Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BvUjIJH9ZOhXkLhXJCko5kRgng4.roa
File: BvUjIJH9ZOhXkLhXJCko5kRgng4.roa (raw, json)
Hash identifier: X6It7dPGp375KhiiAeTxmZ/YCf1+nYAllI6QFkYqiKw=
Subject key identifier: 06:F5:23:20:91:FD:64:E8:57:90:B8:57:24:29:28:E6:44:60:9E:0E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 070559D3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BvUjIJH9ZOhXkLhXJCko5kRgng4.roa
Signing time: Tue 01 Mar 2022 18:50:25 +0000
ROA not before: Tue 01 Mar 2022 18:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.154.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117791187 (0x70559d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 1 18:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06f5232091fd64e85790b857242928e644609e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:56:21:ff:be:a9:9f:53:97:bd:da:03:23:
cf:bb:b5:4b:57:e6:37:38:73:0c:8a:a8:e5:b9:6a:
e2:dd:50:bc:df:f7:d6:8f:17:3a:6c:d4:76:a6:ef:
8f:66:c3:21:9b:62:7a:32:f2:ab:97:51:1a:c8:a9:
f4:53:6f:fd:65:b8:47:28:32:20:00:62:0e:0d:a5:
7f:dc:bc:8b:6d:d7:c1:6f:c1:91:1e:3e:25:2b:c0:
0c:43:4d:e4:34:cc:56:6f:7d:a2:ca:0e:f4:e8:3b:
ed:2b:92:e2:82:36:93:08:ca:5b:e7:2a:6f:65:2b:
0e:28:93:b9:6f:26:3a:6b:27:13:90:a2:ef:20:84:
9f:d3:d0:66:b5:bc:de:14:21:af:38:61:b0:7a:51:
a9:e7:dd:59:b1:91:0e:e3:cc:5d:85:9c:ef:cc:e7:
ee:db:c2:3e:2b:bb:2e:89:77:7e:e2:c7:83:12:12:
d0:a3:ce:bb:97:2a:47:66:fe:16:e2:be:06:c6:2f:
9b:90:f7:b3:94:fe:61:f8:a8:d7:f6:b5:85:b1:fa:
00:e2:fe:52:03:6d:da:62:b9:cf:f3:bd:2d:2b:7f:
31:c9:c8:2b:5b:d5:f7:ef:d0:51:5d:1b:16:8f:7e:
ca:e4:6f:0a:24:77:2f:a7:ea:2a:89:18:d6:32:5e:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:23:20:91:FD:64:E8:57:90:B8:57:24:29:28:E6:44:60:9E:0E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BvUjIJH9ZOhXkLhXJCko5kRgng4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ad:1f:e0:4f:42:b9:e8:a0:29:d9:b3:6c:35:d8:78:82:ab:
9b:8e:de:4a:db:8b:c6:14:42:e8:e9:52:96:73:26:13:26:dc:
b5:8e:11:b4:cc:60:5d:59:d4:0e:f2:f9:87:c9:c6:cd:69:df:
a9:13:df:37:01:d7:b8:8c:80:34:eb:64:38:ad:e1:61:02:32:
32:e6:3a:96:ad:7e:a2:48:40:9e:2a:4c:a2:e2:00:60:c9:c0:
36:7a:cd:41:a4:bf:2e:cb:1e:78:27:d0:78:77:1a:9a:77:af:
6a:3b:79:58:24:fb:66:a1:a1:76:98:68:89:70:87:54:45:b4:
1c:06:c3:87:f2:72:1b:cd:0b:92:2d:fc:c2:26:1b:ea:8e:f0:
41:3a:21:21:49:5d:d4:c9:4c:0e:e7:0f:ab:e6:9a:6f:7e:6a:
d9:cb:c2:70:21:10:f6:7b:a7:8a:47:90:d9:37:27:3d:85:5b:
42:98:0d:75:a5:ac:4d:4c:1c:a9:d6:9e:0d:a4:e7:36:8b:9d:
88:2e:0e:f9:95:f0:0c:ff:84:43:5f:08:42:c8:95:90:bb:c2:
14:8d:ce:29:66:77:c1:5e:55:9c:2e:55:28:9c:0e:09:63:3b:
db:8c:0c:f6:e7:a1:81:b1:a9:32:ea:9a:69:dd:2a:81:6b:03:
6f:74:23:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBwVZ0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTNkYTIwMTk5MDlkOWZjMzc4MjlmZDllYzI5ZDk0OGVjZmY3YzkyMB4XDTIyMDMw
MTE4NTAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDZmNTIzMjA5MWZk
NjRlODU3OTBiODU3MjQyOTI4ZTY0NDYwOWUwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObsViH/vqmfU5e92gMjz7u1S1fmNzhzDIqo5blq4t1QvN/3
1o8XOmzUdqbvj2bDIZtiejLyq5dRGsip9FNv/WW4RygyIABiDg2lf9y8i23XwW/B
kR4+JSvADENN5DTMVm99osoO9Og77SuS4oI2kwjKW+cqb2UrDiiTuW8mOmsnE5Ci
7yCEn9PQZrW83hQhrzhhsHpRqefdWbGRDuPMXYWc78zn7tvCPiu7Lol3fuLHgxIS
0KPOu5cqR2b+FuK+BsYvm5D3s5T+Yfio1/a1hbH6AOL+UgNt2mK5z/O9LSt/McnI
K1vV9+/QUV0bFo9+yuRvCiR3L6fqKokY1jJevLkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQG9SMgkf1k6FeQuFckKSjmRGCeDjAfBgNVHSMEGDAWgBTZPaIBmQnZ/DeC
n9nsKdlI7P98kjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJUMmlBWmtKMmZ3M2dwX1o3Q25aU096X2ZKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvNDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8x
L0J2VWpJSkg5Wk9oWGtMaFhKQ2tvNWtSZ25nNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
NDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8xLzJUMmlBWmtKMmZ3
M2dwX1o3Q25aU096X2ZKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2anDANBgkqhkiG9w0BAQsFAAOC
AQEATa0f4E9CueigKdmzbDXYeIKrm47eStuLxhRC6OlSlnMmEybctY4RtMxgXVnU
DvL5h8nGzWnfqRPfNwHXuIyANOtkOK3hYQIyMuY6lq1+okhAnipMouIAYMnANnrN
QaS/LsseeCfQeHcamnevajt5WCT7ZqGhdphoiXCHVEW0HAbDh/JyG80Lki38wiYb
6o7wQTohIUld1MlMDucPq+aab35q2cvCcCEQ9nunikeQ2TcnPYVbQpgNdaWsTUwc
qdaeDaTnNoudiC4O+ZXwDP+EQ18IQsiVkLvCFI3OKWZ3wV5VnC5VKJwOCWM724wM
9uehgbGpMuqaad0qgWsDb3QjPA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org