Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/snLTvz1tlor4MxTUg3CTDvwUpMg.roa
File: snLTvz1tlor4MxTUg3CTDvwUpMg.roa (raw, json)
Hash identifier: Qn5lCA/EqONbJGof4xsMHXa+XfNOgohlBuVTeOxrWls=
Subject key identifier: B2:72:D3:BF:3D:6D:96:8A:F8:33:14:D4:83:70:93:0E:FC:14:A4:C8
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 08B8961E
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/snLTvz1tlor4MxTUg3CTDvwUpMg.roa
Signing time: Sun 03 Apr 2022 20:30:59 +0000
ROA not before: Sun 03 Apr 2022 20:30:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.140.209.0/24 maxlen: 24
45.140.210.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146314782 (0x8b8961e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Apr 3 20:30:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b272d3bf3d6d968af83314d48370930efc14a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:84:45:6c:cb:45:85:f4:20:8a:14:48:d2:
48:11:c7:03:fc:cf:c8:09:ea:2e:a6:17:49:ec:89:
00:0f:48:65:db:c8:3f:ad:4b:a2:a4:1b:04:cd:84:
1f:09:e7:ce:49:f8:d7:ec:0b:41:02:36:45:23:d7:
82:8a:01:19:f8:74:24:cf:35:ba:71:91:0c:56:3d:
98:10:30:81:08:b9:ba:a7:f3:d7:ab:47:cd:07:38:
0c:d8:53:a2:11:eb:1b:49:e8:ac:62:bc:0d:e4:14:
a1:20:e7:be:53:c9:db:28:c8:73:b0:b6:34:cd:3d:
97:66:e5:08:f4:0a:43:d0:3b:bb:db:08:41:5e:06:
b4:47:f7:8c:8c:ef:f2:cc:2c:6e:80:96:92:4a:0d:
cb:77:17:7b:0f:32:51:db:70:89:93:a9:86:34:6d:
15:60:bd:dc:2d:79:7c:91:07:ab:d1:be:24:e6:d7:
6b:17:be:fc:2f:c3:19:f5:4b:e5:1f:e6:7c:3d:b1:
f8:00:56:8e:68:e0:ac:88:0a:52:29:a6:79:79:9e:
c4:34:cb:7d:41:93:55:e9:8b:ce:6e:99:b2:5d:5a:
d6:bb:41:1e:a6:5e:5d:97:a7:b3:c8:8b:24:ba:3a:
9f:2a:1a:cd:3f:4d:08:55:9e:d4:a0:3e:e0:92:84:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:D3:BF:3D:6D:96:8A:F8:33:14:D4:83:70:93:0E:FC:14:A4:C8
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/snLTvz1tlor4MxTUg3CTDvwUpMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0-45.140.211.255
Signature Algorithm: sha256WithRSAEncryption
b2:b1:ed:0e:95:d6:dc:50:32:c1:f0:90:72:64:66:57:4d:79:
b2:7b:ce:da:d2:e2:65:03:5f:e8:d5:65:6c:80:91:4c:36:15:
e9:92:8d:7d:48:a9:79:4a:c3:78:fb:96:ee:e8:e4:18:0c:87:
49:30:96:d2:4b:19:a8:f3:48:b5:6b:f6:8d:db:ed:0a:6e:15:
71:a8:e4:f7:d9:5f:5e:b9:9e:7d:6c:a0:e1:67:fc:c1:13:79:
4f:3e:27:1e:da:f6:9e:5c:d5:11:78:7c:a5:f3:89:67:51:35:
e1:40:13:d5:fe:66:bb:4a:5c:50:fc:b5:dd:56:dd:ea:21:83:
85:dc:d1:84:e9:fa:10:a8:3c:a5:e8:2d:59:2e:d2:48:77:2c:
55:e5:5b:6a:55:ec:5c:c1:39:81:dd:1a:ac:49:92:60:d2:a4:
e5:f6:9a:ce:33:55:bb:74:4b:27:69:4e:3f:23:a6:5e:06:5f:
0e:6d:38:28:00:2b:4c:27:7b:1d:68:9b:aa:c0:93:be:d1:50:
46:a0:e2:4c:60:d9:3b:7a:19:ee:f5:c8:b5:c1:be:cd:92:64:
ee:c7:7d:22:c1:2f:b8:5f:eb:bf:37:d0:ff:20:4e:d9:cd:26:
65:1f:3b:40:56:70:4d:77:0b:50:da:2a:a8:4b:a0:de:3d:bd:
42:03:73:72
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECLiWHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjhjNjVlNjk5YjU3NmFiMTEzYTc5YmU4ODI4OTQ4ZjFlNmNjMjYwMB4XDTIyMDQw
MzIwMzA1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI3MmQzYmYzZDZk
OTY4YWY4MzMxNGQ0ODM3MDkzMGVmYzE0YTRjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYNhEVsy0WF9CCKFEjSSBHHA/zPyAnqLqYXSeyJAA9IZdvI
P61LoqQbBM2EHwnnzkn41+wLQQI2RSPXgooBGfh0JM81unGRDFY9mBAwgQi5uqfz
16tHzQc4DNhTohHrG0norGK8DeQUoSDnvlPJ2yjIc7C2NM09l2blCPQKQ9A7u9sI
QV4GtEf3jIzv8swsboCWkkoNy3cXew8yUdtwiZOphjRtFWC93C15fJEHq9G+JObX
axe+/C/DGfVL5R/mfD2x+ABWjmjgrIgKUimmeXmexDTLfUGTVemLzm6Zsl1a1rtB
HqZeXZens8iLJLo6nyoazT9NCFWe1KA+4JKEuLMCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSyctO/PW2WivgzFNSDcJMO/BSkyDAfBgNVHSMEGDAWgBTGjGXmmbV2qxE6
eb6IKJSPHmzCYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hveGw1cG0xZHFzUk9ubS1pQ2lVang1c3dtQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvMzQwYzczLTc5ZWUtNDkyNi04ZTRmLTYwN2Q0ZjM3ZjU5Zi8x
L3NuTFR2ejF0bG9yNE14VFVnM0NURHZ3VXBNZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
MzQwYzczLTc5ZWUtNDkyNi04ZTRmLTYwN2Q0ZjM3ZjU5Zi8xL3hveGw1cG0xZHFz
Uk9ubS1pQ2lVang1c3dtQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALYzRAwQCLYzQMA0GCSqGSIb3
DQEBCwUAA4IBAQCyse0OldbcUDLB8JByZGZXTXmye87a0uJlA1/o1WVsgJFMNhXp
ko19SKl5SsN4+5bu6OQYDIdJMJbSSxmo80i1a/aN2+0KbhVxqOT32V9euZ59bKDh
Z/zBE3lPPice2vaeXNUReHyl84lnUTXhQBPV/ma7SlxQ/LXdVt3qIYOF3NGE6foQ
qDyl6C1ZLtJIdyxV5VtqVexcwTmB3RqsSZJg0qTl9prOM1W7dEsnaU4/I6ZeBl8O
bTgoACtMJ3sdaJuqwJO+0VBGoOJMYNk7ehnu9ci1wb7NkmTux30iwS+4X+u/N9D/
IE7ZzSZlHztAVnBNdwtQ2iqoS6DePb1CA3Ny
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-ams.rpki-client.org