Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sSnhDbqQLmaDTXfa1vIlwf-uO6Y.roa
File: sSnhDbqQLmaDTXfa1vIlwf-uO6Y.roa (raw, json)
Hash identifier: N/7zkAeAcZLWxNd1kv3suUMO1nXRgJdYWJUuTI/QW34=
Subject key identifier: B1:29:E1:0D:BA:90:2E:66:83:4D:77:DA:D6:F2:25:C1:FF:AE:3B:A6
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0184390DC2D37946F487018B9E01A970BEA4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sSnhDbqQLmaDTXfa1vIlwf-uO6Y.roa
Signing time: Wed 02 Nov 2022 15:55:13 +0000
ROA not before: Wed 02 Nov 2022 15:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:0d:c2:d3:79:46:f4:87:01:8b:9e:01:a9:70:be:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 2 15:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b129e10dba902e66834d77dad6f225c1ffae3ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:f0:5c:11:b6:81:dd:77:fc:96:1c:b8:49:
d6:88:4d:bf:4f:4d:ed:92:8c:38:84:02:8b:c5:98:
1e:a7:fa:2d:b4:92:18:d5:00:50:61:32:87:54:15:
3d:52:32:1f:96:1e:a8:16:84:97:52:9f:7b:3e:28:
45:63:b1:bb:cf:3c:cc:b6:aa:4a:1a:cd:52:ef:b4:
72:81:91:1e:c3:7c:82:e7:3a:88:6d:b4:e6:e8:5d:
d1:6b:ba:4b:78:ee:0a:8d:25:da:ab:b7:03:8c:c6:
6e:e6:cb:e7:82:fc:15:62:d5:95:a2:4f:7c:f3:a9:
ee:7a:b6:70:97:3e:bc:f4:c5:cd:3c:eb:fc:0c:03:
5c:7a:08:0b:d9:dd:ff:87:58:88:12:4b:71:8d:be:
29:c5:2d:5d:17:09:bd:ba:ee:5a:5f:06:59:3c:21:
10:e1:3b:af:7b:ad:23:a4:e9:ee:2b:e7:d5:83:70:
17:a2:1b:07:27:0a:33:4c:7d:8d:64:d2:15:58:14:
92:81:56:54:7e:a4:83:6a:25:f9:d0:6c:34:6b:55:
0d:f9:06:e2:36:b6:85:5c:47:fe:bb:f5:dc:24:d4:
d3:d8:d6:5c:87:7f:c3:5d:bd:1e:51:e7:bc:5e:96:
89:39:29:d7:01:d2:b0:55:c0:9a:15:69:02:25:e4:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:E1:0D:BA:90:2E:66:83:4D:77:DA:D6:F2:25:C1:FF:AE:3B:A6
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sSnhDbqQLmaDTXfa1vIlwf-uO6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b2:bf:45:bc:48:a8:04:9b:15:a4:a2:be:78:e0:87:f6:09:
16:73:15:5e:20:89:63:5a:81:db:12:e0:ff:06:d0:71:56:ef:
26:e3:a7:5e:85:0d:de:e2:96:fd:cf:6e:0d:f0:55:33:60:38:
4a:7a:8f:35:27:c2:a0:e3:ec:04:76:84:a1:e4:f4:d8:ad:95:
64:64:d0:43:54:be:6f:a2:30:dd:dc:b7:5c:14:50:b4:79:31:
73:47:94:6a:af:c0:5e:38:f8:51:44:06:0b:57:71:a7:e4:3e:
0f:f2:a9:be:82:2d:c3:b1:89:56:c1:a0:a9:12:45:ff:67:cd:
32:b1:36:00:40:d1:9d:90:f5:ee:81:e9:ef:e7:2e:89:e0:89:
dd:d4:00:87:b1:ef:db:4a:92:04:f3:cb:9b:2b:da:a0:f1:f9:
36:b4:0d:8c:60:bf:fc:24:cb:47:51:e6:24:95:34:b1:6d:45:
c8:42:75:be:a2:02:57:7d:42:53:10:df:d7:9f:3c:e3:1a:6f:
5f:9a:dc:39:bb:96:a6:22:bd:27:06:5a:c3:6c:f6:d4:f5:65:
e0:ca:ee:d0:ba:72:b2:4d:a4:63:54:03:9c:69:fa:c8:f4:49:
91:8f:dc:dc:04:58:3c:a3:9e:e8:2e:d7:03:19:04:36:01:0b:
45:f7:03:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ5DcLTeUb0hwGLngGpcL6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIxMTAyMTU1NTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTI5ZTEwZGJhOTAyZTY2ODM0ZDc3ZGFkNmYyMjVjMWZmYWUzYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavwXBG2gd13/JYcuEnWiE2/T03t
kow4hAKLxZgep/ottJIY1QBQYTKHVBU9UjIflh6oFoSXUp97PihFY7G7zzzMtqpK
Gs1S77RygZEew3yC5zqIbbTm6F3Ra7pLeO4KjSXaq7cDjMZu5svngvwVYtWVok98
86nuerZwlz689MXNPOv8DANceggL2d3/h1iIEktxjb4pxS1dFwm9uu5aXwZZPCEQ
4Tuve60jpOnuK+fVg3AXohsHJwozTH2NZNIVWBSSgVZUfqSDaiX50Gw0a1UN+Qbi
NraFXEf+u/XcJNTT2NZch3/DXb0eUee8XpaJOSnXAdKwVcCaFWkCJeT5ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEp4Q26kC5mg0132tbyJcH/rjumMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvc1NuaERicVFMbWFEVFhmYTF2SWx3Zi11TzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY1MA0G
CSqGSIb3DQEBCwUAA4IBAQBGsr9FvEioBJsVpKK+eOCH9gkWcxVeIIljWoHbEuD/
BtBxVu8m46dehQ3e4pb9z24N8FUzYDhKeo81J8Kg4+wEdoSh5PTYrZVkZNBDVL5v
ojDd3LdcFFC0eTFzR5Rqr8BeOPhRRAYLV3Gn5D4P8qm+gi3DsYlWwaCpEkX/Z80y
sTYAQNGdkPXugenv5y6J4Ind1ACHse/bSpIE88ubK9qg8fk2tA2MYL/8JMtHUeYk
lTSxbUXIQnW+ogJXfUJTEN/XnzzjGm9fmtw5u5amIr0nBlrDbPbU9WXgyu7QunKy
TaRjVAOcafrI9EmRj9zcBFg8o57oLtcDGQQ2AQtF9wMq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org