Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2I1cx0vtL8bMquZFoQq5u5WXjHU.roa
File: 2I1cx0vtL8bMquZFoQq5u5WXjHU.roa (raw, json)
Hash identifier: RKksvBfC16kkTt9Z2rdI+5Dwg5qo3tEi98T+7Rkx3PI=
Subject key identifier: D8:8D:5C:C7:4B:ED:2F:C6:CC:AA:E6:45:A1:0A:B9:BB:95:97:8C:75
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 096F918B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2I1cx0vtL8bMquZFoQq5u5WXjHU.roa
Signing time: Wed 02 Mar 2022 03:01:51 +0000
ROA not before: Wed 02 Mar 2022 03:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47154
IP address blocks: 45.134.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158306699 (0x96f918b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 2 03:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d88d5cc74bed2fc6ccaae645a10ab9bb95978c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:0a:7c:89:fa:99:76:ae:e6:f9:e0:55:be:
e6:f2:5b:64:6a:6e:ad:6d:46:cb:ac:ff:fa:f1:e7:
d0:1b:61:26:e6:de:8f:cb:34:f8:08:2a:7f:8a:c7:
cd:a8:a5:8d:8d:1c:d1:59:34:07:69:5a:45:f8:2c:
26:d3:bc:1e:37:e6:3a:5a:7c:b3:35:64:5f:ee:b6:
82:c2:8b:65:15:94:0f:ca:8d:69:7b:61:b8:ca:e0:
2f:de:4e:21:26:6f:80:38:57:e3:8b:e7:15:d0:5e:
45:c0:23:7b:82:e0:49:c0:20:31:c4:58:23:6f:1b:
9a:cb:98:db:5f:af:51:e3:6a:e2:2e:fd:74:56:29:
c8:df:99:3a:88:45:a5:f3:d3:ba:87:66:ac:c1:a4:
de:9a:d1:14:4d:39:32:a9:b0:81:f6:62:96:b6:f6:
d0:8e:26:af:c4:ef:a1:74:1e:07:95:ff:bb:50:53:
a2:c8:9c:96:c8:b9:a4:6c:f6:80:67:09:fc:3d:fc:
90:da:86:eb:54:0b:ba:18:e1:50:38:d4:57:ed:d0:
a0:db:17:88:e5:c7:d0:40:09:96:09:7f:8d:51:3e:
d9:1f:ca:5f:f1:d0:75:fc:62:fa:29:16:a3:42:89:
65:4a:f5:1c:43:1b:a0:98:70:b8:57:b1:3a:74:dd:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:5C:C7:4B:ED:2F:C6:CC:AA:E6:45:A1:0A:B9:BB:95:97:8C:75
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2I1cx0vtL8bMquZFoQq5u5WXjHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:55:ce:66:a2:ca:90:21:4f:b7:3c:16:6a:74:88:db:67:5c:
75:21:8a:99:75:96:d2:d1:1a:ad:5a:ca:6e:90:c3:a3:1d:10:
da:4b:10:04:4b:84:a8:8e:51:6d:58:94:ab:1b:36:e1:4f:fe:
b8:72:f1:c0:29:d4:87:33:c2:8f:97:37:0f:97:b9:96:88:fd:
14:d8:91:e6:9f:9d:e6:da:7a:c7:77:21:b7:a3:45:98:e5:1d:
25:19:5e:3c:48:a4:ea:09:2d:e6:ea:3b:b9:0f:3a:21:55:1c:
f7:68:9e:10:a6:ca:89:04:ba:b5:f0:a3:9a:6a:6a:dd:5a:30:
3b:8d:de:48:de:3d:3e:7e:43:07:01:3a:d2:c9:f9:81:8b:3f:
ee:68:b7:33:bd:3c:7e:9f:85:3b:aa:5a:b9:74:66:2f:ef:f8:
0a:68:9e:f6:84:0a:19:90:a2:5e:c7:70:70:cd:2f:58:6a:14:
ec:90:ec:9d:19:ac:78:03:f6:b2:47:59:53:e8:45:56:fb:88:
05:d7:19:e6:c4:7f:03:0f:93:6e:e1:e3:63:e5:5e:7a:21:45:
ea:b3:be:08:f2:33:8a:2c:a1:3f:92:1b:07:79:9e:2a:fc:96:
a8:d8:f6:b0:00:5a:4e:84:94:9a:06:af:59:15:48:b8:4c:5c:
41:71:c9:3e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECW+RizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMB4XDTIyMDMw
MjAzMDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg4ZDVjYzc0YmVk
MmZjNmNjYWFlNjQ1YTEwYWI5YmI5NTk3OGM3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwKCnyJ+pl2rub54FW+5vJbZGpurW1Gy6z/+vHn0BthJube
j8s0+Agqf4rHzailjY0c0Vk0B2laRfgsJtO8HjfmOlp8szVkX+62gsKLZRWUD8qN
aXthuMrgL95OISZvgDhX44vnFdBeRcAje4LgScAgMcRYI28bmsuY21+vUeNq4i79
dFYpyN+ZOohFpfPTuodmrMGk3prRFE05MqmwgfZilrb20I4mr8TvoXQeB5X/u1BT
osiclsi5pGz2gGcJ/D38kNqG61QLuhjhUDjUV+3QoNsXiOXH0EAJlgl/jVE+2R/K
X/HQdfxi+ikWo0KJZUr1HEMboJhwuFexOnTdzisCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTYjVzHS+0vxsyq5kWhCrm7lZeMdTAfBgNVHSMEGDAWgBQX0D8pgYDMEJ8Z
1LGZLH1xxWyNzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y5QV9LWUdBekJDZkdkU3htU3g5Y2NWc2pjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8x
LzJJMWN4MHZ0TDhiTXF1WkZvUXE1dTVXWGpIVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJD
ZkdkU3htU3g5Y2NWc2pjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2GkDANBgkqhkiG9w0BAQsFAAOC
AQEAf1XOZqLKkCFPtzwWanSI22dcdSGKmXWW0tEarVrKbpDDox0Q2ksQBEuEqI5R
bViUqxs24U/+uHLxwCnUhzPCj5c3D5e5loj9FNiR5p+d5tp6x3cht6NFmOUdJRle
PEik6gkt5uo7uQ86IVUc92ieEKbKiQS6tfCjmmpq3VowO43eSN49Pn5DBwE60sn5
gYs/7mi3M708fp+FO6pauXRmL+/4Cmie9oQKGZCiXsdwcM0vWGoU7JDsnRmseAP2
skdZU+hFVvuIBdcZ5sR/Aw+TbuHjY+VeeiFF6rO+CPIziiyhP5IbB3meKvyWqNj2
sABaToSUmgavWRVIuExcQXHJPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org