Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/u5hZRxBIUT7l0efkFcrGo4ceWc4.roa
File: u5hZRxBIUT7l0efkFcrGo4ceWc4.roa (raw, json)
Hash identifier: eChHUtT2iAvKhuC725AKm3qr+Kr39QsbtpiwjKcxNps=
Subject key identifier: BB:98:59:47:10:48:51:3E:E5:D1:E7:E4:15:CA:C6:A3:87:1E:59:CE
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 08342FD7
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/u5hZRxBIUT7l0efkFcrGo4ceWc4.roa
Signing time: Sat 01 Jan 2022 10:57:41 +0000
ROA not before: Sat 01 Jan 2022 10:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209403
IP address blocks: 45.67.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137637847 (0x8342fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 10:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb9859471048513ee5d1e7e415cac6a3871e59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:4d:71:68:33:ad:14:53:e0:c6:e4:11:9a:
6f:b6:6b:99:39:0c:90:7e:0b:8f:1d:4b:4c:d8:5b:
c4:fa:ad:ed:e4:1d:59:90:55:00:1a:c7:31:17:88:
df:46:30:b3:68:c3:ac:4a:58:41:60:01:c1:fd:bf:
7c:50:98:44:eb:5e:22:8e:8e:51:f3:15:f1:d1:cc:
55:61:43:2c:2e:dc:d4:ed:a5:31:9c:41:02:30:6b:
18:ad:d8:ee:6b:fd:05:9c:41:45:25:01:cb:e7:14:
fb:c8:46:f0:81:54:fb:31:e6:23:37:5d:bb:4a:88:
2f:ab:02:fa:6c:31:a4:dd:5c:0f:81:d2:d8:7b:10:
85:b3:42:d9:83:e0:e8:b8:7b:5b:c9:5c:d1:00:b8:
cf:0b:64:50:f1:4c:dc:94:6d:db:9a:20:ad:7e:ff:
de:9e:52:d0:e9:70:5e:ef:60:fa:b9:24:b5:74:e0:
ec:f6:82:59:0e:ba:28:5b:d0:5e:15:8e:78:c3:b3:
d4:c4:1f:9b:77:14:e9:ca:84:d9:e6:49:44:c6:1e:
c4:ba:4d:4b:ec:41:0e:1b:d0:01:fc:92:1c:45:87:
34:0a:dc:00:f8:d5:70:54:ca:aa:f9:47:09:b2:2e:
48:66:e3:cf:18:24:6f:23:3d:fe:59:cd:37:97:4c:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:59:47:10:48:51:3E:E5:D1:E7:E4:15:CA:C6:A3:87:1E:59:CE
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/u5hZRxBIUT7l0efkFcrGo4ceWc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:01:1f:ee:bf:55:5c:9e:3a:dd:93:2f:94:82:93:48:08:57:
ec:c9:8b:0a:a5:c1:0e:31:07:9a:f1:bd:b0:e8:71:10:de:8f:
09:ac:ac:b9:a5:56:e3:e0:de:00:bf:e4:95:0b:d0:43:1e:5c:
9c:00:bf:f6:a8:0e:eb:69:5d:3d:cc:e6:b1:90:d6:98:fc:df:
82:8e:64:2f:33:15:9f:e3:96:b9:b0:2f:7d:47:58:f3:37:31:
f3:10:8d:65:c5:4e:ac:ca:10:b4:8b:3c:14:dd:71:fb:59:a2:
84:fc:9e:12:22:a6:e4:52:91:b1:66:5e:46:86:04:93:61:2d:
c0:6e:6e:36:8d:a6:ec:f6:e1:dd:de:0f:89:53:6c:d6:dd:af:
75:93:fd:fb:b6:2c:8a:ff:91:5b:aa:31:48:a7:a2:31:77:c7:
a8:b6:63:7b:23:6b:ca:9a:28:8b:25:63:5a:bc:7f:32:8f:13:
00:4a:ee:f4:af:ee:81:23:72:0d:9d:fb:f8:c9:f8:10:3a:3b:
d5:ca:4d:bd:ba:86:f6:0e:07:a1:76:6b:a9:fc:73:32:46:3d:
dc:d1:41:86:d1:e2:7e:fc:eb:58:41:ac:54:06:90:df:b5:ff:
ca:78:e6:b5:2a:f8:14:57:f0:0a:f4:d9:81:23:12:25:21:68:
50:c3:a4:b8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDQv1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
N2M0MGE3NDdlM2FjMWFjYzYxMWE0YzQwM2I2MDA3Mzk4ZTdkNzlmMB4XDTIyMDEw
MTEwNTc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmI5ODU5NDcxMDQ4
NTEzZWU1ZDFlN2U0MTVjYWM2YTM4NzFlNTljZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4gTXFoM60UU+DG5BGab7ZrmTkMkH4Ljx1LTNhbxPqt7eQd
WZBVABrHMReI30Yws2jDrEpYQWABwf2/fFCYROteIo6OUfMV8dHMVWFDLC7c1O2l
MZxBAjBrGK3Y7mv9BZxBRSUBy+cU+8hG8IFU+zHmIzddu0qIL6sC+mwxpN1cD4HS
2HsQhbNC2YPg6Lh7W8lc0QC4zwtkUPFM3JRt25ogrX7/3p5S0OlwXu9g+rkktXTg
7PaCWQ66KFvQXhWOeMOz1MQfm3cU6cqE2eZJRMYexLpNS+xBDhvQAfySHEWHNArc
APjVcFTKqvlHCbIuSGbjzxgkbyM9/lnNN5dM6VECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS7mFlHEEhRPuXR5+QVysajhx5ZzjAfBgNVHSMEGDAWgBS3xAp0fjrBrMYR
pMQDtgBzmOfXnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Q4UUtkSDQ2d2F6R0VhVEVBN1lBYzVqbjE1OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzc1ZWJjLWJhZmItNGUwYi1iNTQ5LTc3NjM1YTIyZWI5Ni8x
L3U1aFpSeEJJVVQ3bDBlZmtGY3JHbzRjZVdjNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
Mzc1ZWJjLWJhZmItNGUwYi1iNTQ5LTc3NjM1YTIyZWI5Ni8xL3Q4UUtkSDQ2d2F6
R0VhVEVBN1lBYzVqbjE1OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1DDDANBgkqhkiG9w0BAQsFAAOC
AQEApwEf7r9VXJ463ZMvlIKTSAhX7MmLCqXBDjEHmvG9sOhxEN6PCaysuaVW4+De
AL/klQvQQx5cnAC/9qgO62ldPczmsZDWmPzfgo5kLzMVn+OWubAvfUdY8zcx8xCN
ZcVOrMoQtIs8FN1x+1mihPyeEiKm5FKRsWZeRoYEk2EtwG5uNo2m7Pbh3d4PiVNs
1t2vdZP9+7Ysiv+RW6oxSKeiMXfHqLZjeyNrypooiyVjWrx/Mo8TAEru9K/ugSNy
DZ37+Mn4EDo71cpNvbqG9g4HoXZrqfxzMkY93NFBhtHifvzrWEGsVAaQ37X/ynjm
tSr4FFfwCvTZgSMSJSFoUMOkuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org