Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/GFwmpK4cOuBoN50QlLVoxSAIXQU.roa
File: GFwmpK4cOuBoN50QlLVoxSAIXQU.roa (raw, json)
Hash identifier: fbh6YYKI2XoSpPVh4r1IgucohHuxPFP1pOpgC5LJG+c=
Subject key identifier: 18:5C:26:A4:AE:1C:3A:E0:68:37:9D:10:94:B5:68:C5:20:08:5D:05
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 018287303D500C6975549741403DEE6C5CFE
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/GFwmpK4cOuBoN50QlLVoxSAIXQU.roa
Signing time: Wed 10 Aug 2022 09:57:41 +0000
ROA not before: Wed 10 Aug 2022 09:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41290
IP address blocks: 45.147.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:30:3d:50:0c:69:75:54:97:41:40:3d:ee:6c:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Aug 10 09:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=185c26a4ae1c3ae068379d1094b568c520085d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:9e:9e:9e:4c:56:96:c1:36:04:61:78:82:
e6:a0:61:d7:b4:01:e5:e0:dc:3a:bf:e2:76:76:80:
3e:b9:3d:42:51:63:f9:12:cc:23:ab:a5:f0:21:15:
b5:77:5b:b6:83:55:d3:fc:c1:1c:e0:e0:38:d9:ed:
88:94:2e:b2:41:a0:05:ca:c6:e2:7c:59:8d:b1:ca:
d4:0d:b8:27:a4:98:68:cf:62:df:f9:93:a2:1f:7e:
6c:11:af:8b:94:6d:b5:71:1e:21:92:fd:65:e6:25:
b8:21:f2:9c:70:5e:72:5d:4c:62:6e:4a:89:18:12:
e1:4d:db:7f:ab:5e:b8:0f:02:f1:26:e8:68:ad:b2:
96:ef:38:0f:0d:d2:7c:df:62:2d:df:e8:99:97:c9:
2d:40:c7:2e:92:23:44:e8:5c:63:44:d3:65:bb:c9:
48:0d:3b:93:ac:2c:5c:f2:93:37:56:71:23:c6:1e:
0f:5d:88:9c:54:db:28:25:f2:28:72:56:47:07:20:
f4:77:b1:42:18:4b:3c:07:94:85:05:dd:7d:d4:83:
c9:e7:0f:fb:19:d5:67:c8:37:05:03:91:48:42:01:
1c:d0:67:38:4a:61:73:98:0a:71:4d:be:2d:d2:d7:
23:4b:1a:6d:ba:14:09:ef:72:7d:92:0a:19:bc:79:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:26:A4:AE:1C:3A:E0:68:37:9D:10:94:B5:68:C5:20:08:5D:05
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/GFwmpK4cOuBoN50QlLVoxSAIXQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fa:61:9c:37:df:da:29:01:b1:c8:bf:03:1d:68:64:33:05:
58:5f:1e:f5:84:d6:b0:78:b9:1b:6c:96:00:eb:2b:64:5b:ab:
b7:32:f9:47:32:44:2c:96:77:df:ef:93:ff:09:f0:0f:1e:17:
72:0d:0c:bd:61:84:64:b3:09:5e:26:5f:f9:21:ed:40:4c:2a:
4f:35:90:a1:79:63:85:5a:04:9d:d9:1c:39:a4:7d:74:d0:46:
82:b4:87:03:ec:9d:8b:fa:1f:45:f1:84:b7:6a:be:67:06:d5:
52:c0:59:e8:66:7c:f1:18:a8:a2:b4:3e:ca:f5:a3:95:37:2b:
a6:c9:48:97:23:ad:09:7b:16:06:dc:1b:74:5b:27:24:4e:32:
0a:be:a2:45:27:6b:eb:50:24:bf:01:49:12:3f:d8:6a:f1:0f:
82:98:65:d5:02:96:90:4c:ab:fe:e1:36:c6:31:ce:7a:56:73:
6b:94:90:b4:87:58:2c:e6:c3:27:b1:f8:a0:58:35:6e:29:ee:
2c:b4:c7:1c:0d:27:d6:3b:82:c5:36:18:e1:c5:59:f3:ba:a7:
33:fb:bd:29:33:94:f3:0b:d1:18:d2:a4:2a:72:24:03:08:5d:
73:9d:0b:5e:44:df:a8:ba:6a:60:7e:4b:b5:f9:b0:24:cd:5c:
2f:eb:59:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKHMD1QDGl1VJdBQD3ubFz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjIwODEwMDk1NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODVjMjZhNGFlMWMzYWUwNjgzNzlkMTA5NGI1NjhjNTIwMDg1ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5menp5MVpbBNgRheILmoGHXtAHl
4Nw6v+J2doA+uT1CUWP5Eswjq6XwIRW1d1u2g1XT/MEc4OA42e2IlC6yQaAFysbi
fFmNscrUDbgnpJhoz2Lf+ZOiH35sEa+LlG21cR4hkv1l5iW4IfKccF5yXUxibkqJ
GBLhTdt/q164DwLxJuhorbKW7zgPDdJ832It3+iZl8ktQMcukiNE6FxjRNNlu8lI
DTuTrCxc8pM3VnEjxh4PXYicVNsoJfIoclZHByD0d7FCGEs8B5SFBd191IPJ5w/7
GdVnyDcFA5FIQgEc0Gc4SmFzmApxTb4t0tcjSxptuhQJ73J9kgoZvHmFWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhcJqSuHDrgaDedEJS1aMUgCF0FMB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvR0Z3bXBLNGNPdUJvTjUwUWxMVm94U0FJWFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMoMA0G
CSqGSIb3DQEBCwUAA4IBAQBv+mGcN9/aKQGxyL8DHWhkMwVYXx71hNaweLkbbJYA
6ytkW6u3MvlHMkQslnff75P/CfAPHhdyDQy9YYRkswleJl/5Ie1ATCpPNZCheWOF
WgSd2Rw5pH100EaCtIcD7J2L+h9F8YS3ar5nBtVSwFnoZnzxGKiitD7K9aOVNyum
yUiXI60JexYG3Bt0WyckTjIKvqJFJ2vrUCS/AUkSP9hq8Q+CmGXVApaQTKv+4TbG
Mc56VnNrlJC0h1gs5sMnsfigWDVuKe4stMccDSfWO4LFNhjhxVnzuqcz+70pM5Tz
C9EY0qQqciQDCF1znQteRN+oumpgfku1+bAkzVwv61mH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:23 2024 by rpki-client on console-ams.rpki-client.org