Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/Mctwx5ZN7km__qBh7NZGGQ0IQlE.roa
File: Mctwx5ZN7km__qBh7NZGGQ0IQlE.roa (raw, json)
Hash identifier: kynO8C6y+BzqHrYFPyY4QsLWn/cTDvZ47y8L1ommEkU=
Subject key identifier: 31:CB:70:C7:96:4D:EE:49:BF:FE:A0:61:EC:D6:46:19:0D:08:42:51
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 0675C409
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/Mctwx5ZN7km__qBh7NZGGQ0IQlE.roa
Signing time: Thu 12 May 2022 07:43:03 +0000
ROA not before: Thu 12 May 2022 07:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48817
IP address blocks: 45.67.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108381193 (0x675c409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: May 12 07:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31cb70c7964dee49bffea061ecd646190d084251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:19:49:63:dc:73:a5:89:4a:39:57:f6:a9:
2a:e8:ad:c2:98:74:83:ca:0c:80:88:49:4c:70:b4:
cf:c8:be:80:fb:11:56:ba:48:ec:1a:f1:70:c2:7e:
b8:7b:93:37:dd:bb:5c:77:43:1d:47:7a:ce:01:fe:
b1:d1:f8:bb:8b:68:01:24:d0:72:55:3f:29:56:7e:
8b:77:9b:c9:ac:d7:5b:72:dd:22:8e:93:cb:1f:a4:
de:be:9d:44:78:98:9e:54:43:ca:31:5b:83:3d:85:
be:88:ce:27:7b:e7:d1:57:af:54:19:eb:cc:43:7c:
67:c5:34:38:5e:5b:c3:3f:9f:26:a4:92:92:31:63:
96:44:8a:ed:11:31:c6:1a:89:8a:c5:83:e0:57:1a:
6e:3b:5d:9d:cb:c1:34:73:0b:f8:f8:f4:d3:15:21:
bc:86:15:63:e4:aa:7a:9e:8b:79:7d:2d:be:3c:3c:
f6:0a:c9:e9:60:5d:c8:cd:10:ad:ad:8c:1d:c0:03:
c7:8c:71:51:fd:01:e3:53:16:50:00:19:7c:03:d5:
35:cd:72:88:6e:39:c9:30:39:d0:5b:35:ef:cc:e8:
0a:cc:a4:d2:8b:43:4e:57:91:a6:99:bf:d2:c5:f0:
44:41:ba:98:f5:75:39:d2:29:17:7c:bb:ad:15:73:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:70:C7:96:4D:EE:49:BF:FE:A0:61:EC:D6:46:19:0D:08:42:51
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/Mctwx5ZN7km__qBh7NZGGQ0IQlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a5:86:ba:50:eb:ff:99:39:7a:5b:87:8d:a1:5a:d8:cd:a0:
54:a4:40:b9:9a:f2:01:24:3e:11:9e:d0:ca:79:12:dd:80:ab:
17:f3:a6:0d:e6:28:26:74:02:46:09:63:33:80:58:22:65:e8:
28:70:e4:f8:0f:a6:40:39:57:dc:c6:c3:2c:65:7b:f7:7f:5a:
f1:24:b1:73:ea:7d:bb:46:a4:b2:bf:81:a8:16:08:66:bf:10:
61:c9:91:86:fa:b4:65:fe:3e:04:4d:32:f0:ff:da:d0:f0:0c:
76:6d:43:9d:ab:a5:47:aa:94:05:80:55:df:07:0b:75:42:f2:
b2:e3:93:50:8a:47:30:74:46:d7:e7:f0:18:f8:78:81:99:7e:
7b:3a:bd:87:ea:f7:36:df:58:5f:ab:de:88:9b:9d:c1:4e:7a:
6d:73:cc:40:08:41:0e:b5:8b:4f:62:52:09:8f:14:6a:44:32:
3d:be:78:df:90:e8:43:ee:0c:ba:cb:ee:ac:cd:05:f4:5f:a0:
e6:67:c2:ee:b4:c1:3a:f9:ae:c7:4e:b5:49:af:93:f7:81:c6:
2d:21:0e:ce:d1:bb:43:3f:d7:02:4b:26:3d:df:fd:27:d8:38:
0b:fc:74:cf:d5:f4:64:ee:5f:c5:15:03:55:e8:1d:35:fb:29:
4f:5f:05:70
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBnXECTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2FmMTExNTBjZTVmZTlmNzBmMzZjOTgwNjc0N2JiNjgyYjFjYTIxMB4XDTIyMDUx
MjA3NDMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzFjYjcwYzc5NjRk
ZWU0OWJmZmVhMDYxZWNkNjQ2MTkwZDA4NDI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtWGUlj3HOliUo5V/apKuitwph0g8oMgIhJTHC0z8i+gPsR
VrpI7BrxcMJ+uHuTN927XHdDHUd6zgH+sdH4u4toASTQclU/KVZ+i3ebyazXW3Ld
Io6Tyx+k3r6dRHiYnlRDyjFbgz2FvojOJ3vn0VevVBnrzEN8Z8U0OF5bwz+fJqSS
kjFjlkSK7RExxhqJisWD4FcabjtdncvBNHML+Pj00xUhvIYVY+Sqep6LeX0tvjw8
9grJ6WBdyM0Qra2MHcADx4xxUf0B41MWUAAZfAPVNc1yiG45yTA50Fs178zoCsyk
0otDTleRppm/0sXwREG6mPV1OdIpF3y7rRVzx8UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQxy3DHlk3uSb/+oGHs1kYZDQhCUTAfBgNVHSMEGDAWgBRMrxEVDOX+n3Dz
bJgGdHu2grHKITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RLOFJGUXpsX3A5dzgyeVlCblI3dG9LeHlpRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvZjM2OTVjLWUzNDAtNGUyZi1hZmViLTZiOTVkM2M4OWM5MS8x
L01jdHd4NVpON2ttX19xQmg3TlpHR1EwSVFsRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
ZjM2OTVjLWUzNDAtNGUyZi1hZmViLTZiOTVkM2M4OWM5MS8xL1RLOFJGUXpsX3A5
dzgyeVlCblI3dG9LeHlpRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1DQDANBgkqhkiG9w0BAQsFAAOC
AQEAL6WGulDr/5k5eluHjaFa2M2gVKRAuZryASQ+EZ7QynkS3YCrF/OmDeYoJnQC
RgljM4BYImXoKHDk+A+mQDlX3MbDLGV7939a8SSxc+p9u0aksr+BqBYIZr8QYcmR
hvq0Zf4+BE0y8P/a0PAMdm1DnaulR6qUBYBV3wcLdULysuOTUIpHMHRG1+fwGPh4
gZl+ezq9h+r3Nt9YX6veiJudwU56bXPMQAhBDrWLT2JSCY8UakQyPb5435DoQ+4M
usvurM0F9F+g5mfC7rTBOvmux061Sa+T94HGLSEOztG7Qz/XAksmPd/9J9g4C/x0
z9X0ZO5fxRUDVegdNfspT18FcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org