Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa
File: rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa (raw, json)
Hash identifier: 5I8dEVAyrpJPdeKsaGQrg5KC1qwwdweqxaiyX0z6Tc0=
Subject key identifier: AE:01:FA:C1:77:AC:1C:F1:C4:54:4C:FA:92:D3:72:42:D4:24:E5:0F
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 03CA6A1A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa
Signing time: Sat 01 Jan 2022 02:56:34 +0000
ROA not before: Sat 01 Jan 2022 02:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 45.150.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63597082 (0x3ca6a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 02:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae01fac177ac1cf1c4544cfa92d37242d424e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:62:65:4c:99:df:63:5e:27:23:f8:36:ca:
2c:68:ab:68:41:89:5f:7b:51:de:09:d6:4b:94:62:
8a:02:b6:3a:e7:79:f1:da:cb:29:ac:16:87:f2:c9:
ab:83:b5:54:7d:19:fd:25:0c:66:9f:1c:bb:68:dd:
53:b6:02:82:21:59:f3:5f:91:e5:f0:13:f3:82:cf:
a7:52:17:01:0b:38:86:b9:b2:37:47:b9:30:7b:ec:
3f:74:db:a6:18:29:96:cb:bd:b7:a6:1d:c0:b3:5d:
05:df:02:4c:2d:71:90:f9:52:5d:ff:b2:e1:fe:b8:
dd:78:cd:8d:00:b7:fa:cc:15:92:33:c6:0d:79:bf:
9e:82:90:57:20:73:b5:20:bd:92:9b:88:7a:35:02:
86:fd:6e:04:68:b9:ed:9e:c0:18:89:02:b8:0a:0c:
3e:92:07:89:02:f6:8a:41:43:b0:07:ec:9c:fa:c7:
e5:6f:c5:e0:a6:94:3d:fd:70:84:1c:e7:e3:f3:35:
6e:5c:a6:9f:f3:fc:e9:33:0b:4f:1d:27:ad:f8:09:
ce:53:dd:48:d0:8e:b7:7c:a0:4f:6e:fc:dd:47:4f:
42:28:2e:db:dc:e5:af:de:f0:6a:12:a3:99:a6:de:
7f:2c:22:7c:63:33:4c:1b:be:13:5a:96:86:53:89:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:FA:C1:77:AC:1C:F1:C4:54:4C:FA:92:D3:72:42:D4:24:E5:0F
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/rgH6wXesHPHEVEz6ktNyQtQk5Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/24
Signature Algorithm: sha256WithRSAEncryption
30:75:89:e6:3f:6a:20:89:7c:93:da:6e:7d:54:0c:0e:e0:27:
68:05:c4:f3:c0:b6:a4:7c:0a:c8:09:67:d3:d5:7f:1d:82:0f:
3d:3d:8a:86:d5:ba:ed:7d:5c:cd:f4:b7:06:00:67:85:3d:38:
2c:35:3b:16:f9:e1:08:51:f5:9b:6c:bb:00:82:4a:c3:88:08:
a5:b1:93:74:87:16:35:eb:74:d6:bb:2e:eb:49:20:d9:13:59:
7d:0e:0e:55:02:22:07:ef:e8:72:f4:47:0d:92:e4:da:b9:33:
78:fd:9f:dc:0d:57:3e:ce:25:66:36:63:47:3c:ce:75:80:60:
25:32:fb:55:99:77:f5:c3:ac:58:06:d9:15:35:bc:ed:46:f1:
73:c4:b7:03:f5:78:b1:c2:c0:d7:89:83:ee:f4:b0:fe:ee:d3:
28:55:ec:a0:e3:5b:99:d6:49:b0:84:d7:81:5e:d6:c2:ad:a0:
18:8a:5b:6b:50:01:7f:c6:f3:cb:d0:e7:69:2b:a3:32:6e:37:
07:eb:b2:0f:43:b6:59:3a:0d:6d:54:42:01:e1:cf:36:91:f1:
97:45:96:33:a8:07:a6:eb:ce:e4:73:94:70:94:59:9b:f1:fd:
f6:e0:3c:9e:06:b3:13:ff:1c:83:7b:b6:89:65:e7:03:95:c6:
f3:9f:9c:64
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8pqGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjQ3MzgzODljYjNiOTk4ZWM0ZmE2ZDQyNzJmOGRkNzk5ZmJjNGE5MB4XDTIyMDEw
MTAyNTYzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWUwMWZhYzE3N2Fj
MWNmMWM0NTQ0Y2ZhOTJkMzcyNDJkNDI0ZTUwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUUYmVMmd9jXicj+DbKLGiraEGJX3tR3gnWS5RiigK2Oud5
8drLKawWh/LJq4O1VH0Z/SUMZp8cu2jdU7YCgiFZ81+R5fAT84LPp1IXAQs4hrmy
N0e5MHvsP3Tbphgplsu9t6YdwLNdBd8CTC1xkPlSXf+y4f643XjNjQC3+swVkjPG
DXm/noKQVyBztSC9kpuIejUChv1uBGi57Z7AGIkCuAoMPpIHiQL2ikFDsAfsnPrH
5W/F4KaUPf1whBzn4/M1blymn/P86TMLTx0nrfgJzlPdSNCOt3ygT2783UdPQigu
29zlr97wahKjmabefywifGMzTBu+E1qWhlOJ47kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSuAfrBd6wc8cRUTPqS03JC1CTlDzAfBgNVHSMEGDAWgBQfRzg4nLO5mOxP
ptQnL43XmfvEqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gwYzRPSnl6dVpqc1Q2YlVKeS1OMTVuN3hLay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNTE3Njk0LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkwYy8x
L3JnSDZ3WGVzSFBIRVZFejZrdE55UXRRazVROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
NTE3Njk0LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkwYy8xL0gwYzRPSnl6dVpq
c1Q2YlVKeS1OMTVuN3hLay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2WxDANBgkqhkiG9w0BAQsFAAOC
AQEAMHWJ5j9qIIl8k9pufVQMDuAnaAXE88C2pHwKyAln09V/HYIPPT2KhtW67X1c
zfS3BgBnhT04LDU7FvnhCFH1m2y7AIJKw4gIpbGTdIcWNet01rsu60kg2RNZfQ4O
VQIiB+/ocvRHDZLk2rkzeP2f3A1XPs4lZjZjRzzOdYBgJTL7VZl39cOsWAbZFTW8
7Ubxc8S3A/V4scLA14mD7vSw/u7TKFXsoONbmdZJsITXgV7Wwq2gGIpba1ABf8bz
y9DnaSujMm43B+uyD0O2WToNbVRCAeHPNpHxl0WWM6gHpuvO5HOUcJRZm/H99uA8
ngazE/8cg3u2iWXnA5XG85+cZA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org