Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/B6zVsE96IDtRHMnfXHITP1V2dWA.roa
File: B6zVsE96IDtRHMnfXHITP1V2dWA.roa (raw, json)
Hash identifier: gA1oBOF7v4FxRJCGPyTcMT17wvbVpRWvRJzK+msyJ34=
Subject key identifier: 07:AC:D5:B0:4F:7A:20:3B:51:1C:C9:DF:5C:72:13:3F:55:76:75:60
Certificate issuer: /CN=be810fb3ce83c623c7c9894fadb595310d41818f
Certificate serial: 069F034E
Authority key identifier: BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/B6zVsE96IDtRHMnfXHITP1V2dWA.roa
Signing time: Sat 01 Jan 2022 11:03:54 +0000
ROA not before: Sat 01 Jan 2022 11:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213373
IP address blocks: 45.141.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111084366 (0x69f034e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be810fb3ce83c623c7c9894fadb595310d41818f
Validity
Not Before: Jan 1 11:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07acd5b04f7a203b511cc9df5c72133f55767560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:41:76:d4:7f:96:ad:bf:01:c4:0c:56:db:
66:70:72:8e:c3:2d:c8:e4:93:51:80:f1:b7:72:07:
c3:eb:68:47:2c:cc:68:f0:d8:86:c5:84:99:be:4e:
94:9a:db:cb:54:ce:68:44:a3:20:53:1d:e0:2c:f3:
5e:9b:61:17:a7:a7:07:89:ef:86:ab:86:e9:94:8e:
17:5d:4d:62:71:fd:6c:92:29:37:80:28:a2:2f:ef:
2b:3a:9c:c9:1e:cb:a9:db:3f:57:95:7a:70:99:86:
d4:89:10:44:91:a1:c4:a6:c7:e0:ca:97:37:4c:74:
3c:ff:df:d8:7b:ed:16:1c:55:64:fd:7a:93:e6:12:
89:fb:36:0c:6d:3a:2e:dc:f5:f1:28:27:6e:86:f4:
fc:a3:71:bc:dc:52:a4:a5:37:3c:7c:61:76:fe:34:
0d:82:44:b5:4c:a8:9e:07:31:05:1b:72:f3:c7:02:
7b:e9:b5:3b:6b:62:25:8c:f3:83:9c:8b:79:d7:5d:
7b:a6:e4:0d:23:88:b8:d3:78:5d:c5:02:94:8e:f0:
4e:c8:50:58:2c:9d:db:b5:53:24:ba:fb:4c:77:2b:
01:0b:df:d3:c7:1f:3e:15:74:e6:de:1c:dd:3f:23:
1f:4e:ce:3a:f2:b1:8f:c1:15:f0:ff:fe:f9:e9:6a:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:D5:B0:4F:7A:20:3B:51:1C:C9:DF:5C:72:13:3F:55:76:75:60
X509v3 Authority Key Identifier:
keyid:BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/B6zVsE96IDtRHMnfXHITP1V2dWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:54:0b:02:50:a5:ba:ab:6c:2a:14:f7:e5:ba:c4:c5:b0:9c:
b2:e2:06:c5:7c:15:6a:89:ed:51:29:7e:61:b7:e9:62:f7:7e:
84:2c:23:05:c1:7c:af:b0:a3:11:58:80:e5:ae:c1:34:3a:a5:
87:fd:3b:3c:b4:d9:fc:aa:13:c9:30:25:cf:00:4d:03:b9:e7:
e2:97:b1:55:6a:81:3b:ad:5b:c1:27:9d:b0:ae:04:be:48:f4:
b6:7e:a8:50:aa:e8:b1:1c:34:eb:cc:a8:eb:d4:a3:32:d9:3b:
de:96:e3:2f:be:4f:d6:e9:cf:20:1f:b0:49:4e:82:cd:94:ac:
66:5d:ee:f7:d7:b7:04:ea:9d:b8:c2:bb:57:3e:03:ea:56:a3:
41:2a:ad:fd:a6:00:6c:96:6a:9d:38:68:08:16:e9:7f:9c:a0:
c9:1b:dd:22:f3:af:b4:f4:88:c3:aa:c5:e9:11:f5:3c:7f:26:
a9:43:82:b1:fc:3e:53:6a:a9:91:a9:7b:6a:45:cb:f7:c6:5d:
1b:88:f0:b9:73:50:38:53:80:c6:30:ed:d5:d1:8a:d1:b2:2b:
df:6a:2d:42:e8:08:09:e2:16:32:28:d7:91:78:b5:7a:4e:d6:
af:11:77:33:e9:2e:43:10:1c:a2:ae:e3:34:49:1b:de:f6:c5:
35:70:dd:e7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBp8DTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTgxMGZiM2NlODNjNjIzYzdjOTg5NGZhZGI1OTUzMTBkNDE4MThmMB4XDTIyMDEw
MTExMDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdhY2Q1YjA0Zjdh
MjAzYjUxMWNjOWRmNWM3MjEzM2Y1NTc2NzU2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdlQXbUf5atvwHEDFbbZnByjsMtyOSTUYDxt3IHw+toRyzM
aPDYhsWEmb5OlJrby1TOaESjIFMd4CzzXpthF6enB4nvhquG6ZSOF11NYnH9bJIp
N4Aooi/vKzqcyR7Lqds/V5V6cJmG1IkQRJGhxKbH4MqXN0x0PP/f2HvtFhxVZP16
k+YSifs2DG06Ltz18Sgnbob0/KNxvNxSpKU3PHxhdv40DYJEtUyongcxBRty88cC
e+m1O2tiJYzzg5yLeddde6bkDSOIuNN4XcUClI7wTshQWCyd27VTJLr7THcrAQvf
08cfPhV05t4c3T8jH07OOvKxj8EV8P/++elqXwcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQHrNWwT3ogO1Ecyd9cchM/VXZ1YDAfBgNVHSMEGDAWgBS+gQ+zzoPGI8fJ
iU+ttZUxDUGBjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZvRVBzODZEeGlQSHlZbFByYldWTVExQmdZOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNzBjNDUxLTg3NmUtNDU4MS05OGRkLTA4NjE4ZTZiMmMxYy8x
L0I2elZzRTk2SUR0UkhNbmZYSElUUDFWMmRXQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NzBjNDUxLTg3NmUtNDU4MS05OGRkLTA4NjE4ZTZiMmMxYy8xL3ZvRVBzODZEeGlQ
SHlZbFByYldWTVExQmdZOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2NODANBgkqhkiG9w0BAQsFAAOC
AQEAtVQLAlCluqtsKhT35brExbCcsuIGxXwVaontUSl+YbfpYvd+hCwjBcF8r7Cj
EViA5a7BNDqlh/07PLTZ/KoTyTAlzwBNA7nn4pexVWqBO61bwSedsK4Evkj0tn6o
UKrosRw068yo69SjMtk73pbjL75P1unPIB+wSU6CzZSsZl3u99e3BOqduMK7Vz4D
6lajQSqt/aYAbJZqnThoCBbpf5ygyRvdIvOvtPSIw6rF6RH1PH8mqUOCsfw+U2qp
kal7akXL98ZdG4jwuXNQOFOAxjDt1dGK0bIr32otQugICeIWMijXkXi1ek7WrxF3
M+kuQxAcoq7jNEkb3vbFNXDd5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:42 2024 by rpki-client on console-ams.rpki-client.org