Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa
File: jEfPgEO9SuKkWYADdglpSSQsti8.roa (raw, json)
Hash identifier: PdGTBfKUy8V8mHvnZp70VzyF7r1YYRrhEGjikzBVAbM=
Subject key identifier: 8C:47:CF:80:43:BD:4A:E2:A4:59:80:03:76:09:69:49:24:2C:B6:2F
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0183A3101D3F35B4EB7A436AD9C78B2EB178
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa
Signing time: Tue 04 Oct 2022 12:54:45 +0000
ROA not before: Tue 04 Oct 2022 12:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.84.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:10:1d:3f:35:b4:eb:7a:43:6a:d9:c7:8b:2e:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Oct 4 12:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c47cf8043bd4ae2a459800376096949242cb62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:5f:31:c7:20:84:6b:97:af:d1:19:f7:be:
96:4d:ef:a5:9d:a3:f7:63:f8:c4:c9:e7:0f:56:06:
7b:ef:97:90:b1:5d:67:6b:3e:e9:d9:65:a9:38:11:
a1:70:00:a9:b2:d9:27:ae:12:89:d4:be:b8:98:2b:
93:bc:bc:be:56:46:5a:50:21:52:e6:fd:ae:f4:e3:
ad:4d:37:b5:a8:83:1c:cf:1a:d4:71:b0:79:1c:4f:
5d:ca:f8:ae:60:cb:71:71:0a:a0:4b:94:ed:68:73:
7b:e4:74:f3:69:cb:60:67:0d:46:5b:37:0f:f6:d9:
a2:be:c4:76:15:03:8a:8f:4e:dc:22:c4:1f:db:b5:
fe:ea:1c:b1:34:67:e4:58:de:61:dc:9b:df:73:e4:
64:aa:6b:b6:6a:39:d0:05:a4:10:d1:e8:f5:f7:8e:
23:72:59:a7:a3:8a:f4:aa:86:82:79:92:d4:f7:4d:
0d:eb:76:a3:5f:d9:c3:69:e3:ce:ea:46:ef:89:65:
01:c9:0a:21:70:a2:1a:e3:3e:2e:fb:aa:87:ee:6b:
4c:75:22:99:05:e7:33:63:1c:d1:47:23:56:25:8a:
b6:2d:89:47:24:32:75:db:15:62:5c:38:9a:8f:c2:
c9:bf:ff:76:ca:dc:c7:fe:cd:2b:5a:be:66:c4:ac:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:CF:80:43:BD:4A:E2:A4:59:80:03:76:09:69:49:24:2C:B6:2F
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jEfPgEO9SuKkWYADdglpSSQsti8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.241.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9c:56:10:00:18:d8:cb:1a:64:de:ff:2e:3b:ce:fa:9d:11:
d0:85:f0:7d:44:36:27:37:a8:c1:77:69:41:00:e7:9e:46:c9:
7e:e9:03:6a:f2:c0:d3:56:24:6e:5c:0e:75:06:c7:21:78:1b:
74:58:15:6c:93:0b:9f:a7:ea:22:cf:e2:31:8e:79:62:ff:64:
29:ec:de:30:bc:e0:48:82:d2:06:f0:8a:e2:d9:46:2b:66:3f:
52:b6:07:7f:ad:c5:55:40:27:4d:1f:77:ec:12:22:13:a8:b2:
0e:35:b7:d7:55:b5:bb:5c:85:e9:b7:e1:70:dd:8e:79:dc:9f:
6f:ba:17:18:41:f2:62:54:9e:39:2b:9f:3a:4a:22:16:25:a3:
94:b9:45:62:ba:85:c7:69:ee:b0:d6:8f:ba:5c:c2:63:03:fc:
76:95:25:b7:36:94:e8:14:90:31:9c:21:57:12:99:57:65:78:
8f:95:92:ef:47:ac:b3:e2:85:97:66:c4:77:4f:e5:e8:1b:89:
3a:78:e0:e0:9a:b7:ea:c8:be:ee:b8:1f:0c:57:7a:8d:bf:98:
94:b2:73:63:0d:70:c5:a7:2e:88:91:e5:55:07:c2:60:e2:fa:
ae:4f:d1:f5:31:c0:6c:15:21:b2:94:0d:58:2e:c0:8a:9e:d4:
c4:19:02:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOjEB0/NbTrekNq2ceLLrF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjIxMDA0MTI1NDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQ3Y2Y4MDQzYmQ0YWUyYTQ1OTgwMDM3NjA5Njk0OTI0MmNiNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX5fMccghGuXr9EZ976WTe+lnaP3
Y/jEyecPVgZ775eQsV1naz7p2WWpOBGhcACpstknrhKJ1L64mCuTvLy+VkZaUCFS
5v2u9OOtTTe1qIMczxrUcbB5HE9dyviuYMtxcQqgS5TtaHN75HTzactgZw1GWzcP
9tmivsR2FQOKj07cIsQf27X+6hyxNGfkWN5h3Jvfc+Rkqmu2ajnQBaQQ0ej1944j
clmno4r0qoaCeZLU900N63ajX9nDaePO6kbviWUByQohcKIa4z4u+6qH7mtMdSKZ
BeczYxzRRyNWJYq2LYlHJDJ12xViXDiaj8LJv/92ytzH/s0rWr5mxKxDDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxHz4BDvUripFmAA3YJaUkkLLYvMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvakVmUGdFTzlTdUtrV1lBRGRnbHBTU1FzdGk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTxMA0G
CSqGSIb3DQEBCwUAA4IBAQADnFYQABjYyxpk3v8uO876nRHQhfB9RDYnN6jBd2lB
AOeeRsl+6QNq8sDTViRuXA51BscheBt0WBVskwufp+oiz+Ixjnli/2Qp7N4wvOBI
gtIG8Iri2UYrZj9Stgd/rcVVQCdNH3fsEiITqLIONbfXVbW7XIXpt+Fw3Y553J9v
uhcYQfJiVJ45K586SiIWJaOUuUViuoXHae6w1o+6XMJjA/x2lSW3NpToFJAxnCFX
EplXZXiPlZLvR6yz4oWXZsR3T+XoG4k6eODgmrfqyL7uuB8MV3qNv5iUsnNjDXDF
py6IkeVVB8Jg4vquT9H1McBsFSGylA1YLsCKntTEGQLn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org