Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9Q3rOK0lVYwnsESWLW9VztrqPNE.roa
File: 9Q3rOK0lVYwnsESWLW9VztrqPNE.roa (raw, json)
Hash identifier: utB2q2dOCl5L7OZVZ6icn0nUpgo7wEEE6N+9/vKhqCM=
Subject key identifier: F5:0D:EB:38:AD:25:55:8C:27:B0:44:96:2D:6F:55:CE:DA:EA:3C:D1
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018219DA74509B871A4F5183B6386E77E77C
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9Q3rOK0lVYwnsESWLW9VztrqPNE.roa
Signing time: Wed 20 Jul 2022 04:25:23 +0000
ROA not before: Wed 20 Jul 2022 04:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 45.153.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:19:da:74:50:9b:87:1a:4f:51:83:b6:38:6e:77:e7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jul 20 04:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f50deb38ad25558c27b044962d6f55cedaea3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:ea:f2:73:26:bc:87:74:f4:ce:26:8a:74:
3c:78:89:54:f7:4b:ca:00:7f:c4:c7:4d:b1:d2:c1:
4b:90:3f:9c:e5:46:5e:17:d5:d8:9b:c0:b8:51:48:
02:0d:09:ca:34:5c:dd:c4:30:0c:78:23:5d:87:80:
a6:b8:da:3a:1c:74:0e:4a:f1:87:56:78:ec:dd:d2:
41:76:c9:85:77:b7:53:4d:b8:ee:3f:b3:4d:f8:e7:
74:25:40:3e:70:1e:68:64:34:4c:e8:4a:f6:9f:b6:
ac:6d:bb:dd:dd:a0:df:a4:77:41:4a:ec:db:97:a4:
c8:04:6b:ec:79:8e:ba:a7:f6:dd:f6:a4:91:ae:f8:
d1:ed:60:fb:4c:3d:72:b3:a0:4c:c7:63:d3:dd:3b:
07:98:8a:5c:2c:ab:ed:04:24:f6:ed:fe:41:6f:71:
8f:54:e7:b7:3d:25:ee:24:6f:d6:2b:01:27:8d:2f:
f3:40:aa:09:ea:6f:0c:ee:b6:12:b9:b1:2a:3c:8e:
59:1d:e0:1e:c5:3d:0d:13:51:60:f7:3a:f1:fd:a4:
a0:23:02:47:00:56:29:16:8c:10:a6:43:62:37:96:
f1:58:b4:a1:57:3a:79:53:bd:53:d6:7d:b6:48:16:
53:75:4c:3c:6e:6e:07:a3:2f:ff:55:92:ed:1d:ad:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:EB:38:AD:25:55:8C:27:B0:44:96:2D:6F:55:CE:DA:EA:3C:D1
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9Q3rOK0lVYwnsESWLW9VztrqPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b0:13:80:2d:d1:36:b0:9a:b1:81:ac:b2:7b:bd:92:d6:0d:
e8:7c:b7:ec:12:91:22:ba:e2:95:7c:a7:35:30:67:95:01:56:
7c:08:80:d9:f4:91:41:f5:96:12:68:a5:ea:5e:de:b0:74:1c:
71:64:ba:86:62:8a:92:3c:e3:d3:be:af:fe:8c:77:e0:04:8f:
59:58:23:77:99:f5:f4:2f:8b:f3:28:84:dc:88:87:ec:27:8f:
52:e6:46:98:15:dd:97:74:65:9c:c0:e7:a9:84:79:88:0f:02:
77:78:6e:d3:4a:71:2c:b6:9b:28:86:68:15:65:65:66:e5:96:
95:52:ad:6e:34:38:0a:50:da:35:bf:e2:1f:1a:69:8f:d8:e2:
47:21:d2:cd:4b:1e:2b:2b:19:db:4c:8e:14:de:67:a9:35:29:
f4:5a:1e:93:95:eb:f7:69:18:79:8f:42:11:25:7d:f6:3c:58:
f2:42:16:2a:70:14:a0:95:df:30:da:c6:b7:20:73:b2:61:de:
b8:da:ba:5c:80:ce:fb:e7:e2:97:7b:85:c9:97:40:00:58:68:
3e:6c:df:b1:43:13:28:b2:18:0d:56:b9:f9:e3:2b:b6:5a:ed:
b7:d6:10:9c:6a:6c:f4:87:94:0d:70:70:f9:5b:bf:4b:85:81:
8c:a0:5f:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIZ2nRQm4caT1GDtjhud+d8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2I0ODc4NDhmZmY2MzUzM2Q4N2MzMjRlY2M1MWMyYzNl
YTJhZGIwHhcNMjIwNzIwMDQyNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTBkZWIzOGFkMjU1NThjMjdiMDQ0OTYyZDZmNTVjZWRhZWEzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdXq8nMmvId09M4minQ8eIlU90vK
AH/Ex02x0sFLkD+c5UZeF9XYm8C4UUgCDQnKNFzdxDAMeCNdh4CmuNo6HHQOSvGH
Vnjs3dJBdsmFd7dTTbjuP7NN+Od0JUA+cB5oZDRM6Er2n7asbbvd3aDfpHdBSuzb
l6TIBGvseY66p/bd9qSRrvjR7WD7TD1ys6BMx2PT3TsHmIpcLKvtBCT27f5Bb3GP
VOe3PSXuJG/WKwEnjS/zQKoJ6m8M7rYSubEqPI5ZHeAexT0NE1Fg9zrx/aSgIwJH
AFYpFowQpkNiN5bxWLShVzp5U71T1n22SBZTdUw8bm4Hoy//VZLtHa0L5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUN6zitJVWMJ7BEli1vVc7a6jzRMB8GA1UdIwQY
MBaAFDR7SHhI//Y1M9h8Mk7MUcLD6irbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2It
MjMwYjNiNzJhMTc1LzEvOVEzck9LMGxWWXduc0VTV0xXOVZ6dHJxUE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2ItMjMwYjNiNzJhMTc1
LzEvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZl9MA0G
CSqGSIb3DQEBCwUAA4IBAQA9sBOALdE2sJqxgayye72S1g3ofLfsEpEiuuKVfKc1
MGeVAVZ8CIDZ9JFB9ZYSaKXqXt6wdBxxZLqGYoqSPOPTvq/+jHfgBI9ZWCN3mfX0
L4vzKITciIfsJ49S5kaYFd2XdGWcwOephHmIDwJ3eG7TSnEstpsohmgVZWVm5ZaV
Uq1uNDgKUNo1v+IfGmmP2OJHIdLNSx4rKxnbTI4U3mepNSn0Wh6Tlev3aRh5j0IR
JX32PFjyQhYqcBSgld8w2sa3IHOyYd642rpcgM775+KXe4XJl0AAWGg+bN+xQxMo
shgNVrn54yu2Wu231hCcamz0h5QNcHD5W79LhYGMoF9r
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org