Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ARnE_rQ38mIIJtVwm-WjIf-CSEc.roa
File: ARnE_rQ38mIIJtVwm-WjIf-CSEc.roa (raw, json)
Hash identifier: /qhycvxlC2yecsLCr2qz1Joe+1tdmXv2qEt9d4ZNVhk=
Subject key identifier: 01:19:C4:FE:B4:37:F2:62:08:26:D5:70:9B:E5:A3:21:FF:82:48:47
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 06051671
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ARnE_rQ38mIIJtVwm-WjIf-CSEc.roa
Signing time: Sat 01 Jan 2022 16:01:22 +0000
ROA not before: Sat 01 Jan 2022 16:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210709
IP address blocks: 45.85.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100996721 (0x6051671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0119c4feb437f2620826d5709be5a321ff824847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:70:d3:7e:fd:62:ac:2f:87:68:1c:24:7a:
3c:54:5a:b7:db:b7:2f:11:6d:b7:1a:c6:74:62:f3:
53:3b:07:60:d3:d8:8b:4c:88:ee:02:f0:76:9a:c3:
e7:d6:73:e5:fe:ad:1b:f7:40:51:9c:d7:85:03:9f:
5f:85:99:5d:68:36:b3:d4:28:ca:32:68:c0:66:6b:
cb:15:51:98:c2:3e:af:a4:4b:57:4a:94:cd:0e:30:
57:12:45:b2:ea:d6:d6:2d:3a:e9:ff:ed:13:eb:bc:
b2:a4:66:90:3b:0c:91:0f:11:55:48:5a:18:0e:c0:
0a:33:9a:6c:7a:d1:9c:4a:fa:fc:ac:2d:3a:9e:b2:
4c:4b:50:9c:52:e0:ea:de:14:a6:70:55:4d:81:8c:
33:fb:66:48:bd:09:75:93:b3:23:4a:cd:67:34:79:
16:9f:01:c0:66:33:c2:04:35:1f:77:ba:5e:65:44:
3e:cd:71:86:d7:bc:a8:58:a0:b0:6a:3b:97:f1:e1:
76:43:8c:6e:76:83:e4:10:c7:5a:36:09:2c:51:97:
59:4c:21:77:6b:56:3b:e0:a0:e3:9d:96:97:dd:fd:
25:ce:1a:3a:00:ea:68:0c:56:8d:39:bf:6b:ea:a1:
c5:eb:d8:a6:d6:f9:2a:e0:9a:55:43:dd:0b:37:4d:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:C4:FE:B4:37:F2:62:08:26:D5:70:9B:E5:A3:21:FF:82:48:47
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ARnE_rQ38mIIJtVwm-WjIf-CSEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.116.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f4:82:81:e4:c4:64:ff:ea:62:57:d7:42:5a:76:3b:b5:18:
f5:d1:df:3c:3a:d9:52:eb:98:3b:ee:6a:2e:0a:01:13:ee:26:
10:53:dd:66:c6:3d:83:6c:62:54:8f:8a:6e:32:22:78:be:57:
c4:7e:10:a3:c5:d0:98:42:54:bf:66:f7:cc:29:0e:26:89:cc:
6c:a9:1c:37:d2:9d:5c:cf:3e:94:f5:5c:e7:27:40:b1:fd:5f:
75:eb:75:c7:89:66:87:5c:1f:1a:09:72:3f:8b:8e:e7:51:61:
92:f6:1d:95:2c:7a:e2:02:04:f1:05:b6:57:1a:a9:2c:29:a3:
5b:5c:35:73:6e:4c:cc:74:3e:a1:e4:14:80:a4:8e:42:25:1a:
c9:1c:19:2a:d9:73:b5:60:21:cb:f8:02:bb:8a:6c:b8:aa:ec:
4b:98:d7:db:2f:a5:e6:67:b0:74:37:22:50:ba:bc:f6:23:16:
5a:0e:08:3e:e9:ea:ae:01:46:be:1a:a6:4c:db:dc:54:85:6a:
d7:54:e2:21:4e:8d:a0:a0:07:f4:5b:79:0d:e8:33:2c:8a:d0:
23:bc:1d:b2:c6:1e:70:8d:70:80:c8:54:a3:6f:4c:9b:9b:fd:
b5:e1:6b:29:53:42:8f:a1:84:a1:18:27:6d:00:04:b9:de:99:
d0:9e:d2:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBgUWcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjZkOWQ1MGIzYjg5ZDUxYzhhYTI0OTNlN2VmNDcwMWQ2MjUxZGFkMB4XDTIyMDEw
MTE2MDEyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDExOWM0ZmViNDM3
ZjI2MjA4MjZkNTcwOWJlNWEzMjFmZjgyNDg0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOccNN+/WKsL4doHCR6PFRat9u3LxFttxrGdGLzUzsHYNPY
i0yI7gLwdprD59Zz5f6tG/dAUZzXhQOfX4WZXWg2s9QoyjJowGZryxVRmMI+r6RL
V0qUzQ4wVxJFsurW1i066f/tE+u8sqRmkDsMkQ8RVUhaGA7ACjOabHrRnEr6/Kwt
Op6yTEtQnFLg6t4UpnBVTYGMM/tmSL0JdZOzI0rNZzR5Fp8BwGYzwgQ1H3e6XmVE
Ps1xhte8qFigsGo7l/HhdkOMbnaD5BDHWjYJLFGXWUwhd2tWO+Cg452Wl939Jc4a
OgDqaAxWjTm/a+qhxevYptb5KuCaVUPdCzdNOEsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQBGcT+tDfyYggm1XCb5aMh/4JIRzAfBgNVHSMEGDAWgBTGbZ1Qs7idUciq
JJPn70cB1iUdrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3htMmRVTE80blZISXFpU1Q1LTlIQWRZbEhhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8x
L0FSbkVfclEzOG1JSUp0VndtLVdqSWYtQ1NFYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8xL3htMmRVTE80blZI
SXFpU1Q1LTlIQWRZbEhhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1VdDANBgkqhkiG9w0BAQsFAAOC
AQEAl/SCgeTEZP/qYlfXQlp2O7UY9dHfPDrZUuuYO+5qLgoBE+4mEFPdZsY9g2xi
VI+KbjIieL5XxH4Qo8XQmEJUv2b3zCkOJonMbKkcN9KdXM8+lPVc5ydAsf1fdet1
x4lmh1wfGglyP4uO51FhkvYdlSx64gIE8QW2VxqpLCmjW1w1c25MzHQ+oeQUgKSO
QiUayRwZKtlztWAhy/gCu4psuKrsS5jX2y+l5mewdDciULq89iMWWg4IPunqrgFG
vhqmTNvcVIVq11TiIU6NoKAH9Ft5DegzLIrQI7wdssYecI1wgMhUo29Mm5v9teFr
KVNCj6GEoRgnbQAEud6Z0J7Sqg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org