Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5quFOeeg6cnEKlCpqY8wVQxm7jM.roa
File: 5quFOeeg6cnEKlCpqY8wVQxm7jM.roa (raw, json)
Hash identifier: NhM4t4x4xT0VTtIi6C72B6uxptDHzPRWxlcl6/CTJgU=
Subject key identifier: E6:AB:85:39:E7:A0:E9:C9:C4:2A:50:A9:A9:8F:30:55:0C:66:EE:33
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0184D17648B965E5BB33097DD109B1C83470
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5quFOeeg6cnEKlCpqY8wVQxm7jM.roa
Signing time: Fri 02 Dec 2022 06:11:40 +0000
ROA not before: Fri 02 Dec 2022 06:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 45.85.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:76:48:b9:65:e5:bb:33:09:7d:d1:09:b1:c8:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 2 06:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6ab8539e7a0e9c9c42a50a9a98f30550c66ee33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:07:09:5a:1e:14:7b:db:c1:69:c3:92:9d:
0e:4c:19:fd:54:31:e0:ab:b3:41:f1:5c:0d:f0:1d:
a5:8f:86:71:65:ca:ee:ee:1a:5c:8d:48:42:2c:b2:
19:61:22:ba:c1:57:2f:fd:fe:f8:06:17:8b:b2:da:
1f:97:16:d2:b4:d9:79:c1:57:1c:92:2e:f1:7e:4e:
e2:e8:aa:b2:4d:c7:7b:06:6f:19:fa:49:d9:95:eb:
01:36:75:e6:f7:0a:81:bc:bb:4d:41:14:2f:87:b6:
97:cf:6d:2f:f4:a9:81:18:a5:4c:43:e9:89:d5:d5:
c5:41:b8:8c:0b:ca:7b:55:7e:18:6a:0e:a0:a9:05:
ee:ba:34:87:9d:d5:fa:d7:5b:5b:a9:c2:a6:3c:03:
08:46:7f:17:86:67:55:c3:d3:3e:98:86:b6:5d:6d:
ad:ce:51:da:0b:f3:c0:62:0a:37:ec:3d:09:93:2b:
52:c1:bf:91:ea:fd:05:a7:e5:57:56:fb:a1:73:00:
94:a6:c4:cc:74:fd:09:d8:03:f3:f4:98:13:f6:ba:
e0:e6:24:c2:51:47:94:1d:3b:f8:d7:2a:ec:fb:39:
01:db:05:b3:d0:ad:2a:92:8a:76:fb:8b:96:c0:c1:
b2:23:9f:08:5d:fe:c4:0a:9d:0b:be:bb:26:67:ba:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:85:39:E7:A0:E9:C9:C4:2A:50:A9:A9:8F:30:55:0C:66:EE:33
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5quFOeeg6cnEKlCpqY8wVQxm7jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f5:03:d7:37:72:86:45:f8:07:6a:3e:ba:65:22:8e:61:e8:
65:b6:42:28:76:17:17:a5:77:f6:b5:f4:61:ea:79:d1:85:fd:
d3:f0:29:9b:45:98:b6:ea:43:2c:e1:b4:6d:45:0b:78:f3:b9:
ff:f4:61:b3:ff:a5:22:c4:3c:7c:3e:c0:d2:9e:fd:a1:82:c9:
10:41:df:ba:12:ec:9d:d4:a6:cc:69:0e:c2:c8:58:a3:8e:be:
4b:37:8c:67:7f:4e:44:4f:f5:1d:de:38:7f:80:e8:a6:c6:14:
44:d6:4e:95:e1:53:f5:99:7d:b4:64:d7:6b:3c:d5:59:f2:5c:
74:ac:81:f4:17:ef:96:ae:a8:9a:8a:4d:cc:76:ae:c3:d0:7e:
d1:97:90:ca:4f:f6:b3:35:80:e9:36:81:d6:3f:17:84:b6:9a:
d1:4d:9e:64:4b:c4:e7:32:a8:b6:a8:42:c6:29:5c:22:38:ae:
11:09:bf:58:ae:b5:d3:63:22:bc:52:6c:e6:9b:6f:7a:b3:6d:
12:d2:e1:b0:6d:18:9c:06:38:cb:e1:88:e3:2a:07:79:63:77:
e4:03:74:92:df:ab:ae:80:d4:11:b4:92:cb:d2:da:0c:36:ac:
69:0d:fb:9c:76:35:c9:83:26:d0:0f:f5:b3:57:a3:02:41:70:
83:17:c0:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTRdki5ZeW7Mwl90QmxyDRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjIxMjAyMDYxMTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmFiODUzOWU3YTBlOWM5YzQyYTUwYTlhOThmMzA1NTBjNjZlZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqwHCVoeFHvbwWnDkp0OTBn9VDHg
q7NB8VwN8B2lj4ZxZcru7hpcjUhCLLIZYSK6wVcv/f74BheLstoflxbStNl5wVcc
ki7xfk7i6KqyTcd7Bm8Z+knZlesBNnXm9wqBvLtNQRQvh7aXz20v9KmBGKVMQ+mJ
1dXFQbiMC8p7VX4Yag6gqQXuujSHndX611tbqcKmPAMIRn8XhmdVw9M+mIa2XW2t
zlHaC/PAYgo37D0JkytSwb+R6v0Fp+VXVvuhcwCUpsTMdP0J2APz9JgT9rrg5iTC
UUeUHTv41yrs+zkB2wWz0K0qkop2+4uWwMGyI58IXf7ECp0LvrsmZ7o97wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOarhTnnoOnJxCpQqamPMFUMZu4zMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNXF1Rk9lZWc2Y25FS2xDcHFZOHdWUXhtN2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVrMA0G
CSqGSIb3DQEBCwUAA4IBAQB99QPXN3KGRfgHaj66ZSKOYehltkIodhcXpXf2tfRh
6nnRhf3T8CmbRZi26kMs4bRtRQt487n/9GGz/6UixDx8PsDSnv2hgskQQd+6Euyd
1KbMaQ7CyFijjr5LN4xnf05ET/Ud3jh/gOimxhRE1k6V4VP1mX20ZNdrPNVZ8lx0
rIH0F++Wrqiaik3Mdq7D0H7Rl5DKT/azNYDpNoHWPxeEtprRTZ5kS8TnMqi2qELG
KVwiOK4RCb9YrrXTYyK8Umzmm296s20S0uGwbRicBjjL4YjjKgd5Y3fkA3SS36uu
gNQRtJLL0toMNqxpDfucdjXJgybQD/WzV6MCQXCDF8Be
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org