Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/SPa14a3oSxeYQUNuVOrAUXXWOWY.roa
File: SPa14a3oSxeYQUNuVOrAUXXWOWY.roa (raw, json)
Hash identifier: rZ0jo0RsMwMUiF/5uXor5X4SUGDVaxwoYcuyIUv9FOc=
Subject key identifier: 48:F6:B5:E1:AD:E8:4B:17:98:41:43:6E:54:EA:C0:51:75:D6:39:66
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 031D49B3
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/SPa14a3oSxeYQUNuVOrAUXXWOWY.roa
Signing time: Sat 01 Jan 2022 13:59:22 +0000
ROA not before: Sat 01 Jan 2022 13:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211880
IP address blocks: 45.153.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52251059 (0x31d49b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48f6b5e1ade84b179841436e54eac05175d63966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:aa:28:5b:2e:58:ba:17:b4:a9:f4:35:0e:
e0:47:db:fa:19:7e:8b:fc:8c:11:dc:c3:55:08:2b:
09:58:87:e3:56:99:2c:47:5b:e7:fd:7d:bb:7d:5a:
54:64:a3:27:6b:12:5a:40:74:6f:7e:a2:34:93:24:
8d:7d:9a:bc:5f:7c:f8:d8:c7:b9:bb:5b:ef:5b:ee:
75:9a:e0:53:ac:28:89:42:53:e1:1f:07:ba:f0:47:
e5:35:ee:4a:9e:af:2a:a0:6b:a8:c9:52:99:1c:03:
73:92:c9:e6:b7:5b:95:a2:4a:56:1f:36:18:2d:90:
5c:ce:b7:5d:ec:f7:96:cc:8e:74:bf:4a:f2:0d:ff:
17:b0:bc:cc:00:37:4a:5f:36:cf:5a:b1:d5:2f:e5:
7e:78:44:43:b8:ef:73:a6:7f:48:94:51:1f:44:fe:
df:e9:9e:c7:f1:48:c1:9a:e6:6c:33:b0:63:fb:2c:
11:22:3c:ef:2f:1c:5b:61:8d:61:bb:bb:39:49:f1:
75:80:d9:f6:a1:4f:11:88:cc:db:c9:97:3f:4f:c6:
d7:f8:15:23:d5:d7:58:89:9c:06:d2:90:c1:43:b6:
77:9e:11:55:01:46:3e:b0:17:af:3b:49:8d:73:14:
89:a9:5f:b3:fd:94:c9:66:f2:6a:50:f4:c6:bd:f6:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F6:B5:E1:AD:E8:4B:17:98:41:43:6E:54:EA:C0:51:75:D6:39:66
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/SPa14a3oSxeYQUNuVOrAUXXWOWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:4a:80:db:40:e6:82:22:b5:e2:20:b8:00:96:e7:42:ae:a2:
7b:04:fe:af:89:b8:9c:10:6c:7e:23:32:4f:2b:2e:09:24:52:
bb:c0:87:16:48:ae:73:35:d1:f5:85:02:ee:48:6b:b2:2b:d4:
a8:6f:fe:67:73:74:dd:9f:28:59:61:4a:a0:5a:0e:02:d5:8d:
0f:e9:1a:4d:30:0c:cc:01:00:6d:01:17:1d:1b:fe:27:23:3a:
bb:61:4b:74:2c:f4:0d:10:b0:29:fd:59:d2:5b:21:fc:2e:5c:
3f:94:a7:fd:69:19:ad:81:c2:b2:da:8c:8a:09:fa:75:b1:1d:
0c:de:92:43:f6:ac:16:d1:26:f8:ee:49:22:3a:60:cd:b0:fe:
10:20:78:33:db:8b:c5:72:f9:6f:30:84:f4:f3:39:9a:c6:31:
65:fc:12:6e:f4:0e:fe:22:c2:0f:55:c6:c7:07:7f:d9:7e:2c:
32:e5:eb:a8:82:c1:d4:b1:a0:1f:db:5c:4b:e4:ae:0b:ff:59:
75:1a:a2:e5:4a:9e:f5:95:85:34:55:a7:9f:70:8a:bb:03:2c:
37:51:46:ff:c4:9c:f8:a0:c5:b2:b3:79:77:74:81:b7:1f:b7:
5f:55:ca:e7:29:94:e1:45:b3:e7:ad:c5:60:d2:40:99:20:cd:
57:80:2f:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAx1JszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDdiNDg3ODQ4ZmZmNjM1MzNkODdjMzI0ZWNjNTFjMmMzZWEyYWRiMB4XDTIyMDEw
MTEzNTkyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhmNmI1ZTFhZGU4
NGIxNzk4NDE0MzZlNTRlYWMwNTE3NWQ2Mzk2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANeWqihbLli6F7Sp9DUO4Efb+hl+i/yMEdzDVQgrCViH41aZ
LEdb5/19u31aVGSjJ2sSWkB0b36iNJMkjX2avF98+NjHubtb71vudZrgU6woiUJT
4R8HuvBH5TXuSp6vKqBrqMlSmRwDc5LJ5rdblaJKVh82GC2QXM63Xez3lsyOdL9K
8g3/F7C8zAA3Sl82z1qx1S/lfnhEQ7jvc6Z/SJRRH0T+3+mex/FIwZrmbDOwY/ss
ESI87y8cW2GNYbu7OUnxdYDZ9qFPEYjM28mXP0/G1/gVI9XXWImcBtKQwUO2d54R
VQFGPrAXrztJjXMUialfs/2UyWbyalD0xr325hcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRI9rXhrehLF5hBQ25U6sBRddY5ZjAfBgNVHSMEGDAWgBQ0e0h4SP/2NTPY
fDJOzFHCw+oq2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05IdEllRWpfOWpVejJId3lUc3hSd3NQcUt0cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvYmM3MTIyLTRkMWItNDZhNy1hZWNiLTIzMGIzYjcyYTE3NS8x
L1NQYTE0YTNvU3hlWVFVTnVWT3JBVVhYV09XWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
YmM3MTIyLTRkMWItNDZhNy1hZWNiLTIzMGIzYjcyYTE3NS8xL05IdEllRWpfOWpV
ejJId3lUc3hSd3NQcUt0cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2ZfDANBgkqhkiG9w0BAQsFAAOC
AQEAtUqA20DmgiK14iC4AJbnQq6iewT+r4m4nBBsfiMyTysuCSRSu8CHFkiuczXR
9YUC7khrsivUqG/+Z3N03Z8oWWFKoFoOAtWND+kaTTAMzAEAbQEXHRv+JyM6u2FL
dCz0DRCwKf1Z0lsh/C5cP5Sn/WkZrYHCstqMign6dbEdDN6SQ/asFtEm+O5JIjpg
zbD+ECB4M9uLxXL5bzCE9PM5msYxZfwSbvQO/iLCD1XGxwd/2X4sMuXrqILB1LGg
H9tcS+SuC/9ZdRqi5Uqe9ZWFNFWnn3CKuwMsN1FG/8Sc+KDFsrN5d3SBtx+3X1XK
5ymU4UWz563FYNJAmSDNV4AvKw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org