Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/JxRJHeuJKUXYczCXXnIxMb6It5Q.roa
File: JxRJHeuJKUXYczCXXnIxMb6It5Q.roa (raw, json)
Hash identifier: kWFDaPxAC6bfntXe3VVAE5fcMUtHCV20r+1JYBYQigM=
Subject key identifier: 27:14:49:1D:EB:89:29:45:D8:73:30:97:5E:72:31:31:BE:88:B7:94
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0C4DA7CA
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/JxRJHeuJKUXYczCXXnIxMb6It5Q.roa
Signing time: Wed 22 Jun 2022 22:34:32 +0000
ROA not before: Wed 22 Jun 2022 22:34:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56582
IP address blocks: 45.133.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206415818 (0xc4da7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 22 22:34:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2714491deb892945d87330975e723131be88b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:ef:f3:3d:70:3a:08:7a:88:3a:37:25:44:
be:9d:0d:26:d3:1a:5c:b8:a5:fc:0c:4a:9b:9e:7e:
de:01:f3:06:e5:9c:f1:25:de:7b:e8:74:d9:f7:aa:
0e:26:40:9e:2c:f4:bd:87:8b:00:87:b8:60:c7:6d:
6c:5d:46:50:13:a4:a5:e9:db:5a:e4:e6:7f:9b:d4:
c9:48:3b:7d:2a:a0:98:27:d7:a1:db:d3:6f:cc:50:
cf:e2:2d:1e:d5:59:ba:7c:29:b8:1c:de:ab:4f:4a:
76:87:96:0a:81:9d:96:cf:cb:f6:96:1d:c3:b4:e3:
f8:bd:98:df:a9:f5:34:ec:e6:3c:56:c1:fb:56:6a:
46:7c:7f:e9:5b:45:77:b4:37:ab:dd:ae:51:3c:d5:
22:e5:cf:92:05:37:48:96:a9:24:12:1e:9e:33:9d:
30:9a:b6:f6:34:40:a5:5f:63:c9:2f:15:e0:74:9c:
48:6a:c7:e3:62:af:cb:ee:3b:3c:f9:b6:2b:ad:19:
30:b5:4c:a9:ff:33:e8:9f:fc:95:f7:ab:b3:f4:17:
cd:86:33:93:54:d7:e7:2d:ec:fb:9b:a0:1b:27:72:
27:d8:7f:8c:70:03:94:db:d7:0b:fb:13:00:49:7f:
43:d2:09:84:83:c2:e3:0d:5c:6f:25:b0:12:f8:c1:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:49:1D:EB:89:29:45:D8:73:30:97:5E:72:31:31:BE:88:B7:94
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/JxRJHeuJKUXYczCXXnIxMb6It5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2a:20:02:cd:fd:6e:7f:87:20:a3:6d:2d:35:46:f0:9c:4e:
13:c8:49:84:a7:2f:11:57:45:f1:78:79:93:d2:46:19:c9:8a:
47:65:ff:a9:7d:c8:c9:d5:15:ac:ce:a1:dd:f1:7a:d8:da:cd:
d2:cd:a3:d7:05:97:0c:29:1e:a8:7d:6a:a9:ea:8a:3c:70:51:
1a:b9:a7:8d:6f:15:8d:39:d6:ae:e7:63:a2:54:06:d8:7f:5a:
86:81:40:08:98:7f:de:3e:da:1f:56:0b:32:93:f7:a0:3f:3e:
42:a2:26:f5:d1:2f:c9:a0:4a:c2:09:91:84:51:41:93:e5:0a:
84:8a:c3:d5:e4:76:a1:03:c9:5c:6b:c5:c7:c8:79:be:c1:d2:
fc:1e:58:1e:1b:19:fe:57:85:8a:72:80:77:80:f7:d8:2c:c5:
ff:1e:40:33:8c:f0:5e:bb:bb:88:0c:ac:60:1e:0a:d8:04:09:
24:e4:85:f4:91:08:3c:a4:46:ce:3c:40:45:83:af:fd:a4:28:
c0:5f:02:37:ec:66:e4:ce:2c:9f:35:75:58:8b:e6:6f:50:f6:
da:9b:c0:18:5f:66:53:8d:04:f6:88:af:f8:56:71:f1:42:cb:
7e:89:5c:8a:b4:d9:91:c3:fe:2f:2e:27:af:39:27:c4:3b:72:
06:d9:7a:d8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDE2nyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZDBkYTQzYjRhNWQzZGI3OGJhM2Y3NzRlNWIzMWI3NzAzNzIwMmQ1MB4XDTIyMDYy
MjIyMzQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjcxNDQ5MWRlYjg5
Mjk0NWQ4NzMzMDk3NWU3MjMxMzFiZTg4Yjc5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvb7/M9cDoIeog6NyVEvp0NJtMaXLil/AxKm55+3gHzBuWc
8SXee+h02feqDiZAniz0vYeLAIe4YMdtbF1GUBOkpenbWuTmf5vUyUg7fSqgmCfX
odvTb8xQz+ItHtVZunwpuBzeq09KdoeWCoGdls/L9pYdw7Tj+L2Y36n1NOzmPFbB
+1ZqRnx/6VtFd7Q3q92uUTzVIuXPkgU3SJapJBIenjOdMJq29jRApV9jyS8V4HSc
SGrH42Kvy+47PPm2K60ZMLVMqf8z6J/8lfers/QXzYYzk1TX5y3s+5ugGydyJ9h/
jHADlNvXC/sTAEl/Q9IJhIPC4w1cbyWwEvjBGTUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnFEkd64kpRdhzMJdecjExvoi3lDAfBgNVHSMEGDAWgBStDaQ7Sl09t4uj
93Tlsxt3A3IC1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JRMmtPMHBkUGJlTG9fZDA1Yk1iZHdOeUF0VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvZGQ4MDk2LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8x
L0p4UkpIZXVKS1VYWWN6Q1hYbkl4TWI2SXQ1US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
ZGQ4MDk2LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8xL3JRMmtPMHBkUGJl
TG9fZDA1Yk1iZHdOeUF0VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2FJzANBgkqhkiG9w0BAQsFAAOC
AQEAYSogAs39bn+HIKNtLTVG8JxOE8hJhKcvEVdF8Xh5k9JGGcmKR2X/qX3IydUV
rM6h3fF62NrN0s2j1wWXDCkeqH1qqeqKPHBRGrmnjW8VjTnWrudjolQG2H9ahoFA
CJh/3j7aH1YLMpP3oD8+QqIm9dEvyaBKwgmRhFFBk+UKhIrD1eR2oQPJXGvFx8h5
vsHS/B5YHhsZ/leFinKAd4D32CzF/x5AM4zwXru7iAysYB4K2AQJJOSF9JEIPKRG
zjxARYOv/aQowF8CN+xm5M4snzV1WIvmb1D22pvAGF9mU40E9oiv+FZx8ULLfolc
irTZkcP+Ly4nrzknxDtyBtl62A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org