Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bjM4lZ6ZiuJDx6lOjg5-EU9eFsg.roa
File: bjM4lZ6ZiuJDx6lOjg5-EU9eFsg.roa (raw, json)
Hash identifier: ucbkzsGsOzq5YGKvbsNO/V4Fkh5UBoDjYWhZRSr4k3s=
Subject key identifier: 6E:33:38:95:9E:99:8A:E2:43:C7:A9:4E:8E:0E:7E:11:4F:5E:16:C8
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 0524C6F7
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bjM4lZ6ZiuJDx6lOjg5-EU9eFsg.roa
Signing time: Fri 13 May 2022 06:29:02 +0000
ROA not before: Fri 13 May 2022 06:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 45.130.204.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86296311 (0x524c6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: May 13 06:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e3338959e998ae243c7a94e8e0e7e114f5e16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:5e:ff:06:ec:43:f2:43:69:47:5e:54:40:
e6:b8:ed:4c:a5:c2:c9:c0:02:63:45:26:8a:b2:3f:
65:f4:6e:b0:a7:ee:97:89:bc:9b:c1:2d:ea:fa:35:
2a:bc:90:ea:bd:e5:ba:24:43:43:85:d7:5f:a5:bb:
80:31:c8:e2:2c:11:3a:33:cb:e2:58:1b:cf:50:d5:
99:d5:14:f2:64:b7:22:38:8d:93:ca:5f:dc:2f:43:
35:90:ff:cb:4f:f6:de:1e:ad:12:4c:9b:9b:21:d5:
ed:84:1c:df:ef:aa:e0:6b:33:17:3e:d0:a9:7c:b7:
aa:c8:8b:13:6b:f0:64:ac:d3:80:57:e1:ea:f1:ce:
15:98:ae:19:9c:0d:7a:89:a7:3c:d7:d8:90:54:f9:
77:69:d0:e9:4c:d6:d6:87:14:e8:84:79:5d:37:64:
a7:31:75:35:c7:b4:ea:e0:ac:b7:c7:81:34:41:00:
fe:85:f9:24:24:12:38:eb:be:7b:e2:a9:9c:23:0a:
89:78:a6:15:fd:b4:a4:b2:c3:66:91:7b:6d:00:25:
e2:bd:3a:aa:9b:49:0d:16:bb:76:c5:3c:18:38:fb:
94:7b:36:43:5b:b8:e0:56:75:64:b9:b4:89:8a:11:
27:85:a7:c7:d3:eb:77:79:c5:2f:1c:78:6b:17:0e:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:38:95:9E:99:8A:E2:43:C7:A9:4E:8E:0E:7E:11:4F:5E:16:C8
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bjM4lZ6ZiuJDx6lOjg5-EU9eFsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.204.0/22
45.145.192.0/22
Signature Algorithm: sha256WithRSAEncryption
27:22:eb:91:5f:40:43:93:17:52:f1:e3:bf:28:86:bb:69:62:
da:20:28:7c:89:d7:05:01:46:87:e0:59:bf:ee:69:5c:2f:1a:
ea:e3:f9:fd:dc:1b:96:6c:15:52:c9:5d:f8:32:f6:6f:03:52:
b4:91:d3:d8:08:bf:ad:83:01:54:01:46:e4:9d:ea:9b:63:cf:
b7:88:3c:0d:87:25:05:39:02:c9:0d:60:47:58:e3:07:81:64:
1e:60:2d:21:7c:81:fc:9b:56:b9:96:73:4d:91:37:b0:2c:ad:
fd:c7:85:2e:5b:a4:6a:91:ac:f0:e4:95:bf:a7:0a:c2:94:75:
72:1a:cf:97:c4:11:de:ac:be:cc:e3:ba:07:2e:7d:21:9b:7d:
50:b7:0f:72:b8:13:1f:ea:e4:88:1c:44:01:93:b5:72:25:9a:
24:18:6e:99:ac:e4:45:1b:4c:76:61:09:d1:f4:4e:43:ea:5b:
6e:20:fc:b6:84:43:50:12:fd:e0:a7:5e:4b:e1:0f:d0:34:fb:
d3:48:67:7e:c2:58:83:ef:6e:99:7e:a9:50:2e:27:9d:cf:02:
9a:41:fd:df:5e:a7:a8:17:60:9c:98:90:a0:33:5a:82:27:dc:
50:e7:69:a9:0b:7b:9e:35:8f:8f:ab:e3:ad:33:f2:ac:39:45:
b9:fb:0d:71
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBSTG9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OGQ1ZTM3MTc4ZDg1MjRjNzI2NjBhMWQ3OTYxNjU5OTllNTg2NjIyMB4XDTIyMDUx
MzA2MjkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmUzMzM4OTU5ZTk5
OGFlMjQzYzdhOTRlOGUwZTdlMTE0ZjVlMTZjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMncXv8G7EPyQ2lHXlRA5rjtTKXCycACY0UmirI/ZfRusKfu
l4m8m8Et6vo1KryQ6r3luiRDQ4XXX6W7gDHI4iwROjPL4lgbz1DVmdUU8mS3IjiN
k8pf3C9DNZD/y0/23h6tEkybmyHV7YQc3++q4GszFz7QqXy3qsiLE2vwZKzTgFfh
6vHOFZiuGZwNeomnPNfYkFT5d2nQ6UzW1ocU6IR5XTdkpzF1Nce06uCst8eBNEEA
/oX5JCQSOOu+e+KpnCMKiXimFf20pLLDZpF7bQAl4r06qptJDRa7dsU8GDj7lHs2
Q1u44FZ1ZLm0iYoRJ4Wnx9Prd3nFLxx4axcORysCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRuMziVnpmK4kPHqU6ODn4RT14WyDAfBgNVHSMEGDAWgBTI1eNxeNhSTHJm
Ch15YWWZnlhmIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lOWGpjWGpZVWt4eVpnb2RlV0ZsbVo1WVppSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvYjU0Y2EzLTczZDUtNDk4NC04NzgyLTllMGFlZDJmYjhlYy8x
L2JqTTRsWjZaaXVKRHg2bE9qZzUtRVU5ZUZzZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
YjU0Y2EzLTczZDUtNDk4NC04NzgyLTllMGFlZDJmYjhlYy8xL3lOWGpjWGpZVWt4
eVpnb2RlV0ZsbVo1WVppSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2CzAMEAi2RwDANBgkqhkiG9w0B
AQsFAAOCAQEAJyLrkV9AQ5MXUvHjvyiGu2li2iAofInXBQFGh+BZv+5pXC8a6uP5
/dwblmwVUsld+DL2bwNStJHT2Ai/rYMBVAFG5J3qm2PPt4g8DYclBTkCyQ1gR1jj
B4FkHmAtIXyB/JtWuZZzTZE3sCyt/ceFLlukapGs8OSVv6cKwpR1chrPl8QR3qy+
zOO6By59IZt9ULcPcrgTH+rkiBxEAZO1ciWaJBhumazkRRtMdmEJ0fROQ+pbbiD8
toRDUBL94KdeS+EP0DT700hnfsJYg+9umX6pUC4nnc8CmkH9316nqBdgnJiQoDNa
gifcUOdpqQt7njWPj6vjrTPyrDlFufsNcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:29 2023 by rpki-client on console-fra.rpki-client.org