Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa
File: iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa (raw, json)
Hash identifier: clvQGyl5YFq79o/IEFj0kf4BCPaaMx+5cQYbC5LYz6g=
Subject key identifier: 8A:26:FB:08:25:0F:0F:C9:A1:F8:90:ED:0B:75:63:12:A4:0A:1A:74
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 075E1B6B
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa
Signing time: Sat 01 Jan 2022 02:00:38 +0000
ROA not before: Sat 01 Jan 2022 02:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.89.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123607915 (0x75e1b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 02:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a26fb08250f0fc9a1f890ed0b756312a40a1a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:c9:a8:ae:b3:64:6b:0e:ae:86:63:f8:06:
f6:49:d0:09:20:81:99:18:90:23:24:38:ee:da:f0:
a4:82:36:31:17:82:f2:6c:55:10:2b:6b:2a:47:60:
63:49:cc:79:f8:c8:6e:c2:8e:12:7e:ce:26:95:2c:
58:45:5a:6b:a2:bc:70:48:97:13:df:3c:7c:f3:29:
5a:29:67:51:e5:0f:91:4d:9e:e0:5a:e8:ce:20:0f:
62:28:b3:b4:d8:ab:a1:b0:9c:6d:28:25:05:31:60:
61:ab:5c:35:8b:10:34:c5:5b:86:7a:ff:62:da:2f:
73:4c:ed:97:5c:4c:40:c5:76:8c:98:fe:06:c7:19:
28:58:0f:d3:61:de:f1:ca:4c:a4:a7:ba:c2:52:67:
f3:90:83:bc:69:41:7b:fb:a3:2d:80:c0:5b:e8:db:
a7:9e:f2:db:a6:ad:a6:97:14:d4:d9:2c:76:e7:63:
b2:16:8e:34:9c:f8:e5:b4:82:99:75:7c:ed:af:ef:
4e:97:f8:78:34:14:c4:06:a5:aa:eb:b3:50:8e:8d:
d1:a7:d4:e5:fb:7f:d0:bc:a1:10:e8:03:a5:1a:4c:
ed:05:ae:28:a3:e1:48:b1:b0:ce:6e:13:98:02:01:
a5:d8:b8:46:a6:d1:79:c5:6c:c8:0a:ee:28:dd:3a:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:FB:08:25:0F:0F:C9:A1:F8:90:ED:0B:75:63:12:A4:0A:1A:74
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:49:91:94:05:18:f3:c5:53:d0:b8:28:89:6c:49:58:e6:b5:
e9:fc:db:f8:01:4a:d7:6c:ad:77:94:bf:3f:ba:04:92:fd:64:
0f:03:12:19:de:3c:b1:0e:ab:4e:3b:70:08:30:e1:c4:50:69:
0a:2d:b3:a0:66:21:a8:a3:58:26:5e:21:52:20:5e:e2:0f:8e:
ca:5f:f5:f8:8a:f0:4b:c9:cf:2c:27:59:37:e1:a3:b5:ef:cd:
e6:e6:d9:d6:e2:26:39:df:24:bf:f9:f6:fe:39:f5:cb:20:76:
5f:ae:4e:ba:7c:9a:47:5f:d9:70:d6:6e:48:2b:56:ea:29:ad:
34:70:cf:2c:2a:a3:c3:79:17:82:fc:b8:ea:1a:48:d1:ab:6b:
14:79:00:be:bb:54:bd:f2:75:d4:19:d4:3f:39:55:5d:ac:ad:
52:57:00:5f:1c:e9:04:30:7b:f6:52:c4:cf:97:3d:07:02:0a:
2e:40:d7:42:5f:aa:60:82:12:16:a9:f5:ef:71:a3:ed:17:80:
1e:15:d1:71:5d:a7:a4:f4:e0:22:8d:63:aa:6d:da:a1:4e:8e:
b8:e9:3e:3c:4e:3c:f5:87:15:6e:b5:b9:39:fd:ba:76:ef:0c:
1b:dd:24:f2:c5:9f:d0:13:89:06:4d:1b:16:27:7f:39:77:92:
79:78:07:3a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB14bazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWVlMGQ3ZTczMDg0YTQyZTRjN2Y3MTE4ZjIzODNmY2ZmMzY5YmE0MB4XDTIyMDEw
MTAyMDAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGEyNmZiMDgyNTBm
MGZjOWExZjg5MGVkMGI3NTYzMTJhNDBhMWE3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBayaius2RrDq6GY/gG9knQCSCBmRiQIyQ47trwpII2MReC
8mxVECtrKkdgY0nMefjIbsKOEn7OJpUsWEVaa6K8cEiXE988fPMpWilnUeUPkU2e
4FroziAPYiiztNirobCcbSglBTFgYatcNYsQNMVbhnr/Ytovc0ztl1xMQMV2jJj+
BscZKFgP02He8cpMpKe6wlJn85CDvGlBe/ujLYDAW+jbp57y26atppcU1Nksdudj
shaONJz45bSCmXV87a/vTpf4eDQUxAalquuzUI6N0afU5ft/0LyhEOgDpRpM7QWu
KKPhSLGwzm4TmAIBpdi4RqbRecVsyAruKN060fcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKJvsIJQ8PyaH4kO0LdWMSpAoadDAfBgNVHSMEGDAWgBRe7g1+cwhKQuTH
9xGPI4P8/zabpDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h1NE5mbk1JU2tMa3hfY1JqeU9EX1A4Mm02US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvNzg0MzIxLTk5ZGQtNDc1NC1iMjA4LWRkYzI2NjU2NDZjYy8x
L2lpYjdDQ1VQRDhtaC1KRHRDM1ZqRXFRS0duUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
Nzg0MzIxLTk5ZGQtNDc1NC1iMjA4LWRkYzI2NjU2NDZjYy8xL1h1NE5mbk1JU2tM
a3hfY1JqeU9EX1A4Mm02US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1ZHDANBgkqhkiG9w0BAQsFAAOC
AQEAHkmRlAUY88VT0LgoiWxJWOa16fzb+AFK12ytd5S/P7oEkv1kDwMSGd48sQ6r
TjtwCDDhxFBpCi2zoGYhqKNYJl4hUiBe4g+Oyl/1+IrwS8nPLCdZN+Gjte/N5ubZ
1uImOd8kv/n2/jn1yyB2X65OunyaR1/ZcNZuSCtW6imtNHDPLCqjw3kXgvy46hpI
0atrFHkAvrtUvfJ11BnUPzlVXaytUlcAXxzpBDB79lLEz5c9BwIKLkDXQl+qYIIS
Fqn173Gj7ReAHhXRcV2npPTgIo1jqm3aoU6OuOk+PE489YcVbrW5Of26du8MG90k
8sWf0BOJBk0bFid/OXeSeXgHOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org