Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/pvgzBYV1hcQb1RKxT6M8IRBxCYM.roa
File: pvgzBYV1hcQb1RKxT6M8IRBxCYM.roa (raw, json)
Hash identifier: HhHfznI1i7Lp5WCHgh5PhnZIttjlh3yxz5D/sOgNBYk=
Subject key identifier: A6:F8:33:05:85:75:85:C4:1B:D5:12:B1:4F:A3:3C:21:10:71:09:83
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 014FC1
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/pvgzBYV1hcQb1RKxT6M8IRBxCYM.roa
Signing time: Thu 03 Mar 2022 21:03:13 +0000
ROA not before: Thu 03 Mar 2022 21:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208283
IP address blocks: 45.144.6.0/23 maxlen: 23
2a0e:e744::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85953 (0x14fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Mar 3 21:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f83305857585c41bd512b14fa33c2110710983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:d0:94:db:3b:e7:14:9c:ea:26:1e:20:ec:
5c:01:db:8c:fc:eb:3f:4f:8a:d6:95:c1:7b:bf:39:
9a:fe:d0:94:f1:b6:49:7b:a9:17:9b:c5:56:49:40:
b2:a3:2d:24:dc:49:ff:d3:aa:59:1c:56:8e:49:6f:
10:a0:16:fd:03:cc:e1:c9:ab:62:38:53:58:fa:08:
75:74:57:9f:94:90:1b:46:47:bf:26:fa:ca:86:d3:
62:1c:5e:7a:5a:60:15:d0:f8:86:d6:aa:d2:3c:67:
33:2d:94:79:45:fd:10:c7:7c:07:12:2d:14:42:32:
ae:64:fc:e6:9f:91:18:c5:7d:32:07:8b:29:12:10:
64:ec:74:80:de:c3:ae:ca:28:b1:5b:ee:c1:b1:c9:
90:f6:3c:4b:a3:32:c2:41:04:7b:51:83:db:04:cf:
54:2d:05:ac:40:c2:f6:ea:c0:f1:c2:89:f8:a4:b5:
a0:e7:a1:f4:80:cf:43:b2:b7:79:dc:10:0d:8b:65:
36:07:a3:c3:23:60:2c:4c:89:16:ff:11:01:4b:ee:
27:07:73:0f:1d:c2:28:ad:e0:9d:4d:10:f0:3a:a4:
d5:12:c8:ab:b7:79:81:00:c2:0e:2d:82:a7:10:82:
33:54:49:93:a9:ae:4a:d1:ad:a4:c6:f0:66:60:80:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:33:05:85:75:85:C4:1B:D5:12:B1:4F:A3:3C:21:10:71:09:83
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/pvgzBYV1hcQb1RKxT6M8IRBxCYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.6.0/23
IPv6:
2a0e:e744::/30
Signature Algorithm: sha256WithRSAEncryption
49:26:00:b8:62:b1:3a:c6:80:20:74:aa:e1:ae:2d:d0:f3:68:
14:15:e1:3c:c0:4f:95:2e:1e:ce:ee:05:98:4f:dc:1c:42:52:
a0:3e:ac:54:06:34:9a:fc:49:8e:cd:85:63:42:72:d5:d0:fb:
b2:68:48:f7:e6:b3:8a:24:0b:b1:45:d2:05:10:51:2f:be:d5:
cb:70:8f:45:da:22:6c:c2:01:80:a0:f5:a7:e5:f7:fc:bf:9f:
29:48:e9:eb:1a:f8:be:d7:79:3b:d7:0f:07:4a:4e:59:98:c6:
45:55:e3:c4:7b:88:5e:bd:c4:31:85:d4:b1:a1:a1:fa:86:84:
42:c4:20:98:00:d4:9a:e3:b3:6e:8c:24:8b:35:75:9e:d3:d2:
35:19:7c:0a:97:4c:9a:bb:e5:93:32:06:7f:2d:12:ef:fc:93:
26:d0:75:89:53:ec:72:59:31:5c:4d:44:46:8f:65:5d:cf:b7:
f7:b9:36:16:3c:c0:49:af:00:dd:f1:8b:23:2c:7a:04:2b:d9:
b2:8f:f9:a2:3f:08:b4:b1:9c:3d:e2:4e:8b:37:e4:b7:cc:cf:
2f:ab:9f:1e:7a:af:d3:27:0f:9e:91:97:68:57:85:fa:56:28:
44:f3:8e:9e:bf:95:50:30:80:a1:f4:61:ee:50:0b:38:1d:a0:
63:0d:98:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDAU/BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
OTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIxOGVjNmIwHhcNMjIwMzAz
MjEwMzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNmY4MzMwNTg1NzU4
NWM0MWJkNTEyYjE0ZmEzM2MyMTEwNzEwOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqIHQlNs75xSc6iYeIOxcAduM/Os/T4rWlcF7vzma/tCU8bZJ
e6kXm8VWSUCyoy0k3En/06pZHFaOSW8QoBb9A8zhyatiOFNY+gh1dFeflJAbRke/
JvrKhtNiHF56WmAV0PiG1qrSPGczLZR5Rf0Qx3wHEi0UQjKuZPzmn5EYxX0yB4sp
EhBk7HSA3sOuyiixW+7BscmQ9jxLozLCQQR7UYPbBM9ULQWsQML26sDxwon4pLWg
56H0gM9Dsrd53BANi2U2B6PDI2AsTIkW/xEBS+4nB3MPHcIoreCdTRDwOqTVEsir
t3mBAMIOLYKnEIIzVEmTqa5K0a2kxvBmYIAKBwIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFKb4MwWFdYXEG9USsU+jPCEQcQmDMB8GA1UdIwQYMBaAFKuXXbQ3jfynwpU7
htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5LzEv
cHZnekJZVjFoY1FiMVJLeFQ2TThJUkJ4Q1lNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8x
Yzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5LzEvcTVkZHREZU5fS2ZD
bFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZAGMA0EAgACMAcDBQIqDudEMA0G
CSqGSIb3DQEBCwUAA4IBAQBJJgC4YrE6xoAgdKrhri3Q82gUFeE8wE+VLh7O7gWY
T9wcQlKgPqxUBjSa/EmOzYVjQnLV0PuyaEj35rOKJAuxRdIFEFEvvtXLcI9F2iJs
wgGAoPWn5ff8v58pSOnrGvi+13k71w8HSk5ZmMZFVePEe4hevcQxhdSxoaH6hoRC
xCCYANSa47NujCSLNXWe09I1GXwKl0yau+WTMgZ/LRLv/JMm0HWJU+xyWTFcTURG
j2Vdz7f3uTYWPMBJrwDd8YsjLHoEK9myj/miPwi0sZw94k6LN+S3zM8vq58eeq/T
Jw+ekZdoV4X6VihE846ev5VQMICh9GHuUAs4HaBjDZhz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org