Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa
File: 9DCL2rtWEv5j88T3ASfBqpzN-1A.roa (raw, json)
Hash identifier: re/vEd3pafVGPrEkmLmwkKgi+boluwf9Arhsg0cXHw0=
Subject key identifier: F4:30:8B:DA:BB:56:12:FE:63:F3:C4:F7:01:27:C1:AA:9C:CD:FB:50
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 0184400049ADE1FD0A15C6D45741EE37C702
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa
Signing time: Fri 04 Nov 2022 00:17:51 +0000
ROA not before: Fri 04 Nov 2022 00:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 45.93.21.0/24 maxlen: 24
2a12:a080::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:40:00:49:ad:e1:fd:0a:15:c6:d4:57:41:ee:37:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Nov 4 00:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4308bdabb5612fe63f3c4f70127c1aa9ccdfb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:8d:c5:a0:d9:3e:67:0b:5c:1e:53:a1:07:
8c:27:3f:99:55:02:41:be:2c:5a:47:50:42:81:5d:
9c:1a:7b:75:f0:b4:20:57:e1:28:71:a9:ea:7b:df:
8d:b8:65:b8:c2:4b:73:12:43:e6:dd:7f:1b:ae:9c:
85:67:82:18:65:19:51:85:bd:18:30:e6:71:c1:b4:
3b:f8:cd:9b:71:e8:91:67:30:00:af:80:72:a0:99:
ea:ae:e2:0a:b6:21:b7:31:4b:76:ae:ad:c8:e2:94:
00:a9:51:45:39:6b:34:5a:0c:2e:2c:19:fb:2f:63:
02:38:04:f7:d9:0c:e1:4c:d9:7b:fe:e1:29:53:89:
2b:cf:83:a2:8c:d6:22:1f:f2:c0:f2:c6:8f:da:4d:
dc:cf:f3:cf:aa:03:95:63:ff:55:17:b5:7f:26:85:
f7:b2:55:05:ef:ab:37:f6:01:8a:2e:a9:cb:5c:64:
23:09:3f:95:f7:16:63:7f:34:5b:81:45:76:4b:24:
83:9f:18:7a:3b:3b:49:73:d3:0e:ae:16:fd:71:1e:
ec:d0:e1:5d:62:3b:02:1f:ba:a3:a3:e0:a9:6d:e7:
34:a5:2a:ce:63:38:b5:bd:88:83:be:46:1d:c5:04:
24:9b:16:52:5e:2e:24:40:6d:91:3d:d7:de:f3:d4:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:8B:DA:BB:56:12:FE:63:F3:C4:F7:01:27:C1:AA:9C:CD:FB:50
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.21.0/24
IPv6:
2a12:a080::/29
Signature Algorithm: sha256WithRSAEncryption
31:68:6e:4e:8d:63:b6:0d:07:8b:f1:1a:86:ff:3e:16:64:97:
95:d6:72:17:51:b7:5d:c8:8f:90:99:4e:89:43:eb:28:65:18:
02:90:5a:c6:a0:5c:a7:ae:ab:ae:57:f7:8c:6c:78:da:49:aa:
6d:89:ec:81:79:cb:9e:42:26:c4:b4:4f:b7:05:e1:2f:94:80:
60:aa:07:f9:31:5e:de:72:69:aa:12:58:eb:79:5f:34:6b:02:
22:e8:a4:92:60:6a:ca:8f:10:e2:49:12:54:8f:f8:63:10:1e:
5f:ad:02:ae:8f:12:3f:a4:7c:36:67:73:82:51:37:41:97:02:
93:99:a0:6f:36:50:e4:dc:cf:5d:9e:2f:89:7b:67:64:c0:45:
e7:80:8d:fb:73:d7:58:81:20:66:6c:fb:27:7c:e3:b0:53:8c:
88:1d:3e:7f:7b:ac:88:a2:7b:7e:96:78:00:af:f8:8e:27:67:
f8:44:a5:4f:de:0a:98:58:21:53:ee:de:1b:58:cb:ad:fc:f3:
f0:53:f5:f3:3c:61:05:61:cd:73:1c:80:0b:e7:e1:c8:30:d6:
69:19:7b:55:64:07:aa:b3:ac:77:a0:34:5a:c0:f6:d3:4c:34:
b1:2e:40:cf:eb:d1:5a:a0:b4:b7:ee:16:e2:67:51:0a:98:a0:
2b:11:dc:3a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYRAAEmt4f0KFcbUV0HuN8cCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWJlMDI4ZjNiZTdlZTA3Mjg4NWQwMmJiZDdiNjJhNjUy
NDI1ZWYwHhcNMjIxMTA0MDAxNzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDMwOGJkYWJiNTYxMmZlNjNmM2M0ZjcwMTI3YzFhYTljY2RmYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjviNxaDZPmcLXB5ToQeMJz+ZVQJB
vixaR1BCgV2cGnt18LQgV+Eocanqe9+NuGW4wktzEkPm3X8brpyFZ4IYZRlRhb0Y
MOZxwbQ7+M2bceiRZzAAr4ByoJnqruIKtiG3MUt2rq3I4pQAqVFFOWs0WgwuLBn7
L2MCOAT32QzhTNl7/uEpU4krz4OijNYiH/LA8saP2k3cz/PPqgOVY/9VF7V/JoX3
slUF76s39gGKLqnLXGQjCT+V9xZjfzRbgUV2SySDnxh6OztJc9MOrhb9cR7s0OFd
YjsCH7qjo+Cpbec0pSrOYzi1vYiDvkYdxQQkmxZSXi4kQG2RPdfe89SAfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPQwi9q7VhL+Y/PE9wEnwaqczftQMB8GA1UdIwQY
MBaAFD6r4Cjzvn7gcohdArvXtiplJCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEt
ZGY3NDEwYjJkMjc1LzEvOURDTDJydFdFdjVqODhUM0FTZkJxcHpOLTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEtZGY3NDEwYjJkMjc1
LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALV0VMA0E
AgACMAcDBQMqEqCAMA0GCSqGSIb3DQEBCwUAA4IBAQAxaG5OjWO2DQeL8RqG/z4W
ZJeV1nIXUbddyI+QmU6JQ+soZRgCkFrGoFynrquuV/eMbHjaSaptieyBecueQibE
tE+3BeEvlIBgqgf5MV7ecmmqEljreV80awIi6KSSYGrKjxDiSRJUj/hjEB5frQKu
jxI/pHw2Z3OCUTdBlwKTmaBvNlDk3M9dni+Je2dkwEXngI37c9dYgSBmbPsnfOOw
U4yIHT5/e6yIont+lngAr/iOJ2f4RKVP3gqYWCFT7t4bWMut/PPwU/XzPGEFYc1z
HIAL5+HIMNZpGXtVZAeqs6x3oDRawPbTTDSxLkDP69FaoLS37hbiZ1EKmKArEdw6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:57 2024 by rpki-client on console-fra.rpki-client.org