Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/w1fOBYhsG7ZHBgkH-hkcwEzviXo.roa
File: w1fOBYhsG7ZHBgkH-hkcwEzviXo.roa (raw, json)
Hash identifier: 83XBAApwPh64JwCCplLDepfiaDAp90S2+T+PGI3y7cA=
Subject key identifier: C3:57:CE:05:88:6C:1B:B6:47:06:09:07:FA:19:1C:C0:4C:EF:89:7A
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 08274FA5
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/w1fOBYhsG7ZHBgkH-hkcwEzviXo.roa
Signing time: Wed 29 Jun 2022 06:02:02 +0000
ROA not before: Wed 29 Jun 2022 06:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.132.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136794021 (0x8274fa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jun 29 06:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c357ce05886c1bb647060907fa191cc04cef897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:14:ed:f2:b3:3c:67:78:ab:9b:b3:59:3f:
07:f2:2e:59:40:44:01:e4:a9:21:f5:55:81:e5:c3:
16:af:f3:66:5b:e0:51:bc:b5:af:b8:5b:53:25:1a:
a7:92:4a:10:12:0e:47:cc:7a:3a:78:8e:bd:90:ca:
f7:79:81:57:c6:ae:49:a4:fc:0c:f5:8c:c7:fc:da:
84:18:02:a3:59:ab:34:bf:fe:97:10:bc:e9:3d:fb:
46:b0:32:57:3c:04:a8:7d:d7:2f:cc:81:bd:52:6a:
fb:35:2d:f6:cd:6f:56:39:41:c6:58:21:e3:b6:d5:
63:74:47:cd:ae:ba:fe:b2:7e:a8:f8:c0:4d:52:4e:
d5:b0:c4:0e:6c:75:d0:04:0a:b4:a6:86:8d:3a:d4:
f1:3c:97:31:54:ff:21:4d:59:9b:cf:81:3e:aa:19:
82:be:0b:a4:0f:f5:ec:a4:eb:bf:a7:ba:0b:6a:df:
d0:98:52:58:63:70:87:dc:69:bf:55:80:c8:fc:1b:
e3:3f:57:f9:26:2a:a3:7c:17:ef:de:72:fc:73:90:
ff:09:29:dc:98:82:35:87:85:88:a5:e5:7b:67:fd:
a0:99:ea:0c:31:a3:22:a4:ae:dd:d2:25:85:85:8d:
dc:2a:6e:70:69:3e:35:f6:08:ca:de:dc:ce:d4:06:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:CE:05:88:6C:1B:B6:47:06:09:07:FA:19:1C:C0:4C:EF:89:7A
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/w1fOBYhsG7ZHBgkH-hkcwEzviXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a2:af:aa:36:90:44:a7:66:07:96:fb:1a:24:13:cf:a5:13:
33:8c:a2:c6:ef:45:55:67:40:f1:a7:6b:67:3f:d9:18:3e:c7:
10:07:f4:d7:9b:54:54:89:21:c1:68:d2:44:be:8a:36:18:f9:
94:e7:52:40:18:9b:ee:b9:0a:d5:66:a5:fc:00:25:4a:3e:62:
46:bd:b3:5a:f9:1f:2b:be:f0:0c:64:22:9b:c0:9c:c6:75:11:
45:a8:60:c6:46:2e:f4:b4:96:c2:fe:35:10:81:72:67:57:cd:
b7:26:31:66:a3:e6:4d:0d:f6:ca:d4:4d:11:2e:0e:88:0e:9e:
87:b2:42:ef:80:3c:ef:b5:b4:76:79:dc:0d:99:46:c5:bf:18:
58:60:95:98:94:ff:21:65:8b:28:47:c9:29:1f:5f:ad:e3:91:
52:65:8e:17:37:5e:00:f7:a7:cc:45:6e:7f:50:2b:f5:2f:20:
25:8f:05:cf:fd:99:65:21:43:28:ee:a5:3e:be:49:f3:fa:8f:
fa:c5:29:11:ee:e7:19:48:41:de:53:7e:6c:ce:37:66:2a:76:
9e:00:13:06:26:fb:0c:0a:0e:63:37:ef:e8:0b:35:18:e2:c5:
9b:d1:d2:25:a3:08:2c:83:7c:48:ce:23:40:0f:42:37:6e:d8:
d1:2b:06:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECCdPpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzE4YjczNDM0OWJmMzI3ZDk0NTNiOTY1MDFlNDRiMTkyZTU1MTQyMB4XDTIyMDYy
OTA2MDIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM1N2NlMDU4ODZj
MWJiNjQ3MDYwOTA3ZmExOTFjYzA0Y2VmODk3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGAFO3yszxneKubs1k/B/IuWUBEAeSpIfVVgeXDFq/zZlvg
Uby1r7hbUyUap5JKEBIOR8x6OniOvZDK93mBV8auSaT8DPWMx/zahBgCo1mrNL/+
lxC86T37RrAyVzwEqH3XL8yBvVJq+zUt9s1vVjlBxlgh47bVY3RHza66/rJ+qPjA
TVJO1bDEDmx10AQKtKaGjTrU8TyXMVT/IU1Zm8+BPqoZgr4LpA/17KTrv6e6C2rf
0JhSWGNwh9xpv1WAyPwb4z9X+SYqo3wX795y/HOQ/wkp3JiCNYeFiKXle2f9oJnq
DDGjIqSu3dIlhYWN3CpucGk+NfYIyt7cztQGubUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTDV84FiGwbtkcGCQf6GRzATO+JejAfBgNVHSMEGDAWgBQ3GLc0NJvzJ9lF
O5ZQHkSxkuVRQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L054aTNORFNiOHlmWlJUdVdVQjVFc1pMbFVVSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvN2JmOGE4LWU0OWMtNDA2ZS04ZWI3LWM4MjNjYzhmMzgzNy8x
L3cxZk9CWWhzRzdaSEJna0gtaGtjd0V6dmlYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
N2JmOGE4LWU0OWMtNDA2ZS04ZWI3LWM4MjNjYzhmMzgzNy8xL054aTNORFNiOHlm
WlJUdVdVQjVFc1pMbFVVSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2EGTANBgkqhkiG9w0BAQsFAAOC
AQEAoaKvqjaQRKdmB5b7GiQTz6UTM4yixu9FVWdA8adrZz/ZGD7HEAf015tUVIkh
wWjSRL6KNhj5lOdSQBib7rkK1Wal/AAlSj5iRr2zWvkfK77wDGQim8CcxnURRahg
xkYu9LSWwv41EIFyZ1fNtyYxZqPmTQ32ytRNES4OiA6eh7JC74A877W0dnncDZlG
xb8YWGCVmJT/IWWLKEfJKR9freORUmWOFzdeAPenzEVuf1Ar9S8gJY8Fz/2ZZSFD
KO6lPr5J8/qP+sUpEe7nGUhB3lN+bM43Zip2ngATBib7DAoOYzfv6As1GOLFm9HS
JaMILIN8SM4jQA9CN27Y0SsGqw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org