Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TiLi5bwK9fif1qRVuIzFhY4OhvI.roa
File: TiLi5bwK9fif1qRVuIzFhY4OhvI.roa (raw, json)
Hash identifier: uCWZ+iJnlz4/V3npwlHN+SaJFwwAdsSNMPwZJch492A=
Subject key identifier: 4E:22:E2:E5:BC:0A:F5:F8:9F:D6:A4:55:B8:8C:C5:85:8E:0E:86:F2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184869AD1D00CE20874BD930198DA7671F0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TiLi5bwK9fif1qRVuIzFhY4OhvI.roa
Signing time: Thu 17 Nov 2022 17:20:03 +0000
ROA not before: Thu 17 Nov 2022 17:20:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203511
IP address blocks: 45.151.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:9a:d1:d0:0c:e2:08:74:bd:93:01:98:da:76:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 17 17:20:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e22e2e5bc0af5f89fd6a455b88cc5858e0e86f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:51:15:73:ff:e7:da:28:41:e0:44:f8:70:
7a:a7:e4:73:24:b0:86:19:e7:b6:4b:3d:41:02:86:
54:e3:09:d1:12:04:2a:51:2a:4f:b6:4e:61:5c:49:
41:82:41:97:0c:11:7a:be:3f:03:45:29:93:9d:f1:
8d:f1:86:0a:ae:ca:a2:d3:5c:b3:83:68:4b:6e:2e:
5b:a0:e3:dd:14:1f:0a:e3:af:49:a2:60:84:65:c7:
39:fb:4c:c2:24:d5:4c:84:35:fb:a5:3e:5b:4e:63:
5c:82:90:0e:8f:28:48:62:7a:3a:a2:35:2c:27:dc:
e5:c1:cb:84:91:4f:0a:8c:c5:a7:c7:82:a4:ae:7e:
f1:92:b8:6f:e6:33:8c:cd:1b:79:22:fc:9f:9a:b5:
75:17:49:33:1c:83:c3:de:69:46:7d:5f:46:8e:cd:
12:d7:34:ec:a7:b6:a7:69:c4:04:e3:8c:87:d4:9b:
89:59:47:c1:41:6e:f8:58:20:1c:e2:8e:25:69:51:
be:dd:7a:b6:3d:97:40:1f:86:17:40:e2:ed:4e:23:
0e:23:55:38:9c:45:e2:1e:53:91:61:d8:5f:8a:7f:
f9:02:3c:61:14:a7:84:23:53:15:61:b8:a7:11:fc:
ab:78:1f:04:37:37:d9:17:ab:22:d5:24:cb:dc:5d:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:E2:E5:BC:0A:F5:F8:9F:D6:A4:55:B8:8C:C5:85:8E:0E:86:F2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TiLi5bwK9fif1qRVuIzFhY4OhvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:21:ad:c6:1a:9f:d8:10:c2:08:c9:c4:e2:7e:90:74:7f:bd:
e2:de:aa:21:be:8f:67:9f:44:c9:ce:99:01:c8:98:55:b8:ab:
66:a1:b9:0a:16:e3:6a:82:c6:82:65:c7:4e:02:ea:97:1e:89:
16:1c:c0:a0:14:e4:00:0d:56:08:41:1f:8b:da:10:67:fa:4a:
07:4a:cd:d5:a3:4b:fe:d1:e8:93:40:98:8d:bd:4b:5f:73:12:
1c:2f:08:32:7c:62:55:c7:c5:bc:c2:dc:13:b3:1f:31:e9:ae:
02:7a:a8:7f:dd:59:e5:ad:15:7e:22:ef:48:7e:74:22:39:2b:
b3:4e:dc:a9:00:6c:44:e4:63:2d:f8:d4:69:ea:08:1a:e3:f1:
0f:47:0d:a0:c2:eb:ff:f0:20:9c:d6:fd:3a:10:19:f9:e0:f8:
5f:9d:1b:22:61:e8:88:81:28:db:3a:5b:65:7d:7a:60:b2:dd:
6d:23:fc:48:07:c7:9f:16:46:23:19:ae:bf:f9:b6:76:3b:01:
a7:e9:67:cf:7c:ed:6e:e3:82:14:30:b5:73:d2:78:b2:dc:ec:
c8:88:b3:d7:49:d7:f3:e4:84:85:9a:30:24:04:be:ec:3e:2b:
7b:41:1f:44:03:85:fc:02:ca:43:9a:63:70:21:f1:25:80:1b:
ce:01:dc:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSGmtHQDOIIdL2TAZjadnHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMTE3MTcyMDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTIyZTJlNWJjMGFmNWY4OWZkNmE0NTViODhjYzU4NThlMGU4NmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD1RFXP/59ooQeBE+HB6p+RzJLCG
Gee2Sz1BAoZU4wnREgQqUSpPtk5hXElBgkGXDBF6vj8DRSmTnfGN8YYKrsqi01yz
g2hLbi5boOPdFB8K469JomCEZcc5+0zCJNVMhDX7pT5bTmNcgpAOjyhIYno6ojUs
J9zlwcuEkU8KjMWnx4Kkrn7xkrhv5jOMzRt5IvyfmrV1F0kzHIPD3mlGfV9Gjs0S
1zTsp7anacQE44yH1JuJWUfBQW74WCAc4o4laVG+3Xq2PZdAH4YXQOLtTiMOI1U4
nEXiHlORYdhfin/5AjxhFKeEI1MVYbinEfyreB8ENzfZF6si1STL3F3UzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4i4uW8CvX4n9akVbiMxYWODobyMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvVGlMaTVid0s5ZmlmMXFSVnVJekZoWTRPaHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZcCMA0G
CSqGSIb3DQEBCwUAA4IBAQBOIa3GGp/YEMIIycTifpB0f73i3qohvo9nn0TJzpkB
yJhVuKtmobkKFuNqgsaCZcdOAuqXHokWHMCgFOQADVYIQR+L2hBn+koHSs3Vo0v+
0eiTQJiNvUtfcxIcLwgyfGJVx8W8wtwTsx8x6a4Ceqh/3VnlrRV+Iu9IfnQiOSuz
TtypAGxE5GMt+NRp6gga4/EPRw2gwuv/8CCc1v06EBn54PhfnRsiYeiIgSjbOltl
fXpgst1tI/xIB8efFkYjGa6/+bZ2OwGn6WfPfO1u44IUMLVz0niy3OzIiLPXSdfz
5ISFmjAkBL7sPit7QR9EA4X8AspDmmNwIfElgBvOAdyd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org