Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Wxgj93bzqI3lxBwLur43jCFoWSU.roa
File: Wxgj93bzqI3lxBwLur43jCFoWSU.roa (raw, json)
Hash identifier: HwBbGBWIbnHcA+k9X2LROl3ST1ZNk/yOS5IBzrL33p8=
Subject key identifier: 5B:18:23:F7:76:F3:A8:8D:E5:C4:1C:0B:BA:BE:37:8C:21:68:59:25
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 02472873
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Wxgj93bzqI3lxBwLur43jCFoWSU.roa
Signing time: Sun 08 May 2022 16:24:48 +0000
ROA not before: Sun 08 May 2022 16:24:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.81.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38217843 (0x2472873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: May 8 16:24:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b1823f776f3a88de5c41c0bbabe378c21685925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:63:c5:d2:f1:d7:e3:58:5a:47:67:a7:0b:
0d:e0:03:62:b2:61:2b:f4:cb:60:a2:ec:71:17:ec:
91:c7:39:9c:4d:f5:8c:45:d3:a8:3a:11:d7:16:a7:
f2:68:11:98:8a:30:95:77:cc:2a:b2:df:49:3f:3d:
08:3d:75:e6:14:a8:14:d8:24:f9:1d:f5:e1:6d:39:
31:57:e9:2b:f9:b5:a0:cd:0d:bc:bf:1f:ba:b4:95:
a6:69:f6:65:7c:22:8b:66:d5:fa:67:70:02:5a:7f:
d2:02:eb:c7:1c:ff:df:ef:a8:3d:22:e1:79:b0:61:
95:d6:5d:6c:e3:ec:2f:70:f0:13:50:e2:44:8f:cd:
d3:1a:df:68:9a:89:79:85:59:a5:1a:45:f5:46:b9:
f0:6f:3d:6e:8b:a9:bf:4d:f5:e2:9a:9c:4b:8e:54:
84:ca:9e:ba:22:d3:39:59:72:95:44:25:44:45:39:
11:02:f8:e9:d2:45:dd:4b:86:f8:2c:d8:2f:49:86:
2e:b1:70:7e:ea:d1:9c:ca:b8:b0:25:12:50:7f:a3:
a1:bd:7f:5b:ce:c5:95:87:63:2f:20:db:89:33:02:
45:2a:aa:bc:fc:03:72:96:43:bb:c8:f5:c6:da:00:
2e:d1:74:ff:9a:e2:83:34:bf:76:6c:1f:80:fc:94:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:23:F7:76:F3:A8:8D:E5:C4:1C:0B:BA:BE:37:8C:21:68:59:25
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Wxgj93bzqI3lxBwLur43jCFoWSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
01:62:c3:d7:bd:6e:9f:ea:55:08:d7:32:f1:dd:7e:0d:06:d7:
be:6b:d7:d4:a5:05:9f:9b:b8:04:d9:43:07:0a:df:a6:54:5e:
03:09:32:bf:12:fc:73:bc:6b:5f:78:59:5e:f7:7f:b0:9c:1c:
51:5b:5c:5f:fe:da:af:ec:6e:80:f7:7f:41:f8:33:31:a4:4d:
31:85:95:2b:98:14:1e:38:b3:67:ef:f5:5c:7e:5b:db:c4:65:
20:9a:7f:aa:d5:51:06:7c:7b:32:d3:c5:9f:66:e4:6e:1a:73:
9c:57:47:99:b3:16:6d:e6:63:ce:f8:75:e2:a0:41:01:db:e0:
8c:a4:84:c0:af:a5:90:3e:9c:52:8d:55:a1:ae:10:2a:30:d4:
42:f9:5d:a5:70:ef:dd:c8:6c:2e:d6:4a:e8:64:77:31:62:43:
7c:cc:ae:6d:8f:de:a3:5e:f7:61:45:f0:47:b8:25:fd:ab:fc:
ef:f8:e5:e8:01:6c:f0:03:7d:5d:98:39:af:e8:51:e0:1a:08:
fd:ed:ce:73:31:c2:00:23:48:dc:54:36:49:be:c8:a2:6f:12:
76:68:ff:98:ac:86:dd:82:86:3d:99:88:5e:12:a6:5e:55:69:
1a:34:28:70:56:95:4b:d4:3d:93:36:05:7d:63:97:e2:46:d7:
61:ff:46:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAkcoczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2IyNWNlNTUwZTRkOWJkYTA1YmQ1ZDQ1YzhiNmJhMzc0MzBiYmJhMB4XDTIyMDUw
ODE2MjQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWIxODIzZjc3NmYz
YTg4ZGU1YzQxYzBiYmFiZTM3OGMyMTY4NTkyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJeaY8XS8dfjWFpHZ6cLDeADYrJhK/TLYKLscRfskcc5nE31
jEXTqDoR1xan8mgRmIowlXfMKrLfST89CD115hSoFNgk+R314W05MVfpK/m1oM0N
vL8furSVpmn2ZXwii2bV+mdwAlp/0gLrxxz/3++oPSLhebBhldZdbOPsL3DwE1Di
RI/N0xrfaJqJeYVZpRpF9Ua58G89boupv0314pqcS45UhMqeuiLTOVlylUQlREU5
EQL46dJF3UuG+CzYL0mGLrFwfurRnMq4sCUSUH+job1/W87FlYdjLyDbiTMCRSqq
vPwDcpZDu8j1xtoALtF0/5rigzS/dmwfgPyUMjECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRbGCP3dvOojeXEHAu6vjeMIWhZJTAfBgNVHSMEGDAWgBScslzlUOTZvaBb
1dRci2ujdDC7ujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25MSmM1VkRrMmIyZ1c5WFVYSXRybzNRd3U3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWEvNGYzMzZiLTRhNzktNDQyNS05NTU2LWJlNDVmMGQyYWJiYi8x
L1d4Z2o5M2J6cUkzbHhCd0x1cjQzakNGb1dTVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEv
NGYzMzZiLTRhNzktNDQyNS05NTU2LWJlNDVmMGQyYWJiYi8xL25MSmM1VkRrMmIy
Z1c5WFVYSXRybzNRd3U3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1RoDANBgkqhkiG9w0BAQsFAAOC
AQEAAWLD171un+pVCNcy8d1+DQbXvmvX1KUFn5u4BNlDBwrfplReAwkyvxL8c7xr
X3hZXvd/sJwcUVtcX/7ar+xugPd/QfgzMaRNMYWVK5gUHjizZ+/1XH5b28RlIJp/
qtVRBnx7MtPFn2bkbhpznFdHmbMWbeZjzvh14qBBAdvgjKSEwK+lkD6cUo1Voa4Q
KjDUQvldpXDv3chsLtZK6GR3MWJDfMyubY/eo173YUXwR7gl/av87/jl6AFs8AN9
XZg5r+hR4BoI/e3OczHCACNI3FQ2Sb7Iom8Sdmj/mKyG3YKGPZmIXhKmXlVpGjQo
cFaVS9Q9kzYFfWOX4kbXYf9GaA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org