Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/jxvZFPGJ8Bhc9KHUCtWw0zQKOAI.roa
File: jxvZFPGJ8Bhc9KHUCtWw0zQKOAI.roa (raw, json)
Hash identifier: fVoo9MMvNa0m9HyaoB7+qQCm8gpjSDmbnO6Zh8U6lnc=
Subject key identifier: 8F:1B:D9:14:F1:89:F0:18:5C:F4:A1:D4:0A:D5:B0:D3:34:0A:38:02
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018512280F9F068F6EBD1FD96B7651366B68
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/jxvZFPGJ8Bhc9KHUCtWw0zQKOAI.roa
Signing time: Wed 14 Dec 2022 19:41:33 +0000
ROA not before: Wed 14 Dec 2022 19:41:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.140.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:28:0f:9f:06:8f:6e:bd:1f:d9:6b:76:51:36:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 14 19:41:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1bd914f189f0185cf4a1d40ad5b0d3340a3802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:b0:c4:a0:3c:84:4e:63:32:d1:2e:d4:6d:
84:81:94:24:a3:e3:9f:94:95:04:e4:5a:d1:e5:b8:
1b:71:1f:8d:1a:f7:f0:2c:96:3d:3b:aa:8e:07:bd:
da:c3:52:01:8f:55:e9:86:6a:2f:f0:16:f3:d2:2a:
9b:25:62:f1:5b:46:b0:3b:14:e7:03:ec:6a:5d:40:
f6:99:d1:78:38:c1:03:bc:ce:71:4a:af:69:5c:72:
96:ad:27:18:0d:b5:99:23:66:e1:a9:3f:ef:bc:ed:
61:9f:1c:d8:01:af:1d:ba:ab:7b:0a:f7:3d:b8:7a:
e2:14:79:f4:a1:79:97:53:8b:ec:83:b4:cf:35:e3:
56:6a:d8:45:84:94:1b:13:2c:d9:30:93:a9:d8:63:
f8:d3:b7:b2:e5:09:e0:dc:a2:55:ab:aa:a3:79:83:
06:b3:60:f9:4b:9c:61:8c:ff:1a:a7:c9:35:a0:8a:
cd:8e:7d:0d:3a:f2:63:b4:cc:be:19:f7:13:db:b6:
19:75:ec:97:28:f6:10:5c:f8:f4:c8:7e:38:0b:ba:
99:c8:68:ec:4b:cd:2b:1c:11:ab:24:6d:5c:7b:db:
e8:63:5a:5f:0e:34:fb:ea:d6:23:2f:05:ac:b1:c8:
04:2f:19:4c:5c:9f:bd:c0:2d:1f:84:ec:04:06:c8:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:D9:14:F1:89:F0:18:5C:F4:A1:D4:0A:D5:B0:D3:34:0A:38:02
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/jxvZFPGJ8Bhc9KHUCtWw0zQKOAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:48:5e:b7:5c:e5:ec:ce:a3:a3:ae:6e:4e:b5:0f:bc:e9:40:
13:0f:b0:be:21:8d:e6:55:bc:f2:41:99:a9:70:14:6a:64:f4:
38:de:21:58:a3:26:da:c6:f9:2e:0d:ac:4c:89:a5:96:c8:3a:
3b:67:f1:1e:5c:63:1b:ba:e8:2d:93:7c:5c:1e:ab:ff:75:53:
3a:86:a4:72:5a:79:81:d5:8b:0c:c9:ac:a9:65:19:f5:99:fb:
0d:68:29:6a:09:40:c7:61:32:95:92:70:61:d5:7a:8c:9b:95:
bf:21:7d:4c:30:e2:93:7a:03:77:4c:bd:c4:25:a3:3b:06:41:
3a:cf:46:f2:ad:6e:ed:65:b4:e0:d4:7c:a8:16:1b:f4:50:c7:
7c:76:53:ef:39:ad:ff:98:3a:37:bc:be:44:2d:28:15:4e:dc:
75:19:0a:d6:c3:ec:25:72:08:fe:0d:e4:7e:14:bc:75:85:80:
b6:94:3e:5f:82:31:d2:f0:9c:aa:fe:83:31:07:3f:d9:a2:b3:
03:39:ac:fb:e5:d8:e9:0f:b8:d8:ac:30:a6:33:be:e4:e6:1e:
8b:e2:20:92:12:48:0b:42:bf:ac:50:43:d8:f2:e6:c0:80:2d:
af:ef:3f:32:71:7c:08:ef:79:83:ba:92:cd:10:fa:8d:6a:e2:
7c:ff:7c:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUSKA+fBo9uvR/Za3ZRNmtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjIxMjE0MTk0MTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjFiZDkxNGYxODlmMDE4NWNmNGExZDQwYWQ1YjBkMzM0MGEzODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKuwxKA8hE5jMtEu1G2EgZQko+Of
lJUE5FrR5bgbcR+NGvfwLJY9O6qOB73aw1IBj1Xphmov8Bbz0iqbJWLxW0awOxTn
A+xqXUD2mdF4OMEDvM5xSq9pXHKWrScYDbWZI2bhqT/vvO1hnxzYAa8duqt7Cvc9
uHriFHn0oXmXU4vsg7TPNeNWathFhJQbEyzZMJOp2GP407ey5Qng3KJVq6qjeYMG
s2D5S5xhjP8ap8k1oIrNjn0NOvJjtMy+GfcT27YZdeyXKPYQXPj0yH44C7qZyGjs
S80rHBGrJG1ce9voY1pfDjT76tYjLwWsscgELxlMXJ+9wC0fhOwEBsiP5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8b2RTxifAYXPSh1ArVsNM0CjgCMB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvanh2WkZQR0o4QmhjOUtIVUN0V3cwelFLT0FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzTMA0G
CSqGSIb3DQEBCwUAA4IBAQClSF63XOXszqOjrm5OtQ+86UATD7C+IY3mVbzyQZmp
cBRqZPQ43iFYoybaxvkuDaxMiaWWyDo7Z/EeXGMbuugtk3xcHqv/dVM6hqRyWnmB
1YsMyaypZRn1mfsNaClqCUDHYTKVknBh1XqMm5W/IX1MMOKTegN3TL3EJaM7BkE6
z0byrW7tZbTg1HyoFhv0UMd8dlPvOa3/mDo3vL5ELSgVTtx1GQrWw+wlcgj+DeR+
FLx1hYC2lD5fgjHS8Jyq/oMxBz/ZorMDOaz75djpD7jYrDCmM77k5h6L4iCSEkgL
Qr+sUEPY8ubAgC2v7z8ycXwI73mDupLNEPqNauJ8/3yW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-ams.rpki-client.org