Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/AwHPzQFyEGUhXkBVF9_GHvKwe_Q.roa
File: AwHPzQFyEGUhXkBVF9_GHvKwe_Q.roa (raw, json)
Hash identifier: f+DvtAUzjou+zR/lyQSqBf44spdN4GS9Egvi3Jo9J5U=
Subject key identifier: 03:01:CF:CD:01:72:10:65:21:5E:40:55:17:DF:C6:1E:F2:B0:7B:F4
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0903286F
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/AwHPzQFyEGUhXkBVF9_GHvKwe_Q.roa
Signing time: Tue 10 May 2022 03:11:59 +0000
ROA not before: Tue 10 May 2022 03:11:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.12.185.0/24 maxlen: 24
45.12.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151201903 (0x903286f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: May 10 03:11:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0301cfcd01721065215e405517dfc61ef2b07bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:12:c1:90:35:c9:1e:ce:1e:8d:b8:87:aa:
4d:48:98:d2:63:9a:a4:1b:8b:4a:9d:68:18:08:02:
9c:e6:1e:07:32:42:09:10:62:18:36:af:75:3b:6f:
cf:bf:c3:88:3d:d8:e3:0d:a7:6d:44:b5:54:5b:2a:
56:63:f7:ea:09:71:3b:ef:f3:e5:8a:6b:90:ef:4e:
da:a5:e6:14:75:96:ca:3d:2e:85:56:5d:46:bc:94:
05:18:fa:e9:46:49:ff:d2:56:4d:2e:2b:1d:83:d0:
12:6b:07:9f:4b:dc:e0:48:ad:ad:79:8c:06:f8:cb:
e3:16:85:db:da:46:80:b6:62:fe:66:aa:a3:a8:aa:
02:f1:a2:b5:3c:ea:e2:da:10:e3:d2:b3:46:a1:3a:
6c:64:2e:99:5f:d3:59:92:96:e7:95:88:e2:c3:9c:
56:f7:52:e4:ee:99:c1:38:97:05:ee:43:ed:f0:9c:
ad:c6:92:cb:5a:4f:84:d8:54:f3:40:72:41:b3:28:
eb:ae:a5:7a:6c:fa:c8:aa:3d:7f:c4:3d:d2:b5:7f:
b1:0d:ce:a3:c0:e6:b4:af:87:7d:59:fe:2f:f2:3a:
25:f2:a9:ad:8f:8f:91:32:de:83:36:c2:3f:eb:b6:
d6:f7:5a:ab:04:41:bc:43:b2:94:c8:a6:66:5f:4b:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:CF:CD:01:72:10:65:21:5E:40:55:17:DF:C6:1E:F2:B0:7B:F4
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/AwHPzQFyEGUhXkBVF9_GHvKwe_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0-45.12.186.255
Signature Algorithm: sha256WithRSAEncryption
00:5d:70:67:f6:78:66:03:36:e5:d8:53:41:94:75:3e:0e:38:
d4:43:96:4c:86:74:69:ae:5f:04:fc:4f:c4:9a:ae:e2:5c:d2:
76:51:f2:51:df:c1:74:18:aa:43:a6:5e:78:59:a1:f1:39:89:
5b:e9:cf:04:95:d4:88:f9:d6:1f:56:f9:0e:ed:9a:15:19:dd:
36:59:ee:c8:c6:71:e2:23:4f:3e:a1:aa:51:f4:f1:bf:8f:cb:
2a:41:66:fb:97:47:44:d1:9d:cc:cc:c7:23:f0:73:13:e7:4d:
c7:e3:b0:f5:ad:b9:cf:72:24:52:68:2e:00:4b:83:b4:f3:82:
0d:41:b6:e2:a9:8b:2a:f4:ea:7a:9f:e4:5f:1f:46:7d:e7:6c:
36:ea:a6:a7:1f:2b:24:a3:a9:47:3a:44:77:17:2a:22:a5:53:
ff:44:e8:cd:31:6c:79:3d:89:e9:f4:9c:42:5b:6e:6a:41:2e:
54:16:d5:52:ea:46:95:80:33:d3:f3:cf:0e:c7:33:03:34:5c:
d5:a1:d4:fb:6b:16:2a:85:ab:9e:ea:07:6e:ff:85:16:6c:1b:
9d:a3:99:12:f5:3d:54:26:b4:8b:3b:36:8c:b4:a6:4c:4a:43:
a0:92:c4:8a:b1:a4:18:1e:95:dc:6f:a3:77:ff:98:a6:0d:5c:
f5:47:4e:70
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECQMobzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTMwYjYzNWQzNTc0NjhkN2Y5MzJkM2UxZjU5ZDUzNzNjZjlmNDY1MB4XDTIyMDUx
MDAzMTE1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDMwMWNmY2QwMTcy
MTA2NTIxNWU0MDU1MTdkZmM2MWVmMmIwN2JmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKeLEsGQNckezh6NuIeqTUiY0mOapBuLSp1oGAgCnOYeBzJC
CRBiGDavdTtvz7/DiD3Y4w2nbUS1VFsqVmP36glxO+/z5YprkO9O2qXmFHWWyj0u
hVZdRryUBRj66UZJ/9JWTS4rHYPQEmsHn0vc4EitrXmMBvjL4xaF29pGgLZi/maq
o6iqAvGitTzq4toQ49KzRqE6bGQumV/TWZKW55WI4sOcVvdS5O6ZwTiXBe5D7fCc
rcaSy1pPhNhU80ByQbMo666lemz6yKo9f8Q90rV/sQ3Oo8DmtK+HfVn+L/I6JfKp
rY+PkTLegzbCP+u21vdaqwRBvEOylMimZl9LQIsCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQDAc/NAXIQZSFeQFUX38Ye8rB79DAfBgNVHSMEGDAWgBQKMLY101dGjX+T
LT4fWdU3PPn0ZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NqQzJOZE5YUm8xX2t5MC1IMW5WTnp6NTlHVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvMTc4NWYxLWFlMjMtNDBmMC04M2YyLTZkZWYzOThjZTVjOS8x
L0F3SFB6UUZ5RUdVaFhrQlZGOV9HSHZLd2VfUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
MTc4NWYxLWFlMjMtNDBmMC04M2YyLTZkZWYzOThjZTVjOS8xL0NqQzJOZE5YUm8x
X2t5MC1IMW5WTnp6NTlHVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALQy5AwQALQy6MA0GCSqGSIb3
DQEBCwUAA4IBAQAAXXBn9nhmAzbl2FNBlHU+DjjUQ5ZMhnRprl8E/E/Emq7iXNJ2
UfJR38F0GKpDpl54WaHxOYlb6c8EldSI+dYfVvkO7ZoVGd02We7IxnHiI08+oapR
9PG/j8sqQWb7l0dE0Z3MzMcj8HMT503H47D1rbnPciRSaC4AS4O084INQbbiqYsq
9Op6n+RfH0Z952w26qanHysko6lHOkR3FyoipVP/ROjNMWx5PYnp9JxCW25qQS5U
FtVS6kaVgDPT888OxzMDNFzVodT7axYqhaue6gdu/4UWbBudo5kS9T1UJrSLOzaM
tKZMSkOgksSKsaQYHpXcb6N3/5imDVz1R05w
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-ams.rpki-client.org