Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/r8Q9wvFg7n8arnBhyfkh5S6rFWg.roa
File: r8Q9wvFg7n8arnBhyfkh5S6rFWg.roa (raw, json)
Hash identifier: P/gwR4woWBj+AEz8BgIlT2PYQsneuoVAzAqJgKpO4uc=
Subject key identifier: AF:C4:3D:C2:F1:60:EE:7F:1A:AE:70:61:C9:F9:21:E5:2E:AB:15:68
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018341618ED113088C98F3B31933BAED57A8
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/r8Q9wvFg7n8arnBhyfkh5S6rFWg.roa
Signing time: Thu 15 Sep 2022 13:40:55 +0000
ROA not before: Thu 15 Sep 2022 13:40:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:61:8e:d1:13:08:8c:98:f3:b3:19:33:ba:ed:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 15 13:40:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afc43dc2f160ee7f1aae7061c9f921e52eab1568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:87:08:59:53:ef:2b:c1:be:46:3f:e0:73:
bf:d5:82:0c:48:2b:02:bf:2b:02:5b:55:23:5d:71:
f4:53:50:86:e8:47:61:58:d5:24:33:73:97:fb:97:
fc:9c:34:b4:6c:af:a1:39:5d:aa:9c:58:3c:46:89:
11:ca:a9:83:23:c0:f0:13:5d:92:f8:bb:c8:26:c2:
44:82:9c:cb:39:9d:48:eb:fe:39:97:dd:bc:30:25:
e5:4b:f0:1a:b7:ff:7c:c4:7b:1f:2a:44:9d:d5:e8:
52:ab:60:12:79:33:a5:5d:bb:c7:85:87:d8:63:59:
5f:68:46:b2:76:ce:b3:d7:0e:41:8a:01:37:d7:a3:
7b:6d:bb:98:cd:9c:dd:31:0a:f1:79:02:c4:17:68:
42:47:c4:9f:06:98:ad:0d:81:62:b8:0d:7d:c8:76:
60:48:74:4d:01:f2:b3:fe:cd:1c:cc:62:57:f7:ba:
ad:e5:28:a7:19:03:dc:f9:bc:9f:14:bd:63:60:3b:
5b:30:75:af:eb:bf:d6:00:f8:a4:bb:03:37:db:0f:
1f:3e:40:4f:ba:80:8c:43:83:7d:47:65:f6:88:79:
fd:eb:e9:fd:9e:ff:39:bf:d8:b7:7a:48:f5:da:9d:
cf:f3:a5:7f:c7:e4:15:64:14:d5:de:b9:37:07:5a:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:3D:C2:F1:60:EE:7F:1A:AE:70:61:C9:F9:21:E5:2E:AB:15:68
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/r8Q9wvFg7n8arnBhyfkh5S6rFWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b4:dd:c6:c9:2b:0e:85:22:4d:a7:f2:8d:ae:03:3e:bf:cd:
a4:79:78:69:92:97:37:6d:d3:10:bb:f9:ff:22:3b:52:3b:fc:
07:49:e9:59:09:23:4a:ba:53:49:d1:72:17:37:a3:dd:2a:36:
12:61:d9:9f:b8:fc:1e:04:f7:01:25:2f:e8:d4:25:ba:bf:44:
fd:53:4a:a5:7a:aa:ee:23:72:f9:22:1b:22:63:1a:f3:48:9b:
46:8b:2f:89:f5:0a:bb:79:bb:cf:06:60:84:04:57:fd:0c:e8:
87:74:e1:42:fa:b3:6d:3b:33:6a:06:04:55:0b:72:51:1e:45:
22:06:5d:87:98:fc:31:31:16:25:81:c0:d4:36:a0:8f:87:fd:
4e:e7:c9:db:94:3f:42:b4:78:7f:a0:96:62:88:33:3c:8a:cf:
12:5d:09:a2:25:08:9d:59:5e:16:00:06:07:80:29:eb:b0:ac:
ba:38:0c:52:58:45:49:60:6f:64:b1:43:3a:2e:1d:78:98:9d:
ef:4c:e3:62:03:45:21:16:ae:44:21:f7:02:8d:9e:3b:00:4d:
4e:d3:08:df:dc:a9:63:c5:ed:c6:20:f7:29:de:3b:ad:05:e8:
69:18:29:2a:4e:a2:58:61:3a:c7:4c:c1:f2:a6:67:b0:23:c0:
ba:f6:eb:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNBYY7REwiMmPOzGTO67VeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIwOTE1MTM0MDU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM0M2RjMmYxNjBlZTdmMWFhZTcwNjFjOWY5MjFlNTJlYWIxNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ACHCFlT7yvBvkY/4HO/1YIMSCsC
vysCW1UjXXH0U1CG6EdhWNUkM3OX+5f8nDS0bK+hOV2qnFg8RokRyqmDI8DwE12S
+LvIJsJEgpzLOZ1I6/45l928MCXlS/Aat/98xHsfKkSd1ehSq2ASeTOlXbvHhYfY
Y1lfaEayds6z1w5BigE316N7bbuYzZzdMQrxeQLEF2hCR8SfBpitDYFiuA19yHZg
SHRNAfKz/s0czGJX97qt5SinGQPc+byfFL1jYDtbMHWv67/WAPikuwM32w8fPkBP
uoCMQ4N9R2X2iHn96+n9nv85v9i3ekj12p3P86V/x+QVZBTV3rk3B1r80QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/EPcLxYO5/Gq5wYcn5IeUuqxVoMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvcjhROXd2Rmc3bjhhcm5CaHlma2g1UzZyRldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY1MA0G
CSqGSIb3DQEBCwUAA4IBAQAgtN3GySsOhSJNp/KNrgM+v82keXhpkpc3bdMQu/n/
IjtSO/wHSelZCSNKulNJ0XIXN6PdKjYSYdmfuPweBPcBJS/o1CW6v0T9U0qleqru
I3L5IhsiYxrzSJtGiy+J9Qq7ebvPBmCEBFf9DOiHdOFC+rNtOzNqBgRVC3JRHkUi
Bl2HmPwxMRYlgcDUNqCPh/1O58nblD9CtHh/oJZiiDM8is8SXQmiJQidWV4WAAYH
gCnrsKy6OAxSWEVJYG9ksUM6Lh14mJ3vTONiA0UhFq5EIfcCjZ47AE1O0wjf3Klj
xe3GIPcp3jutBehpGCkqTqJYYTrHTMHypmewI8C69ut2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org