Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itfc0fQ7K0tFf3Fe_bNX3YL97rI.roa
File: Itfc0fQ7K0tFf3Fe_bNX3YL97rI.roa (raw, json)
Hash identifier: QYj1DycU/DMhRnLK8Slp3rDlo9EmJpzOBx4JhJgW98A=
Subject key identifier: 22:D7:DC:D1:F4:3B:2B:4B:45:7F:71:5E:FD:B3:57:DD:82:FD:EE:B2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01852F30EF4D08971ED9BB35B40586CE935E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itfc0fQ7K0tFf3Fe_bNX3YL97rI.roa
Signing time: Tue 20 Dec 2022 11:00:14 +0000
ROA not before: Tue 20 Dec 2022 11:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 45.151.88.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:30:ef:4d:08:97:1e:d9:bb:35:b4:05:86:ce:93:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 11:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d7dcd1f43b2b4b457f715efdb357dd82fdeeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:c3:82:2b:c8:11:2f:80:58:56:b1:34:33:
ee:6c:7e:d0:53:c5:57:ab:9d:93:5c:14:81:24:43:
09:38:79:2f:31:51:bd:87:8f:26:a4:66:25:a6:27:
4b:8a:cb:de:74:e4:03:7d:28:ac:8b:53:cf:af:b9:
30:5b:82:37:9d:97:d5:bd:51:b0:8d:45:1d:75:63:
0e:50:d8:fc:2f:e7:e2:5f:99:6e:f2:8b:cc:8a:5a:
5c:b8:cc:20:40:2d:9f:98:62:f3:40:f1:68:16:1b:
93:b1:48:d3:bb:c1:a7:7b:53:12:d3:20:dc:58:28:
25:67:fa:d0:1e:a6:82:67:91:df:17:7d:59:f4:d3:
ec:c7:15:f9:f3:33:87:b5:01:37:09:ac:55:fc:d7:
38:2f:8b:ec:4b:12:49:3a:ac:4d:8c:fb:b0:7b:ce:
0d:6f:80:72:1d:02:41:58:42:51:c0:56:e0:a5:9c:
5b:c3:25:a8:3f:19:a9:90:b4:c9:8f:a2:5e:cb:d1:
ac:d0:66:b8:a3:a0:56:1d:89:9d:20:b5:64:cc:ca:
41:80:72:70:c8:0a:02:be:1b:21:00:fa:17:cb:28:
94:e9:12:fb:d6:0e:d9:6b:3d:cb:df:45:c3:65:81:
28:a0:52:c0:7f:84:ea:28:58:7e:a8:cc:a2:3d:60:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:DC:D1:F4:3B:2B:4B:45:7F:71:5E:FD:B3:57:DD:82:FD:EE:B2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itfc0fQ7K0tFf3Fe_bNX3YL97rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.154.0/24
45.151.88.0/24
Signature Algorithm: sha256WithRSAEncryption
63:45:07:0a:48:bf:ac:39:7f:81:5f:46:f2:43:01:0e:1d:c2:
9d:99:09:fa:3f:40:87:be:4c:1a:dd:31:97:eb:96:d1:27:c5:
32:08:f4:de:54:b3:4a:8a:b6:b6:32:fc:65:12:bb:05:1e:1c:
c9:b2:37:1b:94:c2:c5:ef:7b:b5:16:a9:8e:9d:21:6d:fd:e2:
72:88:06:fb:24:99:c9:03:10:72:5e:bb:27:a0:d6:42:ba:92:
be:4a:e2:b5:c4:e2:a5:01:0d:58:46:97:43:3b:be:d9:1c:c8:
dc:c5:25:69:8d:fa:66:e2:69:e7:29:67:ad:a1:59:12:d2:60:
56:5a:f9:2a:8a:74:09:27:4d:f7:8f:b9:e1:42:f7:6e:f2:85:
f3:e0:a9:ef:e8:93:8c:cc:4c:b1:c9:13:c8:77:8f:9f:17:6d:
28:ae:ba:8d:b4:72:4c:04:75:57:9b:d1:e5:2d:da:fa:de:af:
36:cc:62:a6:6b:88:35:e2:1e:22:e3:17:73:73:2d:4b:34:7e:
2f:4f:e1:e0:db:9b:79:b0:e2:99:a0:a7:b3:7c:70:a7:1b:b4:
bd:9b:87:89:36:5e:11:ba:19:b6:30:ee:a3:d3:55:e2:2a:08:
b7:66:c5:5e:12:8f:7b:53:b3:20:73:a6:6e:0c:cf:3f:5b:64:
b7:e9:d7:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUvMO9NCJce2bs1tAWGzpNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMjIwMTEwMDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQ3ZGNkMWY0M2IyYjRiNDU3ZjcxNWVmZGIzNTdkZDgyZmRlZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0HDgivIES+AWFaxNDPubH7QU8VX
q52TXBSBJEMJOHkvMVG9h48mpGYlpidLisvedOQDfSisi1PPr7kwW4I3nZfVvVGw
jUUddWMOUNj8L+fiX5lu8ovMilpcuMwgQC2fmGLzQPFoFhuTsUjTu8Gne1MS0yDc
WCglZ/rQHqaCZ5HfF31Z9NPsxxX58zOHtQE3CaxV/Nc4L4vsSxJJOqxNjPuwe84N
b4ByHQJBWEJRwFbgpZxbwyWoPxmpkLTJj6Jey9Gs0Ga4o6BWHYmdILVkzMpBgHJw
yAoCvhshAPoXyyiU6RL71g7Zaz3L30XDZYEooFLAf4TqKFh+qMyiPWB6bQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCLX3NH0OytLRX9xXv2zV92C/e6yMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSXRmYzBmUTdLMHRGZjNGZV9iTlgzWUw5N3JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZCaAwQA
LZdYMA0GCSqGSIb3DQEBCwUAA4IBAQBjRQcKSL+sOX+BX0byQwEOHcKdmQn6P0CH
vkwa3TGX65bRJ8UyCPTeVLNKira2MvxlErsFHhzJsjcblMLF73u1FqmOnSFt/eJy
iAb7JJnJAxByXrsnoNZCupK+SuK1xOKlAQ1YRpdDO77ZHMjcxSVpjfpm4mnnKWet
oVkS0mBWWvkqinQJJ033j7nhQvdu8oXz4Knv6JOMzEyxyRPId4+fF20orrqNtHJM
BHVXm9HlLdr63q82zGKma4g14h4i4xdzcy1LNH4vT+Hg25t5sOKZoKezfHCnG7S9
m4eJNl4Ruhm2MO6j01XiKgi3ZsVeEo97U7Mgc6ZuDM8/W2S36dcP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org