Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0sGwvHnBkqH4bH582GmBcOnB3Jc.roa
File: 0sGwvHnBkqH4bH582GmBcOnB3Jc.roa (raw, json)
Hash identifier: sMY3Ov7ZqE1dzCLnGJj2yeYIflvuXmX+eC26lxYAEYw=
Subject key identifier: D2:C1:B0:BC:79:C1:92:A1:F8:6C:7E:7C:D8:69:81:70:E9:C1:DC:97
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01830E8361BBE71E764A8F7B7824547ABBDC
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0sGwvHnBkqH4bH582GmBcOnB3Jc.roa
Signing time: Mon 05 Sep 2022 16:37:14 +0000
ROA not before: Mon 05 Sep 2022 16:37:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.11.191.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:83:61:bb:e7:1e:76:4a:8f:7b:78:24:54:7a:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Sep 5 16:37:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c1b0bc79c192a1f86c7e7cd8698170e9c1dc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:22:1f:32:75:e0:88:00:ee:74:26:3c:ca:
d5:0d:7b:5e:12:25:b9:a8:60:28:ad:d4:84:70:2d:
39:58:c9:b7:bc:d5:37:3c:e7:cd:ce:ef:78:e0:7c:
68:10:51:62:03:9b:e9:1f:6b:72:29:cf:df:d3:70:
fa:0c:cb:d8:e1:b7:92:41:58:93:13:47:66:64:76:
e7:5a:41:9e:1a:5a:29:39:f1:a0:5c:5e:56:f9:49:
7a:8c:60:ca:36:34:22:a4:3e:27:1b:81:c7:be:7a:
de:ca:41:9a:40:45:5c:92:39:72:22:65:bf:e8:8a:
e7:02:f2:1c:cf:bf:82:1a:fb:5e:e9:e0:b5:6e:c3:
fe:16:9a:36:67:a0:6a:1e:d0:2d:de:9b:58:a9:23:
17:f8:2c:6e:af:5e:41:90:db:da:d0:53:7c:71:6d:
21:e6:ec:6b:6c:34:79:9a:0e:ab:f2:3f:bf:47:76:
f0:3b:f7:64:bb:9d:9b:fd:c4:32:80:42:66:e5:b3:
f0:6e:4e:39:36:43:fe:5d:5e:5d:06:83:52:0f:38:
88:70:23:9f:f2:ba:69:7f:a2:4f:98:b7:45:a5:c3:
63:41:2f:07:e4:75:ed:66:e5:02:b3:a9:21:64:c8:
85:be:ae:22:e8:7a:c8:6b:74:80:d3:f3:f9:ad:22:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:B0:BC:79:C1:92:A1:F8:6C:7E:7C:D8:69:81:70:E9:C1:DC:97
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0sGwvHnBkqH4bH582GmBcOnB3Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3e:39:00:f1:c6:73:47:7e:58:b6:dd:65:37:67:84:79:ee:
0f:29:55:f1:5a:30:d9:60:98:b3:4a:99:69:68:f3:b3:61:4c:
07:0a:fc:0c:55:77:12:dc:df:e9:de:01:18:08:96:8b:45:bb:
cf:7e:16:49:18:3b:0c:74:60:aa:3e:fd:70:40:f6:62:6d:46:
50:22:95:ab:66:6e:73:17:14:ef:b7:52:49:da:a8:80:c8:f7:
3e:04:94:2a:50:cd:cd:5e:f6:fb:b9:62:81:fc:9c:79:48:51:
58:ea:66:54:88:b8:62:77:b6:9c:d1:12:be:89:6a:58:6b:31:
5e:17:0b:f4:09:57:dd:ae:ef:88:22:e8:eb:d4:71:ad:b6:32:
be:30:7c:8a:46:64:21:52:84:20:be:53:72:56:6a:ba:f5:5b:
c7:17:cf:e5:2b:4b:ba:25:64:57:0c:82:37:4a:e0:09:7b:b7:
25:4c:ca:15:f6:aa:41:2a:c3:28:39:da:a0:a9:6b:43:ef:c4:
05:51:88:c2:d9:01:9a:71:f1:59:55:77:eb:80:9a:3b:1d:70:
7c:da:01:2b:1b:bd:7d:b3:cf:04:ad:51:eb:52:9e:65:c1:33:
a0:d0:0c:42:ac:98:da:d7:b8:35:04:b5:c4:2d:87:d5:cc:db:
38:e2:bf:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMOg2G75x52So97eCRUervcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjIwOTA1MTYzNzE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmMxYjBiYzc5YzE5MmExZjg2YzdlN2NkODY5ODE3MGU5YzFkYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhwiHzJ14IgA7nQmPMrVDXteEiW5
qGAordSEcC05WMm3vNU3POfNzu944HxoEFFiA5vpH2tyKc/f03D6DMvY4beSQViT
E0dmZHbnWkGeGlopOfGgXF5W+Ul6jGDKNjQipD4nG4HHvnreykGaQEVckjlyImW/
6IrnAvIcz7+CGvte6eC1bsP+Fpo2Z6BqHtAt3ptYqSMX+Cxur15BkNva0FN8cW0h
5uxrbDR5mg6r8j+/R3bwO/dku52b/cQygEJm5bPwbk45NkP+XV5dBoNSDziIcCOf
8rppf6JPmLdFpcNjQS8H5HXtZuUCs6khZMiFvq4i6HrIa3SA0/P5rSJ67wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLBsLx5wZKh+Gx+fNhpgXDpwdyXMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvMHNHd3ZIbkJrcUg0Ykg1ODJHbUJjT25CM0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQu/AwQA
LZqeMA0GCSqGSIb3DQEBCwUAA4IBAQAdPjkA8cZzR35Ytt1lN2eEee4PKVXxWjDZ
YJizSplpaPOzYUwHCvwMVXcS3N/p3gEYCJaLRbvPfhZJGDsMdGCqPv1wQPZibUZQ
IpWrZm5zFxTvt1JJ2qiAyPc+BJQqUM3NXvb7uWKB/Jx5SFFY6mZUiLhid7ac0RK+
iWpYazFeFwv0CVfdru+IIujr1HGttjK+MHyKRmQhUoQgvlNyVmq69VvHF8/lK0u6
JWRXDII3SuAJe7clTMoV9qpBKsMoOdqgqWtD78QFUYjC2QGacfFZVXfrgJo7HXB8
2gErG719s88ErVHrUp5lwTOg0AxCrJja17g1BLXELYfVzNs44r/6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org