Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/fsVMMOE8wbb8vL05KCzzIWPWNO4.roa
File: fsVMMOE8wbb8vL05KCzzIWPWNO4.roa (raw, json)
Hash identifier: iC5Px67fvBJHC4eqwji9TaNU934S2ju9xEtcCQ9T2vA=
Subject key identifier: 7E:C5:4C:30:E1:3C:C1:B6:FC:BC:BD:39:28:2C:F3:21:63:D6:34:EE
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0184F7475EBE6F92E2E39711B91D0DBF0E99
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/fsVMMOE8wbb8vL05KCzzIWPWNO4.roa
Signing time: Fri 09 Dec 2022 14:26:00 +0000
ROA not before: Fri 09 Dec 2022 14:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 45.140.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:47:5e:be:6f:92:e2:e3:97:11:b9:1d:0d:bf:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 9 14:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec54c30e13cc1b6fcbcbd39282cf32163d634ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:44:e3:54:75:e7:a1:91:c4:00:ae:c9:8a:
26:0a:a6:62:01:e8:34:d2:bf:22:80:79:cb:bd:7c:
2b:14:ca:d0:3e:85:c2:8c:9f:a7:81:35:67:a0:d6:
d7:97:83:04:51:00:e4:44:ea:8e:ba:77:66:0d:9d:
f1:a4:32:34:f0:3b:a6:64:b9:27:28:ff:47:66:b7:
06:00:35:36:75:38:80:9c:f3:a3:c0:28:8d:be:04:
85:ce:04:bf:25:7c:01:2d:a7:a7:af:a5:df:ef:f7:
a7:8d:5f:4c:d5:a0:ff:a5:51:c4:5a:1a:eb:58:c1:
c2:63:b6:f7:c0:43:4c:83:82:51:c1:1e:1c:75:ac:
8e:1b:11:5c:38:c5:46:65:b0:b0:7b:b5:3b:12:4a:
5f:9c:82:de:00:b5:cf:1f:3d:7e:bf:c9:12:f0:e0:
ff:db:7e:ab:03:59:52:70:02:82:9c:89:b8:72:01:
36:a3:3e:5f:99:a7:18:b8:25:46:cd:22:70:a8:b7:
bc:39:0a:d3:0f:c0:2a:9e:da:b4:69:58:1d:6a:ae:
a1:25:03:de:7e:25:15:4a:3f:e2:03:f3:e5:6a:8d:
8a:b6:74:8a:7d:ac:97:ce:2e:25:9d:a6:f9:4f:02:
50:91:61:f9:0e:e9:8a:40:ca:bc:69:01:15:1c:bd:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:4C:30:E1:3C:C1:B6:FC:BC:BD:39:28:2C:F3:21:63:D6:34:EE
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/fsVMMOE8wbb8vL05KCzzIWPWNO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:18:8a:43:87:fd:b7:88:66:5d:e6:aa:95:35:6f:21:ab:3c:
ff:3b:b9:7c:eb:48:e0:d4:ec:de:f4:09:f9:76:fc:e7:a6:66:
72:58:9c:50:9a:c6:f9:3a:f9:80:93:6c:ac:72:39:d7:15:7b:
1c:45:db:27:e0:02:05:f0:ac:03:be:68:54:dd:10:76:53:c0:
e1:88:48:e9:4b:ef:96:9c:d5:e3:d1:fa:ce:e1:d2:7a:a7:a4:
9c:16:6e:45:7f:93:4c:8e:75:4e:bd:f3:6a:a1:b8:26:ce:dd:
5a:e8:07:f6:6e:e4:2c:26:8a:0d:aa:4b:f5:40:1a:19:a2:c5:
4a:a3:cf:15:72:8c:a7:0c:60:91:78:d9:ab:78:75:be:57:7a:
22:6f:80:51:0f:21:8c:aa:7c:f8:c9:56:9f:f3:37:fc:81:9b:
ae:08:e2:26:2b:a4:80:e7:45:15:1a:9c:8b:ef:e5:d9:b4:00:
f0:b2:a0:50:af:f5:04:31:3e:26:a7:b7:59:c1:1e:a9:25:db:
90:02:35:3c:fd:8d:0d:b1:18:c2:db:d2:38:7a:4e:de:02:95:
dc:02:5c:1c:99:a7:5e:84:e9:ac:a6:dd:79:5b:ab:40:f6:7c:
8e:e4:71:26:13:c0:cd:34:dd:4c:b7:60:df:60:7c:f7:bd:0a:
fc:e4:55:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYT3R16+b5Li45cRuR0Nvw6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjIxMjA5MTQyNjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWM1NGMzMGUxM2NjMWI2ZmNiY2JkMzkyODJjZjMyMTYzZDYzNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUJE41R156GRxACuyYomCqZiAeg0
0r8igHnLvXwrFMrQPoXCjJ+ngTVnoNbXl4MEUQDkROqOundmDZ3xpDI08DumZLkn
KP9HZrcGADU2dTiAnPOjwCiNvgSFzgS/JXwBLaenr6Xf7/enjV9M1aD/pVHEWhrr
WMHCY7b3wENMg4JRwR4cdayOGxFcOMVGZbCwe7U7EkpfnILeALXPHz1+v8kS8OD/
236rA1lScAKCnIm4cgE2oz5fmacYuCVGzSJwqLe8OQrTD8Aqntq0aVgdaq6hJQPe
fiUVSj/iA/Plao2KtnSKfayXzi4lnab5TwJQkWH5DumKQMq8aQEVHL2+3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7FTDDhPMG2/Ly9OSgs8yFj1jTuMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvZnNWTU1PRTh3YmI4dkwwNUtDenpJV1BXTk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQC8GIpDh/23iGZd5qqVNW8hqzz/O7l860jg1Oze9An5
dvznpmZyWJxQmsb5OvmAk2yscjnXFXscRdsn4AIF8KwDvmhU3RB2U8DhiEjpS++W
nNXj0frO4dJ6p6ScFm5Ff5NMjnVOvfNqobgmzt1a6Af2buQsJooNqkv1QBoZosVK
o88VcoynDGCReNmreHW+V3oib4BRDyGMqnz4yVaf8zf8gZuuCOImK6SA50UVGpyL
7+XZtADwsqBQr/UEMT4mp7dZwR6pJduQAjU8/Y0NsRjC29I4ek7eApXcAlwcmade
hOmspt15W6tA9nyO5HEmE8DNNN1Mt2DfYHz3vQr85FU/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org