Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MlddEA3knaCpGeWrBFnS2L8i-3o.roa
File: MlddEA3knaCpGeWrBFnS2L8i-3o.roa (raw, json)
Hash identifier: whvfSRP7UFPm0Zjp+56SvaIO1db9YNKXlwGRB0P8RPY=
Subject key identifier: 32:57:5D:10:0D:E4:9D:A0:A9:19:E5:AB:04:59:D2:D8:BF:22:FB:7A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182D62F2263F441658D92EBFFDF27097C1C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MlddEA3knaCpGeWrBFnS2L8i-3o.roa
Signing time: Thu 25 Aug 2022 18:06:29 +0000
ROA not before: Thu 25 Aug 2022 18:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209408
IP address blocks: 45.66.224.0/22 maxlen: 22
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:2f:22:63:f4:41:65:8d:92:eb:ff:df:27:09:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 25 18:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32575d100de49da0a919e5ab0459d2d8bf22fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:fc:66:76:9b:11:7b:b1:1b:07:e6:52:b0:
a2:19:7c:46:4a:a7:71:b9:7f:cc:99:f7:30:8d:ff:
2d:1a:5a:38:98:e5:51:41:e8:78:89:dd:2a:a8:db:
53:a9:45:9b:cd:0d:06:ff:c4:61:a8:16:7e:f2:8f:
d2:76:01:cc:83:1e:ce:38:8f:44:92:2a:cc:89:fc:
a5:e9:f3:01:9e:82:b0:14:67:65:0e:11:74:3d:5f:
34:7e:52:16:6a:9f:96:bf:96:05:00:30:7d:ea:0d:
49:29:00:65:07:59:f9:50:08:09:4c:eb:60:c1:f7:
1e:b2:f0:c1:8f:37:e6:ba:da:d7:6b:9b:65:6d:25:
c6:34:ac:2c:3e:64:ca:8d:92:b3:39:96:b4:ce:7e:
7e:c5:ee:8b:bf:63:f5:a6:bb:06:78:40:f1:47:d9:
f8:56:09:ab:47:8d:6f:f7:90:38:84:36:2f:10:a0:
cd:a3:9e:ab:52:f2:86:fd:31:24:e3:c6:f0:1c:84:
0b:7a:7b:6c:f2:1f:79:d3:71:45:9f:c4:c9:b8:27:
c6:23:a3:a7:17:03:23:65:38:81:0f:60:d2:2f:36:
fa:13:70:38:68:df:3b:4a:3a:41:e9:b0:a1:54:cf:
75:5f:9d:d6:f3:21:32:54:18:ca:fb:ba:64:83:1a:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:57:5D:10:0D:E4:9D:A0:A9:19:E5:AB:04:59:D2:D8:BF:22:FB:7A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/MlddEA3knaCpGeWrBFnS2L8i-3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
11:21:2d:45:81:b1:c6:95:ca:c9:e7:7b:00:23:6c:60:89:6b:
ea:bc:f3:8c:65:2f:39:16:7f:44:9e:62:c0:c6:d5:f6:64:17:
3c:57:28:0e:44:9f:54:9d:03:1e:d0:e5:c3:22:3e:92:7a:bd:
da:d9:02:d0:7c:8a:f3:1b:bd:72:4a:ab:ef:ec:1a:fa:4b:c8:
fa:1d:97:92:d7:50:be:b2:8c:e7:3b:e3:d4:e7:5b:20:d7:9a:
47:01:23:15:bb:f8:57:ee:18:3e:ce:e0:ee:65:aa:ec:36:7e:
de:d6:c5:95:74:f7:a9:34:5d:ac:c1:35:60:91:44:90:fb:94:
8e:98:1b:ee:00:db:36:7e:d1:b5:aa:8b:0f:0d:cf:32:d1:b4:
da:7f:52:96:c7:e3:71:18:ee:e4:d8:9a:f7:77:e1:06:85:87:
4d:7a:24:3d:33:ef:eb:3a:22:c2:a6:63:c8:13:b8:3b:a0:d2:
51:cd:13:b5:c0:ea:6d:f1:56:2e:f7:bf:2b:44:15:e1:a6:ff:
9f:d3:b5:da:ce:7f:ba:0c:fe:1d:d3:dc:da:1c:ea:2d:5d:13:
36:e0:9e:71:59:90:84:ab:41:58:cd:83:dc:31:4d:70:fd:c5:
0d:0b:ec:87:56:ad:b5:93:60:e7:48:b3:95:85:69:e0:13:09:
7c:a7:2a:0a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYLWLyJj9EFljZLr/98nCXwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIwODI1MTgwNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjU3NWQxMDBkZTQ5ZGEwYTkxOWU1YWIwNDU5ZDJkOGJmMjJmYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9L8ZnabEXuxGwfmUrCiGXxGSqdx
uX/Mmfcwjf8tGlo4mOVRQeh4id0qqNtTqUWbzQ0G/8RhqBZ+8o/SdgHMgx7OOI9E
kirMifyl6fMBnoKwFGdlDhF0PV80flIWap+Wv5YFADB96g1JKQBlB1n5UAgJTOtg
wfcesvDBjzfmutrXa5tlbSXGNKwsPmTKjZKzOZa0zn5+xe6Lv2P1prsGeEDxR9n4
VgmrR41v95A4hDYvEKDNo56rUvKG/TEk48bwHIQLents8h9503FFn8TJuCfGI6On
FwMjZTiBD2DSLzb6E3A4aN87SjpB6bChVM91X53W8yEyVBjK+7pkgxobGwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDJXXRAN5J2gqRnlqwRZ0ti/Ivt6MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvTWxkZEVBM2tuYUNwR2VXckJGblMyTDhpLTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLULgMA0E
AgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IBAQARIS1FgbHGlcrJ53sAI2xg
iWvqvPOMZS85Fn9EnmLAxtX2ZBc8VygORJ9UnQMe0OXDIj6Ser3a2QLQfIrzG71y
Sqvv7Br6S8j6HZeS11C+soznO+PU51sg15pHASMVu/hX7hg+zuDuZarsNn7e1sWV
dPepNF2swTVgkUSQ+5SOmBvuANs2ftG1qosPDc8y0bTaf1KWx+NxGO7k2Jr3d+EG
hYdNeiQ9M+/rOiLCpmPIE7g7oNJRzRO1wOpt8VYu978rRBXhpv+f07Xazn+6DP4d
09zaHOotXRM24J5xWZCEq0FYzYPcMU1w/cUNC+yHVq21k2DnSLOVhWngEwl8pyoK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org