Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/vIp8TcUkqOevEaJsuHtVL-X6lQk.roa
File: vIp8TcUkqOevEaJsuHtVL-X6lQk.roa (raw, json)
Hash identifier: 5MJlrojI+xBhlyvM+kPtK5kmJHLHGOErmM5q6pFfZE8=
Subject key identifier: BC:8A:7C:4D:C5:24:A8:E7:AF:11:A2:6C:B8:7B:55:2F:E5:FA:95:09
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 018517F7D5A2E076BD8116B551D6CA660BE9
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/vIp8TcUkqOevEaJsuHtVL-X6lQk.roa
Signing time: Thu 15 Dec 2022 22:46:35 +0000
ROA not before: Thu 15 Dec 2022 22:46:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 45.80.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:f7:d5:a2:e0:76:bd:81:16:b5:51:d6:ca:66:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Dec 15 22:46:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc8a7c4dc524a8e7af11a26cb87b552fe5fa9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:2e:dd:66:4b:15:36:7a:99:8b:15:0b:65:
e9:0d:c8:b4:b9:ff:74:4a:93:20:c7:31:c7:f7:cf:
f5:ac:66:0f:82:6d:0b:1c:be:d6:04:8b:19:5a:2a:
36:8b:49:c4:2c:cc:a3:3a:54:97:88:91:91:2d:df:
ba:cd:2b:7e:41:f7:97:ef:2b:b4:0f:01:20:fa:d7:
0d:bc:bd:58:c9:e4:56:bf:58:f8:10:42:50:fb:41:
82:7c:70:e2:e6:53:1c:9b:0f:72:36:b3:64:8d:a9:
68:a6:11:2a:38:5b:7c:bc:50:7b:16:45:06:80:4f:
89:31:86:7d:cf:73:0d:30:0e:92:5c:9d:96:8e:dd:
19:94:ab:89:07:3c:f4:90:16:f0:d9:1f:cf:72:b4:
bd:7a:de:04:bb:b1:05:45:25:28:3b:6a:f1:34:c9:
6a:7d:73:30:b2:3f:c3:2a:b3:aa:e9:c8:d6:16:a6:
00:4f:c8:3b:c8:ee:16:76:98:da:f8:87:9d:e4:48:
37:04:32:5b:0c:34:f5:e5:8e:f0:08:e7:a6:73:04:
13:b6:c2:2d:76:b2:57:38:5d:68:d6:dd:ac:bd:aa:
33:1a:55:07:44:fb:1b:43:89:e7:d5:97:8a:ca:69:
16:7e:67:49:a2:2d:e5:47:d1:4e:b4:11:17:8e:12:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:7C:4D:C5:24:A8:E7:AF:11:A2:6C:B8:7B:55:2F:E5:FA:95:09
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/vIp8TcUkqOevEaJsuHtVL-X6lQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a7:58:28:62:77:d2:57:ed:5b:06:66:14:e9:ea:a4:01:46:
89:67:82:f9:65:b8:fd:71:5e:78:71:85:53:d0:5c:e9:3d:31:
46:24:ac:8f:b3:70:08:da:ce:9a:c9:75:a1:4d:64:7f:37:f9:
16:b4:bb:15:2a:bd:1a:d6:d4:2f:af:41:45:a6:84:c6:ca:dc:
d6:a8:ce:ca:c0:bd:d2:66:d5:b0:f3:16:f5:5b:ab:1d:ef:57:
d5:16:15:58:95:b1:25:d0:68:7a:30:17:29:9e:1a:c1:65:2b:
1b:d4:1f:00:f9:a4:e6:59:36:1d:e6:02:75:03:24:4d:3c:ca:
e7:1b:46:d0:41:2f:68:bc:51:72:ff:87:41:ad:33:3b:05:c7:
00:f9:cb:2d:dd:3b:d5:d1:87:f0:24:d7:48:d4:33:fd:1e:26:
0b:1e:8d:de:f1:71:c7:46:49:3e:2d:89:46:6f:8c:82:ea:e6:
49:c5:11:6f:c9:ba:fd:5c:78:23:ac:7c:b1:fd:5b:0a:41:e9:
cd:49:40:9f:b0:07:f0:43:7a:92:15:9f:72:ce:69:39:b3:f9:
32:83:8d:03:d7:d2:20:d5:f9:c4:f2:3a:8c:43:67:85:e5:0e:
db:2d:38:c2:b6:72:af:2e:67:13:44:fe:73:92:8c:4a:8c:7c:
f2:58:fa:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUX99Wi4Ha9gRa1UdbKZgvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl
OGMwNGYwHhcNMjIxMjE1MjI0NjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzhhN2M0ZGM1MjRhOGU3YWYxMWEyNmNiODdiNTUyZmU1ZmE5NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNcu3WZLFTZ6mYsVC2XpDci0uf90
SpMgxzHH98/1rGYPgm0LHL7WBIsZWio2i0nELMyjOlSXiJGRLd+6zSt+QfeX7yu0
DwEg+tcNvL1YyeRWv1j4EEJQ+0GCfHDi5lMcmw9yNrNkjalophEqOFt8vFB7FkUG
gE+JMYZ9z3MNMA6SXJ2Wjt0ZlKuJBzz0kBbw2R/PcrS9et4Eu7EFRSUoO2rxNMlq
fXMwsj/DKrOq6cjWFqYAT8g7yO4Wdpja+Ied5Eg3BDJbDDT15Y7wCOemcwQTtsIt
drJXOF1o1t2svaozGlUHRPsbQ4nn1ZeKymkWfmdJoi3lR9FOtBEXjhJQaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyKfE3FJKjnrxGibLh7VS/l+pUJMB8GA1UdIwQY
MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt
NDRmZDA0MzkzZTJiLzEvdklwOFRjVWtxT2V2RWFKc3VIdFZMLVg2bFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi
LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAxMA0G
CSqGSIb3DQEBCwUAA4IBAQAop1goYnfSV+1bBmYU6eqkAUaJZ4L5Zbj9cV54cYVT
0FzpPTFGJKyPs3AI2s6ayXWhTWR/N/kWtLsVKr0a1tQvr0FFpoTGytzWqM7KwL3S
ZtWw8xb1W6sd71fVFhVYlbEl0Gh6MBcpnhrBZSsb1B8A+aTmWTYd5gJ1AyRNPMrn
G0bQQS9ovFFy/4dBrTM7BccA+cst3TvV0YfwJNdI1DP9HiYLHo3e8XHHRkk+LYlG
b4yC6uZJxRFvybr9XHgjrHyx/VsKQenNSUCfsAfwQ3qSFZ9yzmk5s/kyg40D19Ig
1fnE8jqMQ2eF5Q7bLTjCtnKvLmcTRP5zkoxKjHzyWPoI
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:05 2023 by rpki-client on console-ams.rpki-client.org