Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/xvTfcrI8djlaFqpM7q3x1f_ojAo.roa
File: xvTfcrI8djlaFqpM7q3x1f_ojAo.roa (raw, json)
Hash identifier: pWsM5J9QtYjo35LqkmSLCZdk0b+yO6ESXH5jOwMePR0=
Subject key identifier: C6:F4:DF:72:B2:3C:76:39:5A:16:AA:4C:EE:AD:F1:D5:FF:E8:8C:0A
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 018485D9A70E9E1574C020FC84F0ACD2F0A2
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/xvTfcrI8djlaFqpM7q3x1f_ojAo.roa
Signing time: Thu 17 Nov 2022 13:49:04 +0000
ROA not before: Thu 17 Nov 2022 13:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35424
IP address blocks: 45.67.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:d9:a7:0e:9e:15:74:c0:20:fc:84:f0:ac:d2:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Nov 17 13:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6f4df72b23c76395a16aa4ceeadf1d5ffe88c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:ff:fc:19:9f:1d:a8:b5:82:68:0f:e7:a3:
47:cf:17:1d:83:94:7b:b7:87:9c:c5:0d:4a:62:97:
ec:6f:a1:90:88:ee:f7:0b:93:6b:35:a9:f9:a4:65:
d4:08:88:39:d1:41:62:8f:5c:86:b6:ae:c1:f6:07:
a7:85:16:ca:0d:42:5d:86:6b:5a:4a:38:a2:2f:16:
06:da:60:d1:cc:58:75:df:44:7b:2c:c4:ad:ef:26:
5a:3a:be:e6:c0:50:d2:83:bb:f0:09:23:06:80:19:
60:6f:58:65:ce:f3:46:c1:50:33:3e:f0:52:2c:05:
1c:77:fb:00:59:ae:74:16:9e:14:ee:07:91:6b:e1:
65:38:f0:7e:d3:2f:99:86:d9:8b:29:0a:90:d8:ff:
d4:f4:89:de:88:6a:c3:37:f5:1e:d6:44:4b:69:cb:
76:64:01:35:86:f1:11:f1:0d:0a:12:a8:b4:8a:4d:
76:7d:13:ee:9a:f0:15:bb:c9:fc:99:ad:f8:6f:1c:
08:16:df:4d:01:44:70:98:37:23:89:8f:e1:19:e9:
ee:59:24:db:8a:ff:ab:18:39:5e:b3:25:ae:46:b2:
94:d0:34:bb:ed:e5:f4:53:17:9f:e6:21:53:d0:2a:
ee:4f:d7:8e:01:71:34:ec:cb:0d:b6:4a:2f:47:4a:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F4:DF:72:B2:3C:76:39:5A:16:AA:4C:EE:AD:F1:D5:FF:E8:8C:0A
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/xvTfcrI8djlaFqpM7q3x1f_ojAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.164.0/22
Signature Algorithm: sha256WithRSAEncryption
78:12:04:bc:c7:6b:5d:44:eb:f8:88:d0:fe:c8:fb:30:eb:5c:
5d:37:4b:65:4c:4c:4b:b1:6f:26:64:5b:92:4f:5e:33:b3:f6:
b9:55:e5:04:fb:e8:4f:2f:2c:90:b8:8c:31:37:ab:b5:28:f2:
da:e6:48:60:fd:7d:7f:0d:a4:4f:8d:48:db:03:96:80:68:74:
3c:ae:70:5c:86:6d:33:a7:bc:d7:9a:72:fd:fb:f0:e6:ba:3d:
fe:b9:7d:c5:8c:cb:16:f5:47:66:c4:91:35:e5:87:3b:c3:c7:
a7:25:ea:dc:03:b9:02:4b:97:db:0b:98:ce:8e:ed:e1:78:99:
40:9a:6d:22:b7:6f:32:33:dd:d4:69:a8:e7:49:74:48:d5:13:
8c:78:85:80:0f:62:e3:0a:de:fd:e3:04:e4:c3:e9:bb:9f:97:
73:d4:7f:cc:3a:1f:71:05:a7:58:8b:27:1e:ea:0f:c1:eb:77:
66:1b:53:37:46:b8:ec:b9:58:18:c3:b5:d4:9d:75:ea:82:2b:
8b:8a:70:1d:6a:5d:13:a5:35:1a:c2:a9:6e:84:83:ee:36:a3:
a2:df:83:6e:1b:a1:4f:14:62:76:fa:0c:9d:da:42:f8:d5:c5:
3c:dc:0f:aa:2f:f8:90:2c:8a:38:32:04:45:33:57:f3:ee:03:
1c:29:48:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSF2acOnhV0wCD8hPCs0vCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWFjMzg4NzgxMjdjZWNkYzRjODNlYTY5ZWVlMWY0ZTEx
OGJjZmYwHhcNMjIxMTE3MTM0OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmY0ZGY3MmIyM2M3NjM5NWExNmFhNGNlZWFkZjFkNWZmZTg4YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ur//BmfHai1gmgP56NHzxcdg5R7
t4ecxQ1KYpfsb6GQiO73C5NrNan5pGXUCIg50UFij1yGtq7B9genhRbKDUJdhmta
SjiiLxYG2mDRzFh130R7LMSt7yZaOr7mwFDSg7vwCSMGgBlgb1hlzvNGwVAzPvBS
LAUcd/sAWa50Fp4U7geRa+FlOPB+0y+ZhtmLKQqQ2P/U9IneiGrDN/Ue1kRLact2
ZAE1hvER8Q0KEqi0ik12fRPumvAVu8n8ma34bxwIFt9NAURwmDcjiY/hGenuWSTb
iv+rGDlesyWuRrKU0DS77eX0Uxef5iFT0CruT9eOAXE07MsNtkovR0pBbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMb033KyPHY5WhaqTO6t8dX/6IwKMB8GA1UdIwQY
MBaAFEOaw4h4Enzs3EyD6mnu4fThGLz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUt
YmFlMWY3N2JhNzU4LzEveHZUZmNySThkamxhRnFwTTdxM3gxZl9vakFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUtYmFlMWY3N2JhNzU4
LzEvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUOkMA0G
CSqGSIb3DQEBCwUAA4IBAQB4EgS8x2tdROv4iND+yPsw61xdN0tlTExLsW8mZFuS
T14zs/a5VeUE++hPLyyQuIwxN6u1KPLa5khg/X1/DaRPjUjbA5aAaHQ8rnBchm0z
p7zXmnL9+/Dmuj3+uX3FjMsW9UdmxJE15Yc7w8enJercA7kCS5fbC5jOju3heJlA
mm0it28yM93UaajnSXRI1ROMeIWAD2LjCt794wTkw+m7n5dz1H/MOh9xBadYiyce
6g/B63dmG1M3RrjsuVgYw7XUnXXqgiuLinAdal0TpTUawqluhIPuNqOi34NuG6FP
FGJ2+gyd2kL41cU83A+qL/iQLIo4MgRFM1fz7gMcKUjT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:54 2024 by rpki-client on console-ams.rpki-client.org