Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7coXbXHu2GoyvbYBlSvrc7OKee0.roa
File: 7coXbXHu2GoyvbYBlSvrc7OKee0.roa (raw, json)
Hash identifier: qC6A/LIpOi7BFQCLpsaokootYv/45P75kZDBXrlfj3s=
Subject key identifier: ED:CA:17:6D:71:EE:D8:6A:32:BD:B6:01:95:2B:EB:73:B3:8A:79:ED
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018554EB412DC37210E979BC40FEBAFAD94D
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7coXbXHu2GoyvbYBlSvrc7OKee0.roa
Signing time: Tue 27 Dec 2022 18:49:41 +0000
ROA not before: Tue 27 Dec 2022 18:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206158
IP address blocks: 45.15.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:eb:41:2d:c3:72:10:e9:79:bc:40:fe:ba:fa:d9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Dec 27 18:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edca176d71eed86a32bdb601952beb73b38a79ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:b3:59:84:fb:2b:bf:3e:d0:01:29:7a:58:
99:92:89:9e:3f:45:ff:dc:4b:a7:c8:f8:71:5f:43:
c1:87:61:87:57:da:93:7e:f6:12:a7:d8:ad:57:16:
44:35:07:56:ad:94:b1:0d:28:97:d4:44:3a:a9:6e:
3c:34:92:ce:3c:df:bb:2b:df:10:3c:b1:b7:24:eb:
bf:c3:7b:85:7d:39:c0:a0:c2:f4:b3:ae:36:73:76:
4b:53:26:13:ba:b2:31:94:ee:ae:bf:4e:79:f7:6b:
44:62:08:28:2b:d2:a4:60:50:1b:8a:f6:ca:7f:3a:
a6:29:b3:96:6a:55:2c:08:bc:93:bd:e4:fa:d5:a4:
4b:66:ca:27:f9:45:f1:d8:9d:1b:cb:f8:71:e3:d6:
40:0b:ec:ac:d6:06:6b:3f:a6:d4:5b:37:7a:78:74:
36:39:a1:d5:c4:d5:85:11:78:a3:31:5b:93:74:65:
4a:20:3c:03:cf:77:bf:cc:17:c1:1d:d2:dc:fb:3f:
f7:80:06:0f:64:c0:1b:93:f2:2e:08:16:92:14:dd:
6a:8f:91:11:e7:62:20:c1:e8:b6:62:91:5b:de:26:
5d:90:73:0f:3b:1a:25:d5:37:d1:30:be:f8:8d:7f:
d1:15:f9:23:86:68:85:c3:be:4d:74:52:41:4f:8b:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:17:6D:71:EE:D8:6A:32:BD:B6:01:95:2B:EB:73:B3:8A:79:ED
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7coXbXHu2GoyvbYBlSvrc7OKee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.234.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c7:5f:08:f3:2d:15:28:5f:94:f5:e1:ea:2c:92:35:ec:2e:
1b:74:d6:df:28:f7:51:3d:c5:9a:4d:76:46:7d:c5:c6:ec:67:
52:aa:c6:91:d5:0c:1a:b9:8c:f9:3f:a7:ce:c1:0b:24:03:b6:
39:5c:c5:35:50:fd:86:8d:0d:19:89:85:f1:97:36:ef:8f:f0:
fc:98:db:42:7d:63:c4:ed:99:db:34:89:df:19:ad:15:d4:a6:
06:af:f4:1d:70:97:bf:57:56:19:5d:fc:72:07:a9:59:11:66:
d4:ea:4c:89:36:12:11:18:74:d3:56:a4:e2:99:7e:40:2e:d6:
ab:98:cc:78:3d:63:a9:5b:48:91:41:ec:59:37:79:31:2b:14:
66:08:55:b9:b2:11:d2:ac:c9:0f:84:14:e3:06:b7:76:a1:1f:
15:2a:b3:44:de:d4:3f:00:83:7b:fc:c7:28:94:f0:a8:57:7c:
15:13:51:41:48:b1:b3:40:c9:1f:3e:e9:b3:9c:3e:96:a7:a5:
9a:c4:a1:f6:91:d8:f6:ed:21:c8:2c:be:1a:70:08:62:d0:25:
ea:a5:42:9b:b5:01:24:92:2c:e2:12:83:02:f1:b2:f7:2b:cf:
90:b7:de:30:49:e7:2f:19:57:4c:cc:16:e2:3c:ea:6d:97:4f:
7f:21:01:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVU60Etw3IQ6Xm8QP66+tlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjIxMjI3MTg0OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGNhMTc2ZDcxZWVkODZhMzJiZGI2MDE5NTJiZWI3M2IzOGE3OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV+zWYT7K78+0AEpeliZkomeP0X/
3EunyPhxX0PBh2GHV9qTfvYSp9itVxZENQdWrZSxDSiX1EQ6qW48NJLOPN+7K98Q
PLG3JOu/w3uFfTnAoML0s642c3ZLUyYTurIxlO6uv05592tEYggoK9KkYFAbivbK
fzqmKbOWalUsCLyTveT61aRLZson+UXx2J0by/hx49ZAC+ys1gZrP6bUWzd6eHQ2
OaHVxNWFEXijMVuTdGVKIDwDz3e/zBfBHdLc+z/3gAYPZMAbk/IuCBaSFN1qj5ER
52Igwei2YpFb3iZdkHMPOxol1TfRML74jX/RFfkjhmiFw75NdFJBT4uFGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3KF21x7thqMr22AZUr63OzinntMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvN2NvWGJYSHUyR295dmJZQmxTdnJjN09LZWUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ/qMA0G
CSqGSIb3DQEBCwUAA4IBAQAVx18I8y0VKF+U9eHqLJI17C4bdNbfKPdRPcWaTXZG
fcXG7GdSqsaR1QwauYz5P6fOwQskA7Y5XMU1UP2GjQ0ZiYXxlzbvj/D8mNtCfWPE
7ZnbNInfGa0V1KYGr/QdcJe/V1YZXfxyB6lZEWbU6kyJNhIRGHTTVqTimX5ALtar
mMx4PWOpW0iRQexZN3kxKxRmCFW5shHSrMkPhBTjBrd2oR8VKrNE3tQ/AIN7/Mco
lPCoV3wVE1FBSLGzQMkfPumznD6Wp6WaxKH2kdj27SHILL4acAhi0CXqpUKbtQEk
kiziEoMC8bL3K8+Qt94wSecvGVdMzBbiPOptl09/IQFo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:17 2024 by rpki-client on console-ams.rpki-client.org