Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/gAKmT3SBrfWk0GmJnDrTbWJrSxQ.roa
File: gAKmT3SBrfWk0GmJnDrTbWJrSxQ.roa (raw, json)
Hash identifier: z/qwa9TxVKn6GrMlJK9Gcmb5Um6naOUN0dexN0NtBWg=
Subject key identifier: 80:02:A6:4F:74:81:AD:F5:A4:D0:69:89:9C:3A:D3:6D:62:6B:4B:14
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 147FE159
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/gAKmT3SBrfWk0GmJnDrTbWJrSxQ.roa
Signing time: Sat 05 Mar 2022 06:16:25 +0000
ROA not before: Sat 05 Mar 2022 06:16:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212301
IP address blocks: 45.67.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343925081 (0x147fe159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Mar 5 06:16:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8002a64f7481adf5a4d069899c3ad36d626b4b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:7f:d1:b3:04:5f:87:07:f4:2f:07:6f:35:
0c:22:51:96:8b:80:4d:16:32:ab:42:ca:7c:61:6a:
13:a9:f5:fd:df:fc:7a:80:c4:e3:64:31:02:dd:a9:
3a:39:9c:5b:ad:28:4b:f5:cb:13:5e:58:d6:ab:05:
04:43:c0:c0:c0:3d:16:94:91:47:cf:3a:8b:69:0f:
62:c0:2d:65:71:e9:4f:29:33:85:ad:e6:c2:11:85:
22:5b:a0:0a:24:d2:23:fe:5d:9d:d3:7f:75:f1:2a:
c9:65:11:6f:d7:f7:e0:d2:35:9e:f9:f4:79:17:17:
e0:3e:5f:50:7b:6e:08:d9:e6:87:44:0d:83:d6:61:
78:00:b8:a3:08:61:0e:bc:8b:bb:b6:d9:3b:06:49:
6d:31:a8:b9:3c:2b:2e:1f:f7:27:03:38:8b:01:9d:
f8:74:06:50:b0:d9:0a:99:1b:ba:cf:08:ca:0d:39:
c3:95:cc:81:d3:87:01:a8:ba:01:46:1d:93:b9:3a:
6b:27:51:74:77:09:24:07:10:e7:7a:9b:98:27:0d:
63:46:04:89:16:c0:f3:f9:57:79:a4:76:d2:f9:c3:
71:62:66:d9:66:de:95:26:2a:5a:4d:ef:ef:9e:85:
8d:34:dd:87:d4:dd:83:89:a0:82:e1:74:9f:a7:42:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:A6:4F:74:81:AD:F5:A4:D0:69:89:9C:3A:D3:6D:62:6B:4B:14
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/gAKmT3SBrfWk0GmJnDrTbWJrSxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:46:c1:a6:02:c5:26:a3:6c:98:92:e6:94:07:08:53:eb:6c:
b6:62:32:bc:be:bf:72:2d:e2:d3:c8:f1:ec:2b:a2:44:4e:66:
bc:5a:01:49:bd:3b:2d:c6:21:30:bc:2a:fd:eb:15:fc:d9:86:
c9:29:91:ec:e3:ba:ec:d7:7d:51:7a:10:b3:9c:6f:2f:d9:c1:
66:3e:7d:da:71:b8:39:3d:45:1a:e8:6f:4f:a8:45:3e:15:c5:
c3:94:0c:84:ef:f7:4d:9c:0c:7f:5a:43:df:d7:e0:45:1d:86:
e0:9e:fc:53:45:34:3e:62:18:30:65:2c:29:91:90:bb:a0:b9:
f8:7f:8c:06:4b:94:0e:bc:af:49:ee:6f:80:6f:ba:10:6f:ca:
31:1f:ff:5f:e7:65:2d:63:1d:a6:cc:61:e9:36:38:c7:e9:a0:
72:e0:31:ae:e8:fd:16:fa:5c:de:24:73:b0:6e:75:bf:3c:df:
53:fa:96:dc:d9:57:11:f8:90:54:0b:b7:2e:59:f7:4c:20:b4:
b9:93:d2:7d:67:fc:16:e6:bb:23:bd:c3:c7:22:47:14:f7:2c:
0b:e6:4d:30:9d:e9:e2:87:bf:f1:0c:0c:e7:7d:38:a2:ae:51:
1e:6c:d6:ce:65:c8:9b:26:38:a4:00:88:2f:ed:d3:5d:8a:a8:
b8:3c:8b:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFH/hWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzFiY2UyZWU4MDZlOTM2MjExMTJkYmQ2MTg1MzZmNzc1ZjQ0ZmJhMB4XDTIyMDMw
NTA2MTYyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAwMmE2NGY3NDgx
YWRmNWE0ZDA2OTg5OWMzYWQzNmQ2MjZiNGIxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMG5f9GzBF+HB/QvB281DCJRlouATRYyq0LKfGFqE6n1/d/8
eoDE42QxAt2pOjmcW60oS/XLE15Y1qsFBEPAwMA9FpSRR886i2kPYsAtZXHpTykz
ha3mwhGFIlugCiTSI/5dndN/dfEqyWURb9f34NI1nvn0eRcX4D5fUHtuCNnmh0QN
g9ZheAC4owhhDryLu7bZOwZJbTGouTwrLh/3JwM4iwGd+HQGULDZCpkbus8Iyg05
w5XMgdOHAai6AUYdk7k6aydRdHcJJAcQ53qbmCcNY0YEiRbA8/lXeaR20vnDcWJm
2WbelSYqWk3v756FjTTdh9Tdg4mgguF0n6dCd3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSAAqZPdIGt9aTQaYmcOtNtYmtLFDAfBgNVHSMEGDAWgBQzG84u6AbpNiER
Lb1hhTb3dfRPujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L014dk9MdWdHNlRZaEVTMjlZWVUyOTNYMFQ3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNGJhM2NhLWQ2ZmQtNDExNi05MTQ2LWFlYWMxNjIyN2MyNS8x
L2dBS21UM1NCcmZXazBHbUpuRHJUYldKclN4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NGJhM2NhLWQ2ZmQtNDExNi05MTQ2LWFlYWMxNjIyN2MyNS8xL014dk9MdWdHNlRZ
aEVTMjlZWVUyOTNYMFQ3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1D6DANBgkqhkiG9w0BAQsFAAOC
AQEAekbBpgLFJqNsmJLmlAcIU+tstmIyvL6/ci3i08jx7CuiRE5mvFoBSb07LcYh
MLwq/esV/NmGySmR7OO67Nd9UXoQs5xvL9nBZj592nG4OT1FGuhvT6hFPhXFw5QM
hO/3TZwMf1pD39fgRR2G4J78U0U0PmIYMGUsKZGQu6C5+H+MBkuUDryvSe5vgG+6
EG/KMR//X+dlLWMdpsxh6TY4x+mgcuAxruj9Fvpc3iRzsG51vzzfU/qW3NlXEfiQ
VAu3Lln3TCC0uZPSfWf8Fua7I73DxyJHFPcsC+ZNMJ3p4oe/8QwM5304oq5RHmzW
zmXImyY4pACIL+3TXYqouDyLsw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org