Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/jiA3l_g8wyX9N0AidVD3iXI2fzk.roa
File: jiA3l_g8wyX9N0AidVD3iXI2fzk.roa (raw, json)
Hash identifier: DTsuwXQhdI2vlnBbvgz/4myVCDkixC1YofBIOWdtW3A=
Subject key identifier: 8E:20:37:97:F8:3C:C3:25:FD:37:40:22:75:50:F7:89:72:36:7F:39
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 078A92BF
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/jiA3l_g8wyX9N0AidVD3iXI2fzk.roa
Signing time: Sat 01 Jan 2022 09:55:56 +0000
ROA not before: Sat 01 Jan 2022 09:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41290
IP address blocks: 45.147.40.0/24 maxlen: 24
45.147.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126522047 (0x78a92bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jan 1 09:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e203797f83cc325fd3740227550f78972367f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:31:28:d1:7a:b5:78:97:94:26:84:88:d2:
b2:f0:0c:e9:ac:aa:f1:15:91:f4:32:c3:2f:5c:ea:
f2:9d:67:fc:43:b1:7b:d9:7c:f0:f3:11:ee:01:f0:
72:21:39:e4:6e:67:66:09:74:a3:76:f4:55:88:25:
cd:aa:8d:0b:ef:be:04:bf:31:b0:3e:95:cf:13:85:
93:48:1c:75:08:1a:51:97:06:c8:85:6a:64:3c:b8:
85:53:c5:cf:57:1e:64:33:0e:15:96:3c:0a:ff:d2:
97:f0:26:44:bf:24:70:ef:18:41:93:38:aa:19:a5:
50:aa:51:44:5a:f6:39:33:ac:17:45:5d:33:bf:d8:
6c:5e:99:5c:03:ee:c2:09:7a:50:68:a9:af:25:11:
3b:e5:87:d2:d9:13:0b:f9:23:78:7b:55:30:13:b4:
ef:bb:71:27:6c:c7:bf:89:79:48:bf:71:5e:fc:d4:
a8:c6:b2:de:36:57:27:9b:ca:6f:0e:84:d3:37:bc:
c2:bd:ff:b8:15:06:0d:0b:56:2d:3f:5d:76:77:51:
b9:c7:5b:aa:d8:48:c0:fb:1d:0e:37:c1:50:2d:fc:
2b:18:d1:cc:ef:f1:a2:71:e6:dd:0d:6f:df:39:9e:
a9:39:22:4c:7f:0d:66:f7:5a:a1:3e:ec:fd:c4:26:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:37:97:F8:3C:C3:25:FD:37:40:22:75:50:F7:89:72:36:7F:39
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/jiA3l_g8wyX9N0AidVD3iXI2fzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:fd:47:29:5f:75:38:3d:81:e5:61:74:9f:77:1c:86:1c:55:
c4:2c:ec:6a:a9:47:d6:4e:96:96:8d:6f:95:67:84:71:0b:50:
a1:a1:10:ba:a8:d8:b8:68:5f:b3:98:03:c0:c3:2a:42:d8:4b:
54:75:81:de:1e:18:9a:51:b8:4b:f0:50:20:18:42:07:ad:f1:
bf:a5:68:b1:bd:72:13:5c:45:e9:2c:d3:cf:26:2f:ce:bd:97:
b0:b5:95:2c:62:a2:5a:f5:39:7e:77:c3:30:ca:19:54:05:a0:
51:10:76:f0:ef:33:8c:74:b0:5e:55:e5:87:ec:57:3e:89:a7:
83:0c:3d:74:93:12:c1:15:e5:f3:8a:43:ac:30:d9:78:11:7b:
5e:c6:9c:98:ee:22:26:01:ce:50:74:59:d5:01:92:d8:27:83:
ce:43:63:ac:70:12:63:35:32:33:35:ee:f5:1b:a3:d0:8e:eb:
ff:b0:a2:ec:72:ba:6c:a8:41:2a:48:16:cf:6e:9c:71:ca:bc:
cf:99:4a:7c:85:d1:d9:6b:22:84:ad:5e:74:51:dc:36:4b:14:
9a:49:09:a4:9d:d3:0f:46:cd:ef:4c:c7:c3:0e:fb:1b:bc:0d:
6f:12:f1:d1:f4:16:74:cb:ab:7c:8d:d0:24:1c:0e:5c:94:26:
44:f0:3c:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB4qSvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OGI1OWRhZWRkNDNjYzk1NzVhYzM1OTUzZTNmMzk2ZTIxYmI2ZDgwMB4XDTIyMDEw
MTA5NTU1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGUyMDM3OTdmODNj
YzMyNWZkMzc0MDIyNzU1MGY3ODk3MjM2N2YzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM/oMSjRerV4l5QmhIjSsvAM6ayq8RWR9DLDL1zq8p1n/EOx
e9l88PMR7gHwciE55G5nZgl0o3b0VYglzaqNC+++BL8xsD6VzxOFk0gcdQgaUZcG
yIVqZDy4hVPFz1ceZDMOFZY8Cv/Sl/AmRL8kcO8YQZM4qhmlUKpRRFr2OTOsF0Vd
M7/YbF6ZXAPuwgl6UGipryURO+WH0tkTC/kjeHtVMBO077txJ2zHv4l5SL9xXvzU
qMay3jZXJ5vKbw6E0ze8wr3/uBUGDQtWLT9ddndRucdbqthIwPsdDjfBUC38KxjR
zO/xonHm3Q1v3zmeqTkiTH8NZvdaoT7s/cQmd8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOIDeX+DzDJf03QCJ1UPeJcjZ/OTAfBgNVHSMEGDAWgBQ4tZ2u3UPMlXWs
NZU+PzluIbttgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09MV2RydDFEekpWMXJEV1ZQajg1YmlHN2JZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNDMzMTI3LWUyY2YtNDFhMS05OTEzLTdhMGY3MmNiYjJkNS8x
L2ppQTNsX2c4d3lYOU4wQWlkVkQzaVhJMmZ6ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NDMzMTI3LWUyY2YtNDFhMS05OTEzLTdhMGY3MmNiYjJkNS8xL09MV2RydDFEekpW
MXJEV1ZQajg1YmlHN2JZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2TKDANBgkqhkiG9w0BAQsFAAOC
AQEAb/1HKV91OD2B5WF0n3cchhxVxCzsaqlH1k6Wlo1vlWeEcQtQoaEQuqjYuGhf
s5gDwMMqQthLVHWB3h4YmlG4S/BQIBhCB63xv6Vosb1yE1xF6SzTzyYvzr2XsLWV
LGKiWvU5fnfDMMoZVAWgURB28O8zjHSwXlXlh+xXPomngww9dJMSwRXl84pDrDDZ
eBF7XsacmO4iJgHOUHRZ1QGS2CeDzkNjrHASYzUyMzXu9Ruj0I7r/7Ci7HK6bKhB
KkgWz26cccq8z5lKfIXR2WsihK1edFHcNksUmkkJpJ3TD0bN70zHww77G7wNbxLx
0fQWdMurfI3QJBwOXJQmRPA8Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:24 2024 by rpki-client on console-ams.rpki-client.org