Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa
File: dQoUFp-PtLxO9AIQfGB9WApbw1o.roa (raw, json)
Hash identifier: 0Yv1AZjnSajiJx2wi8WDn3hGcfnGGSuCG7OA5H2clzk=
Subject key identifier: 75:0A:14:16:9F:8F:B4:BC:4E:F4:02:10:7C:60:7D:58:0A:5B:C3:5A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E63A71
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa
Signing time: Sat 01 Jan 2022 15:56:49 +0000
ROA not before: Sat 01 Jan 2022 15:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 45.132.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434518641 (0x19e63a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=750a14169f8fb4bc4ef402107c607d580a5bc35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:5c:56:8a:4c:37:fa:44:02:47:d4:4c:b6:
85:e8:52:1c:5d:cb:ce:df:ae:60:20:5d:b2:4a:25:
b8:7e:45:1f:fc:63:74:d9:72:0f:4f:3a:35:e2:ae:
a2:0d:03:ce:6e:ad:96:d9:99:7f:6a:39:28:34:b3:
ba:5b:25:36:6d:68:43:f2:86:67:78:03:79:84:d6:
56:14:b4:58:cb:90:43:5c:90:dd:99:5a:a6:19:d5:
3b:f1:eb:73:a3:c3:2b:51:aa:dd:c3:7d:2f:22:1a:
f8:09:b4:96:71:86:a3:b8:06:e8:e2:1e:b0:85:cd:
1a:c0:47:0e:19:c5:90:34:31:6e:10:ff:fa:ed:81:
be:04:69:4e:ef:4e:bb:1c:0a:98:2d:f7:86:eb:df:
e0:4d:ad:47:f1:52:c4:54:3a:8d:e6:a7:07:3c:32:
46:46:38:c4:76:f2:49:89:75:7c:78:cb:ff:68:c0:
bf:cf:3b:1f:96:fa:59:a4:64:da:f8:ec:a9:36:f2:
43:e3:db:9c:b6:81:df:d5:c9:23:05:d1:ca:7d:48:
dc:e6:1e:32:4d:0b:0a:f4:37:bd:14:d3:3d:3d:44:
84:56:d8:3d:27:56:02:92:50:08:16:d6:99:79:06:
84:d9:99:49:f7:13:40:f6:15:1c:fa:82:6b:9f:5a:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:14:16:9F:8F:B4:BC:4E:F4:02:10:7C:60:7D:58:0A:5B:C3:5A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dQoUFp-PtLxO9AIQfGB9WApbw1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:48:2c:b0:ce:ca:d0:a6:3f:dc:81:7a:44:84:88:a5:5d:b9:
f8:8b:85:b5:0c:bc:48:96:9b:cd:df:6e:95:ff:ab:0f:31:cd:
41:7a:9e:95:4a:bc:38:c9:93:63:94:03:70:f2:89:d5:dd:90:
89:dd:d5:2f:03:c7:18:35:7a:63:d2:4e:2f:64:13:7e:a2:67:
05:9d:86:38:5f:05:b6:ef:7a:c9:93:4d:34:0b:6a:8f:a3:9b:
80:9a:22:e5:ec:6b:cf:1e:b7:1d:3a:0f:e7:6b:4b:b9:0a:b7:
09:bf:b0:a3:ff:19:11:c7:94:95:6c:e1:81:63:84:5f:9e:35:
b0:0d:2a:79:41:dd:9f:c6:e1:21:8b:39:e1:23:49:79:11:9b:
5b:16:d0:ed:b9:ad:26:8f:5f:ac:05:63:bc:05:9c:b0:72:35:
36:58:f2:a6:41:81:6a:68:50:b0:a7:6a:ec:f5:09:f1:33:07:
f5:bf:79:02:50:0e:40:fa:a1:2f:10:bb:28:86:e3:7f:b7:30:
33:ef:5f:ad:ae:1e:07:bd:ce:5e:46:82:4e:c5:30:03:74:4a:
82:c1:4c:28:0d:5a:57:53:6c:03:fb:e2:c9:7e:76:8c:dd:69:
5e:7e:cf:71:9b:c8:a7:e3:26:3a:12:45:a6:51:80:ee:98:7d:
a1:3f:d4:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGeY6cTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEw
MTE1NTY0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzUwYTE0MTY5Zjhm
YjRiYzRlZjQwMjEwN2M2MDdkNTgwYTViYzM1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/OXFaKTDf6RAJH1Ey2hehSHF3Lzt+uYCBdskoluH5FH/xj
dNlyD086NeKuog0Dzm6tltmZf2o5KDSzulslNm1oQ/KGZ3gDeYTWVhS0WMuQQ1yQ
3ZlaphnVO/Hrc6PDK1Gq3cN9LyIa+Am0lnGGo7gG6OIesIXNGsBHDhnFkDQxbhD/
+u2BvgRpTu9OuxwKmC33huvf4E2tR/FSxFQ6jeanBzwyRkY4xHbySYl1fHjL/2jA
v887H5b6WaRk2vjsqTbyQ+PbnLaB39XJIwXRyn1I3OYeMk0LCvQ3vRTTPT1EhFbY
PSdWApJQCBbWmXkGhNmZSfcTQPYVHPqCa59aMwUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR1ChQWn4+0vE70AhB8YH1YClvDWjAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L2RRb1VGcC1QdEx4TzlBSVFmR0I5V0FwYncxby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2EwjANBgkqhkiG9w0BAQsFAAOC
AQEAfUgssM7K0KY/3IF6RISIpV25+IuFtQy8SJabzd9ulf+rDzHNQXqelUq8OMmT
Y5QDcPKJ1d2Qid3VLwPHGDV6Y9JOL2QTfqJnBZ2GOF8Ftu96yZNNNAtqj6ObgJoi
5exrzx63HToP52tLuQq3Cb+wo/8ZEceUlWzhgWOEX541sA0qeUHdn8bhIYs54SNJ
eRGbWxbQ7bmtJo9frAVjvAWcsHI1NljypkGBamhQsKdq7PUJ8TMH9b95AlAOQPqh
LxC7KIbjf7cwM+9fra4eB73OXkaCTsUwA3RKgsFMKA1aV1NsA/viyX52jN1pXn7P
cZvIp+MmOhJFplGA7ph9oT/Urg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org