Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/c4iad39XiK-EjvTcDeWMU8gRgK0.roa
File: c4iad39XiK-EjvTcDeWMU8gRgK0.roa (raw, json)
Hash identifier: zPI4c0oc2l70VE1tNub3DhwfyjdQrEOjhPAZSmUzrgQ=
Subject key identifier: 73:88:9A:77:7F:57:88:AF:84:8E:F4:DC:0D:E5:8C:53:C8:11:80:AD
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 06102C62
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/c4iad39XiK-EjvTcDeWMU8gRgK0.roa
Signing time: Sat 01 Jan 2022 06:05:57 +0000
ROA not before: Sat 01 Jan 2022 06:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44558
IP address blocks: 45.130.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101723234 (0x6102c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Jan 1 06:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73889a777f5788af848ef4dc0de58c53c81180ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:03:9e:9d:01:08:48:0e:45:8c:4c:59:32:
9a:9c:4c:ef:bf:0b:05:fa:1d:36:11:c2:1a:9b:b1:
29:f3:1f:7c:c8:6c:f2:11:96:cc:1b:06:45:44:6b:
88:8c:d2:11:15:86:33:42:73:76:80:47:6c:ca:69:
c2:aa:b5:4c:0f:ba:ea:e3:c7:10:d4:64:20:4b:26:
26:0b:a7:33:ae:0c:7d:b3:86:07:18:49:5b:c2:58:
ed:8c:95:68:ff:0b:c4:df:04:75:29:bb:a9:19:ca:
e4:56:ef:de:17:64:66:a0:ac:3c:10:af:44:60:f3:
c9:d8:e1:60:3d:01:a1:ca:c4:da:ce:cd:b6:5a:d7:
77:83:4b:91:99:f8:86:9c:2e:da:6e:22:a2:ab:b2:
ba:98:46:b5:10:0a:21:e6:21:52:9e:7d:2e:90:41:
c7:4c:a7:a3:f2:91:cb:91:9c:4c:58:70:25:aa:18:
a7:44:80:ab:4d:5d:02:23:34:18:64:bb:84:0e:20:
f1:62:e0:0b:c0:fb:01:69:f1:cd:dc:6a:80:6d:9a:
17:93:e9:8c:6d:cd:aa:d7:0c:1a:f0:f8:96:fd:bc:
dd:e8:64:f3:15:c2:e4:18:e8:9d:84:11:c3:f8:3a:
7f:d7:35:3a:b2:c6:6d:dd:4d:f0:13:83:8b:6b:2a:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:9A:77:7F:57:88:AF:84:8E:F4:DC:0D:E5:8C:53:C8:11:80:AD
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/c4iad39XiK-EjvTcDeWMU8gRgK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ee:80:53:cd:57:20:4d:a6:a5:85:7a:a2:d4:94:85:98:a0:
3f:6a:d7:d0:10:95:83:56:87:22:6b:ef:85:3f:7d:09:dd:07:
e1:2b:6b:e3:e2:ac:e6:f1:a7:9b:ec:c3:0e:97:81:11:a3:80:
98:91:34:9d:a9:b5:01:4b:aa:e0:c0:38:30:6c:0e:62:86:a0:
67:32:95:1e:d9:e2:16:b0:88:9d:33:f2:b5:5f:c8:59:2b:9c:
c4:3e:55:a2:10:b7:c5:cc:26:2b:4e:af:f5:54:77:01:0f:00:
3b:10:e9:48:f6:2a:f1:a0:cb:59:f2:14:d3:da:4f:85:ab:ec:
03:9e:9a:7f:46:63:f7:3b:6a:80:54:99:7b:b4:65:7b:ed:33:
8d:44:1f:f0:9c:2e:a8:e7:54:fe:4f:c9:a8:33:6d:08:6a:48:
77:2e:ba:29:80:3a:33:bf:42:ea:c8:34:f0:bf:f1:1f:98:43:
57:c0:6b:65:c3:40:da:ae:3f:8e:c8:66:33:9c:20:2b:bb:37:
ef:0f:3b:bc:6f:63:1f:a6:e5:49:e4:08:0c:5c:5b:f2:1b:6d:
d1:88:ad:2f:c6:0a:4e:14:8b:5b:e1:a2:68:ba:e3:e4:20:ce:
4a:18:a4:05:e9:f3:85:87:3a:fe:ca:7e:7e:82:c2:b4:4e:1d:
70:eb:30:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhAsYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZmY5MmQ5MzY4YTA5YWQzNmY3YTU3ZWRmYmQwYTA1ZDlmZDQwZTFkMB4XDTIyMDEw
MTA2MDU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM4ODlhNzc3ZjU3
ODhhZjg0OGVmNGRjMGRlNThjNTNjODExODBhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALn5A56dAQhIDkWMTFkympxM778LBfodNhHCGpuxKfMffMhs
8hGWzBsGRURriIzSERWGM0JzdoBHbMppwqq1TA+66uPHENRkIEsmJgunM64MfbOG
BxhJW8JY7YyVaP8LxN8EdSm7qRnK5Fbv3hdkZqCsPBCvRGDzydjhYD0BocrE2s7N
tlrXd4NLkZn4hpwu2m4ioquyuphGtRAKIeYhUp59LpBBx0yno/KRy5GcTFhwJaoY
p0SAq01dAiM0GGS7hA4g8WLgC8D7AWnxzdxqgG2aF5PpjG3NqtcMGvD4lv283ehk
8xXC5BjonYQRw/g6f9c1OrLGbd1N8BODi2sqYjMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRziJp3f1eIr4SO9NwN5YxTyBGArTAfBgNVHSMEGDAWgBTv+S2TaKCa0296
V+370KBdn9QOHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzdfa3RrMmlnbXROdmVsZnQtOUNnWFpfVURoMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvN2Y3MjU5LTUzZDAtNDFhZS05NTFkLTQwMDQxN2M5NzE3ZS8x
L2M0aWFkMzlYaUstRWp2VGNEZVdNVThnUmdLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
N2Y3MjU5LTUzZDAtNDFhZS05NTFkLTQwMDQxN2M5NzE3ZS8xLzdfa3RrMmlnbXRO
dmVsZnQtOUNnWFpfVURoMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2CnDANBgkqhkiG9w0BAQsFAAOC
AQEAAO6AU81XIE2mpYV6otSUhZigP2rX0BCVg1aHImvvhT99Cd0H4Str4+Ks5vGn
m+zDDpeBEaOAmJE0nam1AUuq4MA4MGwOYoagZzKVHtniFrCInTPytV/IWSucxD5V
ohC3xcwmK06v9VR3AQ8AOxDpSPYq8aDLWfIU09pPhavsA56af0Zj9ztqgFSZe7Rl
e+0zjUQf8JwuqOdU/k/JqDNtCGpIdy66KYA6M79C6sg08L/xH5hDV8BrZcNA2q4/
jshmM5wgK7s37w87vG9jH6blSeQIDFxb8htt0YitL8YKThSLW+GiaLrj5CDOShik
BenzhYc6/sp+foLCtE4dcOswsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:28 2024 by rpki-client on console-ams.rpki-client.org