Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/g5cN8H8__E0keQk4Z7ga2bDdGCc.roa
File: g5cN8H8__E0keQk4Z7ga2bDdGCc.roa (raw, json)
Hash identifier: l5wMFA5Kaj/L0uVCvKMqo2hrtqCbhobNmITR0xCsjBM=
Subject key identifier: 83:97:0D:F0:7F:3F:FC:4D:24:79:09:38:67:B8:1A:D9:B0:DD:18:27
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 04B455FF
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/g5cN8H8__E0keQk4Z7ga2bDdGCc.roa
Signing time: Sat 01 Jan 2022 05:01:57 +0000
ROA not before: Sat 01 Jan 2022 05:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.143.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78927359 (0x4b455ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 05:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83970df07f3ffc4d2479093867b81ad9b0dd1827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:0e:5d:b2:85:23:78:aa:99:28:d3:5c:a9:
38:65:a8:c4:c4:31:ec:cc:c0:ee:0e:85:16:35:cc:
2e:3e:fd:a4:ba:f5:e4:eb:b9:6c:87:af:8c:62:1a:
13:bd:fb:d4:e6:1b:91:7c:b4:e6:1b:05:d7:3e:0a:
ca:a8:ea:f0:f8:fd:92:f5:90:58:ff:4f:dd:78:af:
15:47:ba:62:a5:69:f3:25:be:89:c1:fc:33:90:67:
8c:26:d5:16:68:7a:a3:c0:50:ec:28:50:5a:a5:6f:
4e:a2:ad:67:3a:ff:56:b0:f1:ab:dc:63:71:7f:87:
84:05:79:ce:6a:d5:c4:c9:4b:be:4d:04:0a:f1:f4:
6f:01:3e:72:1c:99:84:3e:72:d7:a3:63:2b:4a:ae:
bf:e8:0a:34:3a:61:74:81:aa:4c:bc:8c:79:0e:91:
c4:1b:cb:70:ca:b4:bf:d9:28:d6:8e:26:1c:e6:6f:
19:c8:a0:bd:b9:e4:d3:a9:ac:ce:ae:fe:be:0e:d7:
6a:9f:27:ea:b3:32:a3:53:d3:ee:24:dd:9d:9c:f1:
e8:f2:33:ef:54:13:66:66:1d:d6:c6:bb:fd:b2:15:
3e:9d:31:c7:75:71:39:df:0f:80:f3:ff:0e:73:03:
00:38:13:6e:7f:60:f4:33:04:e9:77:6d:1b:e6:c8:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:0D:F0:7F:3F:FC:4D:24:79:09:38:67:B8:1A:D9:B0:DD:18:27
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/g5cN8H8__E0keQk4Z7ga2bDdGCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ad:f0:1e:81:f6:43:c7:ff:1b:42:ee:6a:e1:d8:8c:e5:8f:
b5:55:2e:cc:d3:e2:95:d1:a0:11:96:ed:67:10:3a:ea:f5:57:
d6:23:93:93:c5:e1:f4:64:b5:f8:29:2e:dc:45:fb:48:bf:66:
f9:39:fc:fc:e4:46:1e:43:7f:02:0a:5f:53:66:0a:5f:a1:03:
78:e4:70:b6:2c:56:0d:f2:52:52:55:3e:47:60:71:4a:54:4c:
20:fd:09:c1:e5:db:6c:b1:fa:64:0d:d2:1f:1a:d3:4f:f9:ac:
d4:d4:b8:c6:e9:5b:f4:97:23:1c:bb:50:50:80:4d:ae:93:3d:
47:54:75:40:ce:fd:6b:1e:3d:29:6f:5d:99:e2:02:7b:25:90:
43:f9:05:0e:ad:3d:57:b7:d9:fb:81:4f:2c:79:e6:9c:27:c5:
0e:e2:f2:68:8e:37:4a:26:3e:b8:14:1d:2a:20:3b:fb:70:de:
aa:ab:ba:de:5c:3c:40:e0:b7:7f:81:88:6c:37:09:4d:2e:14:
bf:11:a8:53:40:f0:10:3d:f0:7b:7c:b9:0b:25:b2:af:76:79:
07:cc:54:18:ed:37:8b:55:a7:fb:d7:e8:ee:f8:72:0c:3b:c7:
be:9f:45:3b:7b:ae:da:5c:e0:77:77:fe:a8:c5:42:f9:52:db:
c8:1d:55:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLRV/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTRkMGU2OWFiNzY5ZjY1YmIyYjE1NWJkZmE4M2E3MTg2ZWVhYzQ0MB4XDTIyMDEw
MTA1MDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODM5NzBkZjA3ZjNm
ZmM0ZDI0NzkwOTM4NjdiODFhZDliMGRkMTgyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGGDl2yhSN4qpko01ypOGWoxMQx7MzA7g6FFjXMLj79pLr1
5Ou5bIevjGIaE7371OYbkXy05hsF1z4Kyqjq8Pj9kvWQWP9P3XivFUe6YqVp8yW+
icH8M5BnjCbVFmh6o8BQ7ChQWqVvTqKtZzr/VrDxq9xjcX+HhAV5zmrVxMlLvk0E
CvH0bwE+chyZhD5y16NjK0quv+gKNDphdIGqTLyMeQ6RxBvLcMq0v9ko1o4mHOZv
Gcigvbnk06mszq7+vg7Xap8n6rMyo1PT7iTdnZzx6PIz71QTZmYd1sa7/bIVPp0x
x3VxOd8PgPP/DnMDADgTbn9g9DME6XdtG+bIgXcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDlw3wfz/8TSR5CThnuBrZsN0YJzAfBgNVHSMEGDAWgBS6TQ5pq3afZbsr
FVvfqDpxhu6sRDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VrME9hYXQybjJXN0t4VmIzNmc2Y1lidXJFUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTgvM2Q2ZDZjLWY1OGQtNDJlNi1iNjg4LThlZmYzZmQzYzQ4YS8x
L2c1Y044SDhfX0Uwa2VRazRaN2dhMmJEZEdDYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgv
M2Q2ZDZjLWY1OGQtNDJlNi1iNjg4LThlZmYzZmQzYzQ4YS8xL3VrME9hYXQybjJX
N0t4VmIzNmc2Y1lidXJFUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2PoDANBgkqhkiG9w0BAQsFAAOC
AQEAdK3wHoH2Q8f/G0LuauHYjOWPtVUuzNPildGgEZbtZxA66vVX1iOTk8Xh9GS1
+Cku3EX7SL9m+Tn8/ORGHkN/AgpfU2YKX6EDeORwtixWDfJSUlU+R2BxSlRMIP0J
weXbbLH6ZA3SHxrTT/ms1NS4xulb9JcjHLtQUIBNrpM9R1R1QM79ax49KW9dmeIC
eyWQQ/kFDq09V7fZ+4FPLHnmnCfFDuLyaI43SiY+uBQdKiA7+3Deqqu63lw8QOC3
f4GIbDcJTS4UvxGoU0DwED3we3y5CyWyr3Z5B8xUGO03i1Wn+9fo7vhyDDvHvp9F
O3uu2lzgd3f+qMVC+VLbyB1VaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org