Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/s_D55N7lIRARB6JZeMS8kQdiBRI.roa
File: s_D55N7lIRARB6JZeMS8kQdiBRI.roa (raw, json)
Hash identifier: CiB6c/Z+sB2yu4yPh2HWuTGuty42EliCBTfY50OulvI=
Subject key identifier: B3:F0:F9:E4:DE:E5:21:10:11:07:A2:59:78:C4:BC:91:07:62:05:12
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 07F46842
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/s_D55N7lIRARB6JZeMS8kQdiBRI.roa
Signing time: Sat 01 Jan 2022 08:06:15 +0000
ROA not before: Sat 01 Jan 2022 08:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42864
IP address blocks: 45.132.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133457986 (0x7f46842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 1 08:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3f0f9e4dee521101107a25978c4bc9107620512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:30:f4:6e:20:a9:ef:d2:7a:fc:51:15:10:
19:1a:44:38:26:d3:95:5b:fc:b7:45:b3:77:51:6d:
94:3b:c1:c4:c7:de:50:f2:e1:d1:d1:fd:0d:bf:80:
f2:5b:48:0f:7a:05:84:1e:cc:8d:f4:bb:12:55:2f:
dc:8b:c2:88:c1:f8:9a:5b:19:50:05:0a:5e:1d:7c:
07:78:c2:3d:94:ad:43:8f:88:89:9a:5b:16:fc:e8:
6a:72:1b:90:bc:e7:6b:81:c3:de:e3:e5:1c:7e:bb:
d3:f8:ed:83:87:ac:49:46:a8:31:31:0e:da:21:a8:
5f:c2:26:1c:54:bb:e9:ab:70:6b:ee:13:f1:61:50:
88:35:38:9f:24:4d:af:b2:d9:41:cb:da:69:cf:dc:
13:2f:87:ef:f8:f4:6e:b8:aa:03:1b:7d:2e:a9:47:
7c:6e:25:84:b6:42:85:b2:d6:81:d0:3f:59:f5:b0:
df:15:98:10:fc:55:cc:20:c7:1b:93:ed:4e:4e:d1:
c7:4c:98:72:dc:24:f1:57:d7:57:a1:18:f7:00:f3:
ec:d9:01:27:9d:64:11:db:08:13:54:8d:53:00:c4:
97:a7:38:fa:d9:19:33:4d:3d:73:84:f3:1c:1e:2e:
db:1a:bd:42:37:ce:4c:47:c6:a5:c9:94:2f:d1:0a:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:F9:E4:DE:E5:21:10:11:07:A2:59:78:C4:BC:91:07:62:05:12
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/s_D55N7lIRARB6JZeMS8kQdiBRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/22
Signature Algorithm: sha256WithRSAEncryption
45:4b:a6:a0:c1:03:50:4f:a9:ff:31:2b:b7:4c:db:a3:bd:87:
64:70:41:ee:38:b3:98:f3:c6:ab:eb:a2:3d:42:6b:26:30:8f:
84:6d:5c:c4:68:ce:22:33:23:45:a8:8e:b3:4c:3c:8a:e7:53:
0e:77:83:f8:85:e5:6f:b3:d1:5f:29:34:36:7c:8b:ac:08:3f:
71:c5:a0:f1:1e:fd:05:d8:64:47:e2:d7:b1:69:d1:3c:6e:fc:
ba:6b:f6:cd:85:05:4b:f8:0c:3e:04:76:cf:06:0b:dc:60:1a:
6c:28:92:a6:29:7a:48:c6:f7:7f:a0:3a:b8:13:08:04:f7:1a:
2e:9d:2d:fd:03:12:8b:94:47:8a:9a:0e:23:f6:39:b5:da:41:
78:87:5c:03:57:4a:0a:fd:89:7c:24:ea:5c:3c:32:38:f1:a4:
9a:1d:8f:c1:90:c0:16:0a:ba:e8:54:29:6e:50:5c:2f:60:3d:
0a:b8:b4:3e:58:12:26:ac:11:5f:42:38:2b:c5:50:04:2a:ec:
6e:23:ac:ef:d6:ae:d9:94:ce:cf:05:20:e8:72:be:0c:6a:54:
b2:c0:b5:cf:cb:d5:d6:4a:90:7b:ec:3a:5b:c1:77:1e:d1:0e:
4c:f8:56:4c:d1:5e:f3:01:d8:73:a6:1a:6b:a3:5a:dd:97:13:
f5:1e:47:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/RoQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjUzYzA2Y2E3OTc2ZDczN2IyM2JjNzI3NjhhMjI4YzM5N2ZhZjJmMB4XDTIyMDEw
MTA4MDYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjNmMGY5ZTRkZWU1
MjExMDExMDdhMjU5NzhjNGJjOTEwNzYyMDUxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqMMPRuIKnv0nr8URUQGRpEOCbTlVv8t0Wzd1FtlDvBxMfe
UPLh0dH9Db+A8ltID3oFhB7MjfS7ElUv3IvCiMH4mlsZUAUKXh18B3jCPZStQ4+I
iZpbFvzoanIbkLzna4HD3uPlHH670/jtg4esSUaoMTEO2iGoX8ImHFS76atwa+4T
8WFQiDU4nyRNr7LZQcvaac/cEy+H7/j0briqAxt9LqlHfG4lhLZChbLWgdA/WfWw
3xWYEPxVzCDHG5PtTk7Rx0yYctwk8VfXV6EY9wDz7NkBJ51kEdsIE1SNUwDEl6c4
+tkZM009c4TzHB4u2xq9QjfOTEfGpcmUL9EKBjcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSz8Pnk3uUhEBEHoll4xLyRB2IFEjAfBgNVHSMEGDAWgBQfU8Bsp5dtc3sj
vHJ2iiKMOX+vLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gxUEFiS2VYYlhON0k3eHlkb29pakRsX3J5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvOGNhM2JjLWE4NzUtNDUwNy05MWNjLWJjZWZhNDU2NThjYy8x
L3NfRDU1TjdsSVJBUkI2SlplTVM4a1FkaUJSSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
OGNhM2JjLWE4NzUtNDUwNy05MWNjLWJjZWZhNDU2NThjYy8xL0gxUEFiS2VYYlhO
N0k3eHlkb29pakRsX3J5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2EZDANBgkqhkiG9w0BAQsFAAOC
AQEARUumoMEDUE+p/zErt0zbo72HZHBB7jizmPPGq+uiPUJrJjCPhG1cxGjOIjMj
RaiOs0w8iudTDneD+IXlb7PRXyk0NnyLrAg/ccWg8R79BdhkR+LXsWnRPG78umv2
zYUFS/gMPgR2zwYL3GAabCiSpil6SMb3f6A6uBMIBPcaLp0t/QMSi5RHipoOI/Y5
tdpBeIdcA1dKCv2JfCTqXDwyOPGkmh2PwZDAFgq66FQpblBcL2A9Cri0PlgSJqwR
X0I4K8VQBCrsbiOs79au2ZTOzwUg6HK+DGpUssC1z8vV1kqQe+w6W8F3HtEOTPhW
TNFe8wHYc6Yaa6Na3ZcT9R5Hdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org