Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uuUFdkJ7VLvNu87O72BYBmG7wlU.roa
File: uuUFdkJ7VLvNu87O72BYBmG7wlU.roa (raw, json)
Hash identifier: NsLy/iEJRzqiGnMTvnf9xpCCuWubCjfObiqjn+Xne1w=
Subject key identifier: BA:E5:05:76:42:7B:54:BB:CD:BB:CE:CE:EF:60:58:06:61:BB:C2:55
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 010073F6
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uuUFdkJ7VLvNu87O72BYBmG7wlU.roa
Signing time: Sat 01 Jan 2022 13:01:02 +0000
ROA not before: Sat 01 Jan 2022 13:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213167
IP address blocks: 45.132.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16806902 (0x10073f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 13:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae50576427b54bbcdbbceceef60580661bbc255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:b7:f2:28:84:44:16:e1:f5:b3:fa:74:83:
0e:f1:19:4b:90:78:74:59:a0:22:cb:af:4f:8d:2e:
5d:ce:c8:cb:5d:d1:69:a4:c4:d2:c2:39:bd:51:37:
02:94:53:fc:ff:97:ff:02:f7:b3:3a:a6:9d:0f:58:
39:f9:b1:50:46:59:37:f0:ae:de:91:a0:c4:b7:1e:
08:55:3f:d0:ae:5c:9f:7e:6a:51:b0:76:ab:6e:91:
fe:65:49:09:99:b7:e6:3d:f1:24:77:94:7d:3d:53:
40:7f:fa:b6:4e:a2:8b:55:83:f7:be:ea:a2:0a:29:
c4:08:2e:93:d5:91:ac:2d:53:a1:12:3f:55:e6:d4:
a2:8a:ef:e1:43:df:2f:21:28:81:75:da:fc:7e:d1:
9b:55:67:1d:6b:4d:cb:b1:7f:e5:17:c5:55:8e:2c:
de:4e:e1:2b:aa:6f:f8:38:0c:1e:9d:fa:2e:46:a6:
02:56:c1:6e:b9:e5:f3:eb:0a:c4:81:1a:e6:f1:d6:
ef:f1:db:35:30:53:56:f0:70:bf:22:26:29:0a:98:
3f:60:d1:9f:c4:a2:ab:d1:a1:7f:ad:cf:24:ac:f2:
bd:03:b6:5a:2a:14:d5:92:58:dc:8f:7b:21:c0:3b:
04:cf:4a:9d:e2:76:d1:d9:d3:8b:e9:09:73:21:ac:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:05:76:42:7B:54:BB:CD:BB:CE:CE:EF:60:58:06:61:BB:C2:55
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uuUFdkJ7VLvNu87O72BYBmG7wlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.114.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e0:25:30:89:84:fd:50:d0:48:49:4e:3d:60:4d:bd:c8:81:
5d:dd:7a:93:e1:25:e7:a7:0a:f8:7d:34:a2:9b:e3:6a:7b:2c:
98:d9:ea:2a:6c:9f:7f:e7:69:a2:f7:2e:cb:d1:1d:b2:22:d4:
83:a1:64:fb:75:7a:31:3d:24:65:16:98:21:c4:00:47:c8:6d:
5f:e4:24:c3:ea:e1:cf:99:d4:1f:33:16:2b:20:4f:a1:33:0c:
cb:cc:7d:1b:11:d9:23:1d:77:d6:a9:27:14:9b:b8:1f:0d:64:
f8:2f:97:8c:1e:c3:09:b3:f0:9e:d7:97:5a:ed:53:94:5e:a4:
b6:4f:2d:db:19:8b:50:f4:3d:ca:a4:e5:24:78:c0:7f:ea:22:
bb:e7:bd:43:33:43:02:ad:43:ae:f6:a2:af:d2:3b:ba:f0:01:
8f:8a:9e:39:a1:06:df:4c:60:42:bf:4b:24:82:fe:18:53:ff:
6d:d5:cc:28:90:33:9d:f9:19:19:96:e6:a6:52:c3:35:a2:8f:
3a:eb:af:13:92:d7:24:3f:71:cd:ce:69:2e:af:5f:66:12:39:
73:1b:75:0a:7b:53:ad:ad:6b:60:36:79:3c:d3:df:38:9d:6a:
8f:ee:7c:0f:63:be:64:6f:41:ac:b4:15:7b:8a:47:74:3b:cf:
70:b3:10:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQBz9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MmQyMWU4MDRhYjc3MTNhZDc4NzdkZGU2MDNhYTc4MjRiMzE5ODNjMB4XDTIyMDEw
MTEzMDEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFlNTA1NzY0Mjdi
NTRiYmNkYmJjZWNlZWY2MDU4MDY2MWJiYzI1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8At/IohEQW4fWz+nSDDvEZS5B4dFmgIsuvT40uXc7Iy13R
aaTE0sI5vVE3ApRT/P+X/wL3szqmnQ9YOfmxUEZZN/Cu3pGgxLceCFU/0K5cn35q
UbB2q26R/mVJCZm35j3xJHeUfT1TQH/6tk6ii1WD977qogopxAguk9WRrC1ToRI/
VebUoorv4UPfLyEogXXa/H7Rm1VnHWtNy7F/5RfFVY4s3k7hK6pv+DgMHp36Lkam
AlbBbrnl8+sKxIEa5vHW7/HbNTBTVvBwvyImKQqYP2DRn8Siq9Ghf63PJKzyvQO2
WioU1ZJY3I97IcA7BM9KneJ20dnTi+kJcyGs6sUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS65QV2QntUu827zs7vYFgGYbvCVTAfBgNVHSMEGDAWgBTC0h6ASrdxOteH
fd5gOqeCSzGYPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3d0SWVnRXEzY1RyWGgzM2VZRHFuZ2tzeG1Edy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvMDRiNDQ2LTRhZTEtNGZlNS1iNjQ2LTU5YWUwOWVkYmViOS8x
L3V1VUZka0o3Vkx2TnU4N083MkJZQm1HN3dsVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
MDRiNDQ2LTRhZTEtNGZlNS1iNjQ2LTU5YWUwOWVkYmViOS8xL3d0SWVnRXEzY1Ry
WGgzM2VZRHFuZ2tzeG1Edy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2EcjANBgkqhkiG9w0BAQsFAAOC
AQEAcOAlMImE/VDQSElOPWBNvciBXd16k+El56cK+H00opvjanssmNnqKmyff+dp
ovcuy9EdsiLUg6Fk+3V6MT0kZRaYIcQAR8htX+Qkw+rhz5nUHzMWKyBPoTMMy8x9
GxHZIx131qknFJu4Hw1k+C+XjB7DCbPwnteXWu1TlF6ktk8t2xmLUPQ9yqTlJHjA
f+oiu+e9QzNDAq1Drvair9I7uvABj4qeOaEG30xgQr9LJIL+GFP/bdXMKJAznfkZ
GZbmplLDNaKPOuuvE5LXJD9xzc5pLq9fZhI5cxt1CntTra1rYDZ5PNPfOJ1qj+58
D2O+ZG9BrLQVe4pHdDvPcLMQGA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org