Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa
File: bB4urioDR0vKC2l0dykx0XMQbDg.roa (raw, json)
Hash identifier: FWeGbZkv2PUTl5cibU5xlI7m5v4FCFr6M/fF7GW6FnQ=
Subject key identifier: 6C:1E:2E:AE:2A:03:47:4B:CA:0B:69:74:77:29:31:D1:73:10:6C:38
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 0183188DB5100E46DFDDE25BD9A9D65C763E
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa
Signing time: Wed 07 Sep 2022 15:24:43 +0000
ROA not before: Wed 07 Sep 2022 15:24:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207898
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:8d:b5:10:0e:46:df:dd:e2:5b:d9:a9:d6:5c:76:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Sep 7 15:24:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c1e2eae2a03474bca0b6974772931d173106c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:55:6a:3d:af:49:7a:6e:3e:58:a9:df:bd:
14:51:9c:6b:24:49:90:f9:42:f7:5b:54:c9:99:73:
1e:3c:b8:c7:26:85:c7:84:e0:22:1b:39:41:d5:30:
f0:84:db:cb:7c:19:82:76:db:68:f5:e0:68:b1:8f:
d5:c3:b4:20:dc:c3:68:b8:b9:77:0b:fe:c4:81:88:
bc:c2:98:e2:e6:d2:f5:4b:40:28:c3:49:0e:b8:25:
a7:9c:06:6f:2d:8b:d1:ea:59:6a:83:56:3d:8a:d3:
c5:c0:d7:82:39:df:9a:29:79:05:65:d0:0c:18:ee:
c2:97:ca:9e:10:b4:b6:ab:5b:8d:c8:a2:ed:6c:37:
b6:88:73:d3:50:c6:2f:f1:7a:41:e0:64:50:1e:46:
04:94:e2:3b:a5:68:fc:43:50:44:95:f9:d3:9b:21:
3f:4f:0b:27:bd:2f:26:81:35:f7:f5:59:b7:32:8a:
1d:d7:a7:00:db:c7:47:d6:3b:b4:9d:27:61:01:64:
b8:e7:e7:9a:1d:e6:3f:36:a3:5b:73:1d:fa:76:27:
28:c6:e7:41:f0:1b:0b:8a:81:43:89:e2:5b:db:b9:
eb:83:dd:8a:7e:de:63:33:4c:64:90:ff:25:fd:68:
e3:47:d2:41:9f:9c:fd:f8:93:29:22:e6:bd:13:fe:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:2E:AE:2A:03:47:4B:CA:0B:69:74:77:29:31:D1:73:10:6C:38
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/bB4urioDR0vKC2l0dykx0XMQbDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:69:23:ae:b4:69:d2:96:6a:5a:20:40:fd:66:a2:94:db:c2:
91:40:f2:d7:1e:83:3d:90:41:a1:cd:a9:d0:dc:69:4d:60:2b:
7f:69:5a:89:a6:76:e7:7f:86:72:91:8f:4a:ab:4d:92:d9:5b:
1e:60:0c:68:aa:e6:eb:78:55:fc:a3:bb:a8:4d:83:d4:70:99:
a5:0d:cb:bd:9b:7f:b8:0f:81:04:b7:d6:38:8b:e1:d8:38:51:
72:c9:77:10:55:62:7c:c0:2a:de:e0:6c:18:ba:d8:e0:c9:08:
36:8f:57:4b:d3:df:3e:ff:bf:96:58:37:26:fa:f5:fa:20:c2:
f0:d0:fe:dd:5a:4c:42:43:2a:16:da:2a:49:4f:20:4f:84:32:
9e:bf:d3:43:b6:5c:92:0f:04:13:0e:77:06:c1:1e:b8:c5:c2:
7d:f2:af:81:b0:e3:5a:8c:26:0f:98:19:47:3d:a7:5c:35:0c:
e3:fe:fb:d9:45:09:4e:4a:84:7e:9c:02:f5:b4:63:90:7d:7f:
e0:9e:f4:9d:dc:b3:9c:12:a1:f5:cc:77:28:01:d3:fd:22:a9:
9d:44:28:ed:f6:b7:06:36:5b:9b:aa:1e:f7:96:49:de:e7:a8:
15:9b:11:3e:a0:a6:d5:4c:b0:4a:8d:15:cd:a3:a5:4e:5f:cf:
9f:a0:9c:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMYjbUQDkbf3eJb2anWXHY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUx
OTBlM2IwHhcNMjIwOTA3MTUyNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzFlMmVhZTJhMDM0NzRiY2EwYjY5NzQ3NzI5MzFkMTczMTA2YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwFVaj2vSXpuPlip370UUZxrJEmQ
+UL3W1TJmXMePLjHJoXHhOAiGzlB1TDwhNvLfBmCdtto9eBosY/Vw7Qg3MNouLl3
C/7EgYi8wpji5tL1S0Aow0kOuCWnnAZvLYvR6llqg1Y9itPFwNeCOd+aKXkFZdAM
GO7Cl8qeELS2q1uNyKLtbDe2iHPTUMYv8XpB4GRQHkYElOI7pWj8Q1BElfnTmyE/
TwsnvS8mgTX39Vm3Mood16cA28dH1ju0nSdhAWS45+eaHeY/NqNbcx36dicoxudB
8BsLioFDieJb27nrg92Kft5jM0xkkP8l/WjjR9JBn5z9+JMpIua9E/6zDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGweLq4qA0dLygtpdHcpMdFzEGw4MB8GA1UdIwQY
MBaAFDaQAYPPCKblvIB4RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMt
MmY1YjZhODNmYWYzLzEvYkI0dXJpb0RSMHZLQzJsMGR5a3gwWE1RYkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYz
LzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu4MA0G
CSqGSIb3DQEBCwUAA4IBAQCoaSOutGnSlmpaIED9ZqKU28KRQPLXHoM9kEGhzanQ
3GlNYCt/aVqJpnbnf4ZykY9Kq02S2VseYAxoqubreFX8o7uoTYPUcJmlDcu9m3+4
D4EEt9Y4i+HYOFFyyXcQVWJ8wCre4GwYutjgyQg2j1dL098+/7+WWDcm+vX6IMLw
0P7dWkxCQyoW2ipJTyBPhDKev9NDtlySDwQTDncGwR64xcJ98q+BsONajCYPmBlH
PadcNQzj/vvZRQlOSoR+nAL1tGOQfX/gnvSd3LOcEqH1zHcoAdP9IqmdRCjt9rcG
Nlubqh73lkne56gVmxE+oKbVTLBKjRXNo6VOX8+foJxp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org