sIZklAi/USyl06ajNZPATIk1ppYKT6wgAiiR1N/BLHBuwjxpyuo0STqdMux0qr4N
1N+2DcFbMoq8P9Zf0fw4Gga3IBquUquXnlyfGw/Fw3eTNimsiyk8whGASXJpb5kL
guPz3hrkdR8NjjdcZBHz6YotOA4JTjb6Ard4hu+jB/DiULxDfF6p0Yv65cv/m/Yd
AkO8MTAgWCqLQW8RyITBEw4cqElRR0NTm54L705wgxdvKW+vaPpSOEdBR/P3FGDY
j39lcnVaxAC4jLCG3jQ4YKb0uw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:17 2024 by rpki-client on console-ams.rpki-client.org