Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/Ju72aRgu7w8hJxENQ5_NXmASzss.roa
File: Ju72aRgu7w8hJxENQ5_NXmASzss.roa (raw, json)
Hash identifier: LzMBKPpErigGNRcQUQgmBA3o5iQWiThNOcKE5AyQND8=
Subject key identifier: 26:EE:F6:69:18:2E:EF:0F:21:27:11:0D:43:9F:CD:5E:60:12:CE:CB
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 02807320
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/Ju72aRgu7w8hJxENQ5_NXmASzss.roa
Signing time: Sat 01 Jan 2022 15:55:21 +0000
ROA not before: Sat 01 Jan 2022 15:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208265
IP address blocks: 45.149.181.0/24 maxlen: 24
45.149.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41972512 (0x2807320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Jan 1 15:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26eef669182eef0f2127110d439fcd5e6012cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:f2:76:60:41:bd:0f:ae:6b:1c:be:5f:19:
e4:b0:f7:fa:2c:7f:b3:39:a0:16:1a:4b:14:e2:1d:
be:1d:cb:77:27:dd:5a:b5:64:8e:82:c9:3f:f8:1e:
6a:a3:10:3e:28:bb:9c:1e:67:64:5f:0d:be:2a:ee:
d2:08:3a:56:6d:73:e0:1d:e1:85:d8:ab:9d:ad:f9:
a9:58:49:e2:39:b6:71:99:d9:02:c4:51:c7:80:1f:
2c:c4:e3:b2:0b:43:b5:97:b9:d1:4b:99:fa:b8:dd:
7c:95:e4:d9:1e:87:36:2f:6a:37:f9:71:5b:5d:cd:
bc:7d:a3:00:5a:e7:2a:38:fa:5b:df:60:7c:af:00:
9e:ff:81:50:ba:e8:10:a6:03:3d:de:80:ab:c3:ba:
4f:cd:ae:98:28:a2:90:43:e3:31:59:13:16:0f:ec:
75:87:d3:b4:f4:b6:31:c1:47:c1:de:26:84:30:0a:
ad:48:54:a5:5d:4b:06:49:4a:3c:b2:da:b0:88:9f:
c5:1e:6d:52:29:94:00:a3:3e:7b:3a:7d:26:2b:56:
ab:7a:fe:6d:2d:db:d3:a0:20:b7:df:c9:b0:8f:51:
18:59:12:b5:53:08:24:c7:87:3d:a1:5d:3a:70:d1:
17:a8:cc:ed:49:95:49:ff:cb:f5:3d:45:ed:7e:94:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:F6:69:18:2E:EF:0F:21:27:11:0D:43:9F:CD:5E:60:12:CE:CB
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/Ju72aRgu7w8hJxENQ5_NXmASzss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.180.0/23
Signature Algorithm: sha256WithRSAEncryption
51:1f:5d:0b:b9:55:04:e9:19:69:97:15:a1:d0:b2:11:bc:20:
67:0f:5e:eb:e9:fc:9f:e2:25:f9:0c:81:81:11:f0:84:dc:b6:
53:72:60:b6:3f:f8:9d:32:43:ed:eb:52:bf:da:48:9d:30:2a:
82:47:94:db:d0:f6:4b:e1:20:7b:27:1f:7c:64:88:cf:5b:67:
74:f7:6c:f3:54:f8:f5:50:ec:f2:63:da:52:24:e4:92:b9:39:
8f:a8:63:d1:5c:e0:9a:9e:73:6c:d5:9a:f9:4e:d8:3e:4a:7e:
3c:fd:21:c6:65:80:46:62:79:a5:03:d0:a3:9e:c9:82:00:2c:
0f:ee:b5:61:df:82:35:79:6f:38:7d:9c:b7:f7:aa:cd:a8:3e:
21:6c:6e:75:e6:84:2f:aa:6c:c0:93:e1:07:a5:88:97:25:1e:
8e:d6:a9:e2:bb:56:9f:00:36:55:45:1d:88:4f:3f:0a:08:14:
0e:8f:f2:21:e6:dc:a2:21:2b:c5:77:26:ef:59:e6:2e:1b:5b:
37:6a:b3:01:6e:a8:1c:4b:0c:bc:7d:0a:0e:55:01:0e:96:97:
19:08:b3:39:e5:45:9d:f0:23:3e:5e:38:25:52:4d:97:64:67:
58:68:f1:1e:52:e9:55:ad:67:c2:09:4e:db:f7:a1:1c:ce:d4:
40:1e:42:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAoBzIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZjEwN2UwNzk1MmMwNjkzNThjZDNmODJhYWVjZWI0YzY5NDgzY2E5MB4XDTIyMDEw
MTE1NTUyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZlZWY2NjkxODJl
ZWYwZjIxMjcxMTBkNDM5ZmNkNWU2MDEyY2VjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqs8nZgQb0Prmscvl8Z5LD3+ix/szmgFhpLFOIdvh3Ldyfd
WrVkjoLJP/geaqMQPii7nB5nZF8Nviru0gg6Vm1z4B3hhdirna35qVhJ4jm2cZnZ
AsRRx4AfLMTjsgtDtZe50UuZ+rjdfJXk2R6HNi9qN/lxW13NvH2jAFrnKjj6W99g
fK8Anv+BULroEKYDPd6Aq8O6T82umCiikEPjMVkTFg/sdYfTtPS2McFHwd4mhDAK
rUhUpV1LBklKPLLasIifxR5tUimUAKM+ezp9JitWq3r+bS3b06Agt9/JsI9RGFkS
tVMIJMeHPaFdOnDRF6jM7UmVSf/L9T1F7X6UKIkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQm7vZpGC7vDyEnEQ1Dn81eYBLOyzAfBgNVHSMEGDAWgBS/EH4HlSwGk1jN
P4Kq7OtMaUg8qTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Z4Qi1CNVVzQnBOWXpULUNxdXpyVEdsSVBLay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvN2UyOGVlLWM2NWQtNDUyOS1hNDdiLTQ4NjMzZDcxODU5MC8x
L0p1NzJhUmd1N3c4aEp4RU5RNV9OWG1BU3pzcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
N2UyOGVlLWM2NWQtNDUyOS1hNDdiLTQ4NjMzZDcxODU5MC8xL3Z4Qi1CNVVzQnBO
WXpULUNxdXpyVEdsSVBLay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2VtDANBgkqhkiG9w0BAQsFAAOC
AQEAUR9dC7lVBOkZaZcVodCyEbwgZw9e6+n8n+Il+QyBgRHwhNy2U3Jgtj/4nTJD
7etSv9pInTAqgkeU29D2S+EgeycffGSIz1tndPds81T49VDs8mPaUiTkkrk5j6hj
0Vzgmp5zbNWa+U7YPkp+PP0hxmWARmJ5pQPQo57JggAsD+61Yd+CNXlvOH2ct/eq
zag+IWxudeaEL6pswJPhB6WIlyUejtap4rtWnwA2VUUdiE8/CggUDo/yIebcoiEr
xXcm71nmLhtbN2qzAW6oHEsMvH0KDlUBDpaXGQizOeVFnfAjPl44JVJNl2RnWGjx
HlLpVa1nwglO2/ehHM7UQB5C8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org