Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/8jMicjz31_npeqRuGqzyqAhWWIA.roa
File: 8jMicjz31_npeqRuGqzyqAhWWIA.roa (raw, json)
Hash identifier: ZucOTZiFPNvmeN+AZLktAP00GhGuyDHfirq/SnFShLs=
Subject key identifier: F2:33:22:72:3C:F7:D7:F9:E9:7A:A4:6E:1A:AC:F2:A8:08:56:58:80
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 084425E7
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/8jMicjz31_npeqRuGqzyqAhWWIA.roa
Signing time: Sat 01 Jan 2022 04:57:12 +0000
ROA not before: Sat 01 Jan 2022 04:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.11.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138683879 (0x84425e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jan 1 04:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f23322723cf7d7f9e97aa46e1aacf2a808565880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:ba:79:03:d9:a1:1d:95:41:e3:49:d5:11:
90:25:d0:97:67:fe:c6:86:9a:9c:1f:c0:63:eb:66:
6a:07:9f:6f:2f:8d:97:93:e2:02:6d:be:e0:79:4e:
27:e0:ae:3d:b0:e9:39:c9:1d:df:34:bd:67:de:f2:
78:4b:65:12:14:49:6a:3b:68:8c:3f:fb:7b:f7:85:
34:26:c3:ea:df:25:a4:1a:cf:54:c0:96:c4:1f:31:
ec:9f:5a:f3:02:9d:c6:1e:9d:bb:76:dd:96:5c:19:
ca:6c:4c:7d:82:76:f1:30:54:e4:55:20:5b:ba:1b:
51:e9:4e:57:7f:5a:90:70:a0:f7:e6:88:bd:03:ec:
1f:27:fc:1b:bc:e9:07:38:50:5b:72:81:42:73:25:
b9:a7:1b:27:75:02:8e:16:7d:57:27:23:84:ab:50:
3b:f8:ca:9b:91:35:a8:46:2c:cb:b1:94:64:7c:76:
d7:73:ab:6f:c6:cd:18:66:d1:a4:f2:12:80:0d:3e:
52:36:2e:94:d5:9e:8a:22:19:bf:99:98:9a:3c:1d:
1e:5f:82:7c:4b:12:bf:32:88:e8:49:12:fb:fb:88:
89:52:29:fd:25:57:10:ca:30:d1:03:29:ef:28:f7:
5c:78:fd:11:40:16:f6:31:61:75:de:7c:58:a6:aa:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:22:72:3C:F7:D7:F9:E9:7A:A4:6E:1A:AC:F2:A8:08:56:58:80
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/8jMicjz31_npeqRuGqzyqAhWWIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:16:a3:6e:ab:0f:28:2e:e3:91:b5:64:88:98:62:c5:2a:c5:
21:da:cd:14:d5:2f:58:9f:41:bc:7d:7c:50:50:bf:6b:17:ed:
98:7b:19:2d:7f:77:74:6d:46:53:46:49:5e:9b:99:67:e9:42:
10:db:45:80:9e:1c:3a:20:93:34:66:93:85:16:a4:a6:ef:51:
2c:32:de:a1:4f:9e:1f:21:3e:09:1b:7d:ef:2b:df:45:0f:a1:
6e:99:20:02:1b:aa:92:53:9c:81:10:57:4e:e3:8a:5a:10:77:
8c:d7:39:d2:4d:c0:6c:6e:52:94:de:60:d1:51:db:67:e4:cb:
1f:0a:c9:57:37:a9:ae:54:d7:2c:e5:d7:66:ed:ae:41:c9:e9:
48:9c:54:0c:b5:80:56:52:ac:65:60:79:10:c4:be:04:2c:7e:
09:c3:7d:0f:54:14:8c:c2:2f:2b:32:a4:4f:24:f2:39:19:7f:
ac:19:68:87:19:f3:78:eb:d3:6d:64:ad:86:cd:ea:b5:c1:35:
58:d0:4e:7b:95:f6:f2:09:04:7a:d3:8e:62:2f:a4:26:a3:f7:
10:52:d8:b8:b6:e4:4d:8b:5e:04:93:53:44:e6:e9:69:f5:04:
43:96:ef:0d:02:f0:9e:7a:c2:99:4d:d5:6f:38:79:9f:5c:6c:
08:92:19:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECEQl5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTFhMmE5NDA1YmRhMTY3MWMxMDc3NmY0NDI2MjczYzkwNGU0YWQwMB4XDTIyMDEw
MTA0NTcxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjIzMzIyNzIzY2Y3
ZDdmOWU5N2FhNDZlMWFhY2YyYTgwODU2NTg4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOJEunkD2aEdlUHjSdURkCXQl2f+xoaanB/AY+tmagefby+N
l5PiAm2+4HlOJ+CuPbDpOckd3zS9Z97yeEtlEhRJajtojD/7e/eFNCbD6t8lpBrP
VMCWxB8x7J9a8wKdxh6du3bdllwZymxMfYJ28TBU5FUgW7obUelOV39akHCg9+aI
vQPsHyf8G7zpBzhQW3KBQnMluacbJ3UCjhZ9VycjhKtQO/jKm5E1qEYsy7GUZHx2
13Orb8bNGGbRpPISgA0+UjYulNWeiiIZv5mYmjwdHl+CfEsSvzKI6EkS+/uIiVIp
/SVXEMow0QMp7yj3XHj9EUAW9jFhdd58WKaq4Q8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTyMyJyPPfX+el6pG4arPKoCFZYgDAfBgNVHSMEGDAWgBRBGiqUBb2hZxwQ
d29EJic8kE5K0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FSb3FsQVc5b1djY0VIZHZSQ1luUEpCT1N0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvZmU2ODcwLTA5OTAtNGMyMS05ZTRkLThjNTJlNjY2YThhMi8x
LzhqTWljanozMV9ucGVxUnVHcXp5cUFoV1dJQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
ZmU2ODcwLTA5OTAtNGMyMS05ZTRkLThjNTJlNjY2YThhMi8xL1FSb3FsQVc5b1dj
Y0VIZHZSQ1luUEpCT1N0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0L/DANBgkqhkiG9w0BAQsFAAOC
AQEAqxajbqsPKC7jkbVkiJhixSrFIdrNFNUvWJ9BvH18UFC/axftmHsZLX93dG1G
U0ZJXpuZZ+lCENtFgJ4cOiCTNGaThRakpu9RLDLeoU+eHyE+CRt97yvfRQ+hbpkg
AhuqklOcgRBXTuOKWhB3jNc50k3AbG5SlN5g0VHbZ+TLHwrJVzeprlTXLOXXZu2u
QcnpSJxUDLWAVlKsZWB5EMS+BCx+CcN9D1QUjMIvKzKkTyTyORl/rBlohxnzeOvT
bWSths3qtcE1WNBOe5X28gkEetOOYi+kJqP3EFLYuLbkTYteBJNTRObpafUEQ5bv
DQLwnnrCmU3Vbzh5n1xsCJIZKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org