Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eSJ41Kg9XX-oCqvs8WwYz8NynoA.roa
File: eSJ41Kg9XX-oCqvs8WwYz8NynoA.roa (raw, json)
Hash identifier: cOMtVhU8xUJJWe5YwaQPkVCYXREbu/J/bEVwjua2LbY=
Subject key identifier: 79:22:78:D4:A8:3D:5D:7F:A8:0A:AB:EC:F1:6C:18:CF:C3:72:9E:80
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 08D8B1DB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eSJ41Kg9XX-oCqvs8WwYz8NynoA.roa
Signing time: Sat 01 Jan 2022 07:01:24 +0000
ROA not before: Sat 01 Jan 2022 07:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 45.134.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148419035 (0x8d8b1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 1 07:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=792278d4a83d5d7fa80aabecf16c18cfc3729e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:ef:05:37:23:70:1f:ee:aa:09:be:54:28:
5a:26:bc:f1:d9:4c:61:fc:14:2d:6e:a8:26:1f:49:
18:ae:e1:62:d3:cb:4d:2c:55:b1:32:da:23:a9:3e:
80:34:f2:14:f9:47:3d:95:af:16:b6:92:7b:4f:bf:
77:4b:73:bd:d9:ff:d7:bf:b6:43:d5:97:0d:8e:84:
e4:0a:de:88:7d:af:a3:34:0c:3d:55:ac:71:15:2f:
a4:5b:6c:5d:4a:57:44:ff:34:8a:63:5e:21:bd:bb:
7b:75:75:e9:fd:44:6a:2c:c2:7d:c1:5f:57:e0:5c:
49:0c:35:06:25:2f:b6:bd:85:3e:c1:fa:b4:b3:57:
96:36:74:ab:21:a4:1a:71:24:8e:61:1c:72:e8:f5:
41:be:84:be:24:18:70:17:6b:e3:9f:44:01:28:b5:
bf:8a:be:e8:c3:7a:71:2a:f3:6f:16:21:bb:10:34:
13:10:17:f1:be:52:a5:d9:ac:3b:28:97:7b:33:a0:
da:93:cf:68:3b:3e:6c:d5:1b:06:33:9f:c8:51:3b:
66:ad:dd:0c:30:11:68:45:b1:5b:46:a7:12:91:b5:
57:47:24:3d:bf:9e:fa:f2:4c:7b:5b:aa:d0:ae:ec:
9f:01:23:c8:b2:c3:ca:4c:ea:cb:64:fa:2b:b0:b1:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:78:D4:A8:3D:5D:7F:A8:0A:AB:EC:F1:6C:18:CF:C3:72:9E:80
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eSJ41Kg9XX-oCqvs8WwYz8NynoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ce:58:a5:75:44:00:b1:94:61:05:9d:ff:c1:af:95:b2:0b:
72:b0:c5:af:85:ed:9d:0b:9d:53:c2:fa:ea:fc:7d:d7:e5:9c:
7f:b1:c3:6f:d6:87:db:5a:da:4b:3c:b5:da:70:0c:26:c7:c1:
b4:c5:f5:2e:75:b9:24:f4:af:60:07:7f:3e:60:25:2c:7a:35:
8b:9f:bf:01:e8:00:73:81:30:09:6f:46:a4:f5:e3:55:1a:70:
ce:b5:7b:e7:e6:73:8f:e1:2a:1e:a1:82:11:bc:84:fa:be:c8:
72:06:0e:18:d0:08:40:40:30:12:b9:f9:ec:e1:35:ab:f5:8e:
93:32:00:e3:9c:2f:39:8a:2b:bd:6e:5d:b6:94:af:25:d8:a8:
c9:5f:36:0c:53:82:af:14:64:a3:29:e8:70:da:18:1a:b9:17:
47:0d:3c:01:ca:13:5b:eb:c8:8d:e1:ac:85:3b:6a:a2:f6:a7:
97:da:ac:29:50:07:d5:e4:56:e9:9b:33:b7:7f:23:15:ee:26:
db:04:c4:da:de:87:87:f1:dc:f0:d7:e1:1a:62:60:fd:7c:76:
bf:e7:65:d8:e1:5c:30:a1:b4:3e:95:c6:1d:58:34:d2:dc:79:
d2:2c:80:7b:a6:82:02:92:71:8b:ae:98:c5:e7:40:61:52:39:
6c:0a:0b:b8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECNix2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMB4XDTIyMDEw
MTA3MDEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkyMjc4ZDRhODNk
NWQ3ZmE4MGFhYmVjZjE2YzE4Y2ZjMzcyOWU4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTT7wU3I3Af7qoJvlQoWia88dlMYfwULW6oJh9JGK7hYtPL
TSxVsTLaI6k+gDTyFPlHPZWvFraSe0+/d0tzvdn/17+2Q9WXDY6E5AreiH2vozQM
PVWscRUvpFtsXUpXRP80imNeIb27e3V16f1EaizCfcFfV+BcSQw1BiUvtr2FPsH6
tLNXljZ0qyGkGnEkjmEccuj1Qb6EviQYcBdr459EASi1v4q+6MN6cSrzbxYhuxA0
ExAX8b5SpdmsOyiXezOg2pPPaDs+bNUbBjOfyFE7Zq3dDDARaEWxW0anEpG1V0ck
Pb+e+vJMe1uq0K7snwEjyLLDykzqy2T6K7CxI0ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5InjUqD1df6gKq+zxbBjPw3KegDAfBgNVHSMEGDAWgBQX0D8pgYDMEJ8Z
1LGZLH1xxWyNzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y5QV9LWUdBekJDZkdkU3htU3g5Y2NWc2pjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8x
L2VTSjQxS2c5WFgtb0NxdnM4V3dZejhOeW5vQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJD
ZkdkU3htU3g5Y2NWc2pjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2GkDANBgkqhkiG9w0BAQsFAAOC
AQEAi85YpXVEALGUYQWd/8GvlbILcrDFr4XtnQudU8L66vx91+Wcf7HDb9aH21ra
Szy12nAMJsfBtMX1LnW5JPSvYAd/PmAlLHo1i5+/AegAc4EwCW9GpPXjVRpwzrV7
5+Zzj+EqHqGCEbyE+r7IcgYOGNAIQEAwErn57OE1q/WOkzIA45wvOYorvW5dtpSv
JdioyV82DFOCrxRkoynocNoYGrkXRw08AcoTW+vIjeGshTtqovanl9qsKVAH1eRW
6Zszt38jFe4m2wTE2t6Hh/Hc8NfhGmJg/Xx2v+dl2OFcMKG0PpXGHVg00tx50iyA
e6aCApJxi66YxedAYVI5bAoLuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org