Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0ogyouD2O3p578ImfD8CEyk0iDg.roa
File: 0ogyouD2O3p578ImfD8CEyk0iDg.roa (raw, json)
Hash identifier: LNDj+x3znnbitFGBp+LgmcIJr3mKhJkgFa9rlGhg5FE=
Subject key identifier: D2:88:32:A2:E0:F6:3B:7A:79:EF:C2:26:7C:3F:02:13:29:34:88:38
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184ED32814CD88C86F4D465E297886C6AC5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0ogyouD2O3p578ImfD8CEyk0iDg.roa
Signing time: Wed 07 Dec 2022 15:27:00 +0000
ROA not before: Wed 07 Dec 2022 15:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200785
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:32:81:4c:d8:8c:86:f4:d4:65:e2:97:88:6c:6a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 7 15:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d28832a2e0f63b7a79efc2267c3f021329348838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:29:61:b2:f7:e7:37:7c:94:7c:ee:9f:6e:
ff:95:b1:e5:87:1a:89:95:5a:7c:1b:48:7a:af:7a:
32:6d:e2:b1:9e:a4:19:bc:a7:a8:c8:f2:13:62:64:
50:db:db:97:14:aa:78:00:ad:d1:8c:22:3a:74:06:
75:3b:c3:5f:25:8a:85:ab:4e:63:69:7a:d6:ea:57:
c5:f8:87:60:93:ff:3d:41:02:7d:73:e2:46:c8:68:
6d:35:41:db:a2:4f:65:21:c5:16:28:e8:28:e7:6c:
07:cd:d5:62:93:65:0e:7a:33:aa:eb:32:4b:5a:b3:
d7:0a:63:04:fc:0a:a1:06:cf:3a:b7:71:f0:e3:e3:
9a:fc:fb:95:59:ea:21:b5:a9:d0:a6:67:a9:a5:34:
b9:5e:41:a8:fc:34:48:4d:fa:b9:dc:59:ac:8b:45:
81:66:b6:fb:02:9b:ea:2d:b3:13:7a:18:e1:a6:0b:
79:0d:c8:d6:39:36:f4:f1:e9:47:50:db:4d:e7:f5:
72:01:93:60:90:f3:aa:00:6c:99:50:f3:e9:f8:0e:
1e:80:8d:5b:c3:14:3a:24:8e:43:31:ef:eb:05:51:
e2:04:5b:3c:2b:cb:dc:00:22:64:e3:6d:a8:91:56:
c8:d5:49:75:66:14:a9:7b:8a:2c:8a:ee:79:07:cb:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:88:32:A2:E0:F6:3B:7A:79:EF:C2:26:7C:3F:02:13:29:34:88:38
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0ogyouD2O3p578ImfD8CEyk0iDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:9b:4f:9b:38:c8:e5:2a:0c:5d:1e:18:e9:ac:e7:00:39:
65:f3:ac:6c:7a:94:5a:00:2c:ca:6a:70:17:ca:87:1d:30:a4:
96:dd:27:d4:16:f0:aa:de:95:08:a3:b9:38:7b:e6:1b:a0:1b:
c5:e6:25:6a:7f:14:67:5f:4e:de:38:b4:68:b5:ab:21:64:47:
04:6a:55:e0:33:a6:23:36:82:b9:d8:3c:bf:3e:91:cc:11:21:
5d:66:3d:b7:b8:40:1a:85:24:26:26:21:36:a8:2a:42:89:be:
17:99:de:52:7c:ef:50:ac:22:19:d1:71:ec:97:57:75:8a:f7:
73:31:d8:45:51:f1:45:d6:83:cf:38:5e:73:93:82:3b:e0:05:
69:fd:ff:a4:06:d7:3c:ca:76:8e:78:2d:d0:f6:7d:0c:5c:23:
f6:b7:89:e0:8d:6b:f5:d7:86:d4:52:90:03:76:3d:37:06:46:
f8:c5:9b:55:2b:ba:e2:b0:b8:8a:14:50:23:77:23:de:b4:b6:
2e:ab:f3:35:c7:a4:79:6c:94:85:93:e2:7b:e5:a9:c8:14:af:
f7:7f:01:3c:31:f1:6f:71:9f:5f:24:49:e5:42:cb:ea:68:8d:
c2:ae:73:6a:03:fb:94:97:ff:af:34:16:6e:99:e3:95:72:cb:
ba:4d:a9:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTtMoFM2IyG9NRl4peIbGrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMjA3MTUyNzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjg4MzJhMmUwZjYzYjdhNzllZmMyMjY3YzNmMDIxMzI5MzQ4ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2gpYbL35zd8lHzun27/lbHlhxqJ
lVp8G0h6r3oybeKxnqQZvKeoyPITYmRQ29uXFKp4AK3RjCI6dAZ1O8NfJYqFq05j
aXrW6lfF+Idgk/89QQJ9c+JGyGhtNUHbok9lIcUWKOgo52wHzdVik2UOejOq6zJL
WrPXCmME/AqhBs86t3Hw4+Oa/PuVWeohtanQpmeppTS5XkGo/DRITfq53Fmsi0WB
Zrb7ApvqLbMTehjhpgt5DcjWOTb08elHUNtN5/VyAZNgkPOqAGyZUPPp+A4egI1b
wxQ6JI5DMe/rBVHiBFs8K8vcACJk422okVbI1Ul1ZhSpe4osiu55B8vqTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNKIMqLg9jt6ee/CJnw/AhMpNIg4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMG9neW91RDJPM3A1NzhJbWZEOENFeWswaURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYX7MA0G
CSqGSIb3DQEBCwUAA4IBAQBccJtPmzjI5SoMXR4Y6aznADll86xsepRaACzKanAX
yocdMKSW3SfUFvCq3pUIo7k4e+YboBvF5iVqfxRnX07eOLRotashZEcEalXgM6Yj
NoK52Dy/PpHMESFdZj23uEAahSQmJiE2qCpCib4Xmd5SfO9QrCIZ0XHsl1d1ivdz
MdhFUfFF1oPPOF5zk4I74AVp/f+kBtc8ynaOeC3Q9n0MXCP2t4ngjWv114bUUpAD
dj03Bkb4xZtVK7risLiKFFAjdyPetLYuq/M1x6R5bJSFk+J75anIFK/3fwE8MfFv
cZ9fJEnlQsvqaI3CrnNqA/uUl/+vNBZumeOVcsu6TalY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org