Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/exFXODpXvA7SOEOuS1DXEn3AEWM.roa
File: exFXODpXvA7SOEOuS1DXEn3AEWM.roa (raw, json)
Hash identifier: JWj4P/rTzmsrcVOr9D2w6KY8XM+gH10/9PfrAh/NvGQ=
Subject key identifier: 7B:11:57:38:3A:57:BC:0E:D2:38:43:AE:4B:50:D7:12:7D:C0:11:63
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09460C2B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/exFXODpXvA7SOEOuS1DXEn3AEWM.roa
Signing time: Sat 01 Jan 2022 06:00:35 +0000
ROA not before: Sat 01 Jan 2022 06:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135343
IP address blocks: 45.141.118.0/24 maxlen: 24
45.141.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155585579 (0x9460c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b1157383a57bc0ed23843ae4b50d7127dc01163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:45:d1:8c:c4:b9:50:57:a8:da:3c:41:c1:
af:ae:c6:70:23:bd:ac:e5:b2:bd:c4:b3:3d:4a:81:
fb:05:09:d3:99:ec:33:2e:c0:b1:0c:86:8a:39:dc:
fb:b6:72:38:fd:43:0e:2e:da:79:31:81:32:fe:5a:
37:54:fd:1e:66:44:0b:42:35:a6:f2:ef:3f:0f:ff:
3f:14:07:71:ee:ea:b3:0e:e3:c0:48:9f:d0:a9:ce:
19:a5:fd:ca:23:ab:9e:5a:1b:b0:00:30:5b:6c:63:
78:07:dd:d4:41:3b:0f:a8:fb:8e:10:89:b5:81:64:
36:09:d9:73:c6:44:e4:c6:d8:8a:bb:2d:48:0f:9c:
0f:e1:a3:87:e2:4a:df:ae:b9:93:5f:91:18:88:22:
5f:84:8c:1d:bf:1a:3f:ba:c0:d2:18:23:53:92:e7:
3c:d5:c3:9c:fa:24:ae:af:09:61:39:87:d3:dd:86:
50:bb:07:03:45:05:8f:bc:35:9d:21:6b:99:a4:a6:
b1:a1:59:5c:73:ff:75:d4:97:88:d1:21:55:d4:5d:
4e:7c:cd:1f:fc:b6:09:de:db:9d:dc:d6:35:44:1d:
33:ca:c6:e8:98:f2:c2:e0:32:68:23:26:9d:cd:3c:
6f:3a:1a:80:8f:e2:92:a0:91:ed:b3:eb:ab:25:46:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:57:38:3A:57:BC:0E:D2:38:43:AE:4B:50:D7:12:7D:C0:11:63
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/exFXODpXvA7SOEOuS1DXEn3AEWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.118.0/23
Signature Algorithm: sha256WithRSAEncryption
72:54:76:81:95:51:c9:ca:63:61:cf:d1:87:48:52:ab:22:62:
fc:13:c4:d4:68:9b:e7:83:55:10:4c:c0:3b:4f:45:28:2d:69:
57:47:2a:57:0f:25:91:35:1d:6e:5a:8a:0e:7c:04:88:f7:1d:
f6:8c:13:81:79:5e:65:2c:7e:e0:67:82:a3:41:f9:e2:00:d0:
b4:80:df:03:81:34:55:5e:83:5b:20:a2:e1:61:24:2b:8c:c9:
fd:fe:03:f1:1a:d7:0b:bb:d9:4d:8d:24:5f:e8:ac:cd:64:34:
df:5f:ac:6f:02:6a:3f:e1:cb:e3:ec:14:9e:83:81:90:c8:0a:
74:49:a7:05:c7:77:eb:ab:d2:d1:93:ab:4c:bf:65:9a:3e:34:
a3:95:6e:2a:13:58:cc:a8:bb:12:b0:b2:38:9a:ee:2a:6f:e7:
02:fd:33:f9:70:83:5a:65:24:14:38:a2:41:93:32:e3:19:81:
47:7d:a8:ad:11:c6:4a:f5:d6:04:5e:d8:b3:e9:f6:50:f2:d0:
8c:3c:ac:df:83:21:6e:14:79:86:ca:6c:ae:b1:3e:61:44:e9:
10:69:de:d4:64:dd:ba:c1:ad:f7:ee:ff:c3:42:2f:43:0a:90:
0d:6f:f1:c2:89:10:59:9c:a2:3b:b1:5f:ab:7f:c6:f7:6b:22:
8c:23:7d:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECUYMKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDEw
MTA2MDAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2IxMTU3MzgzYTU3
YmMwZWQyMzg0M2FlNGI1MGQ3MTI3ZGMwMTE2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALeTRdGMxLlQV6jaPEHBr67GcCO9rOWyvcSzPUqB+wUJ05ns
My7AsQyGijnc+7ZyOP1DDi7aeTGBMv5aN1T9HmZEC0I1pvLvPw//PxQHce7qsw7j
wEif0KnOGaX9yiOrnlobsAAwW2xjeAfd1EE7D6j7jhCJtYFkNgnZc8ZE5MbYirst
SA+cD+Gjh+JK3665k1+RGIgiX4SMHb8aP7rA0hgjU5LnPNXDnPokrq8JYTmH092G
ULsHA0UFj7w1nSFrmaSmsaFZXHP/ddSXiNEhVdRdTnzNH/y2Cd7bndzWNUQdM8rG
6JjywuAyaCMmnc08bzoagI/ikqCR7bPrqyVGZ/UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7EVc4Ole8DtI4Q65LUNcSfcARYzAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L2V4RlhPRHBYdkE3U09FT3VTMURYRW4zQUVXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2NdjANBgkqhkiG9w0BAQsFAAOC
AQEAclR2gZVRycpjYc/Rh0hSqyJi/BPE1Gib54NVEEzAO09FKC1pV0cqVw8lkTUd
blqKDnwEiPcd9owTgXleZSx+4GeCo0H54gDQtIDfA4E0VV6DWyCi4WEkK4zJ/f4D
8RrXC7vZTY0kX+iszWQ031+sbwJqP+HL4+wUnoOBkMgKdEmnBcd366vS0ZOrTL9l
mj40o5VuKhNYzKi7ErCyOJruKm/nAv0z+XCDWmUkFDiiQZMy4xmBR32orRHGSvXW
BF7Ys+n2UPLQjDys34MhbhR5hspsrrE+YUTpEGne1GTdusGt9+7/w0IvQwqQDW/x
wokQWZyiO7Ffq3/G92sijCN9CA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org