Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SX7kgWu5olEEQ6R03tzkbJPYVi0.roa
File: SX7kgWu5olEEQ6R03tzkbJPYVi0.roa (raw, json)
Hash identifier: 9W60qBG4IJUoR5b22qcmT5f+Q3nFaHUQ6ro1KPV9Alc=
Subject key identifier: 49:7E:E4:81:6B:B9:A2:51:04:43:A4:74:DE:DC:E4:6C:93:D8:56:2D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182010FD3CCBFDA561D511384BF678596A4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SX7kgWu5olEEQ6R03tzkbJPYVi0.roa
Signing time: Fri 15 Jul 2022 08:53:10 +0000
ROA not before: Fri 15 Jul 2022 08:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4764
IP address blocks: 45.91.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:0f:d3:cc:bf:da:56:1d:51:13:84:bf:67:85:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 15 08:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=497ee4816bb9a2510443a474dedce46c93d8562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:a7:17:d4:a5:da:52:fe:a9:15:87:36:c4:
0a:43:82:76:9d:27:c6:18:e7:19:69:2d:27:31:11:
14:3b:58:11:77:b0:d0:86:0c:3b:91:35:f3:5a:d8:
2c:ba:b2:fb:d8:86:e1:16:77:91:a8:16:d1:09:6c:
7d:83:0c:c1:12:7c:ee:c6:b3:ad:12:76:51:5d:7a:
fb:70:2e:97:ff:6c:87:4f:d8:dd:44:24:0a:33:48:
74:62:e7:06:54:32:84:99:2b:65:4f:b1:8c:69:fb:
03:d5:19:16:29:2f:e0:f7:24:34:fe:1d:85:d0:58:
39:f2:47:0a:a8:fd:e4:97:4d:51:4f:06:5b:78:a9:
dc:f2:46:9b:c3:c0:b8:b9:69:91:9a:66:59:bf:2e:
fc:8f:a3:22:43:4e:22:a8:e7:9c:10:9d:03:98:5c:
b1:a9:67:45:95:ba:ea:9c:11:f2:73:80:5e:28:6b:
83:65:24:3e:cc:91:55:b5:9a:81:07:d4:3d:2c:d0:
2c:80:d1:9d:52:a2:9c:5b:b6:10:dc:d2:18:e6:ac:
60:89:0d:29:ca:68:46:bc:04:9d:fb:45:b9:de:8a:
f7:54:46:f5:1a:8c:f9:6a:ce:50:a2:a4:79:84:de:
bf:0a:3e:76:6c:04:00:8b:17:52:5f:36:6f:f6:11:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:E4:81:6B:B9:A2:51:04:43:A4:74:DE:DC:E4:6C:93:D8:56:2D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SX7kgWu5olEEQ6R03tzkbJPYVi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d9:51:c0:89:e8:18:0d:30:8f:33:ca:9c:db:5d:30:f2:af:
c5:f4:9c:cd:a8:b7:8b:85:df:6d:68:d1:07:fe:42:12:c5:02:
76:a1:93:35:66:36:a7:00:a1:4a:7d:fb:98:28:f3:8f:1b:47:
b6:07:58:c5:44:df:0c:c9:ba:64:5c:eb:66:83:ad:b5:4c:89:
8c:b4:a3:03:2d:0f:b0:1e:fc:db:51:5d:d2:96:30:ab:9f:18:
87:4b:86:e2:ec:a8:de:ff:91:91:cc:8e:f6:62:62:c6:f9:83:
43:d7:a5:a4:df:aa:fe:74:80:db:58:0d:0b:8f:4f:c4:c5:2e:
25:97:43:17:47:4a:18:17:84:3a:ca:f3:ba:49:0b:60:ff:ca:
e7:ee:08:81:b6:53:ac:87:9c:ae:94:73:53:15:ca:a5:c4:95:
ca:bf:f2:c0:5d:2c:72:c0:d0:0c:c2:52:b4:9f:ae:1c:13:2d:
95:19:d1:54:0a:bc:ad:5b:9c:d0:34:a5:fb:91:49:c3:bc:89:
3e:58:63:50:c4:9f:17:ac:e8:48:8b:2d:41:ed:55:62:56:6a:
d0:b6:a2:d7:3f:c7:e5:e1:d3:ba:8b:35:c8:3e:25:eb:c0:09:
a7:f8:23:35:30:e7:68:15:2f:89:c4:1d:0c:76:47:09:8a:cc:
80:03:ec:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIBD9PMv9pWHVEThL9nhZakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjIwNzE1MDg1MzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTdlZTQ4MTZiYjlhMjUxMDQ0M2E0NzRkZWRjZTQ2YzkzZDg1NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8unF9Sl2lL+qRWHNsQKQ4J2nSfG
GOcZaS0nMREUO1gRd7DQhgw7kTXzWtgsurL72IbhFneRqBbRCWx9gwzBEnzuxrOt
EnZRXXr7cC6X/2yHT9jdRCQKM0h0YucGVDKEmStlT7GMafsD1RkWKS/g9yQ0/h2F
0Fg58kcKqP3kl01RTwZbeKnc8kabw8C4uWmRmmZZvy78j6MiQ04iqOecEJ0DmFyx
qWdFlbrqnBHyc4BeKGuDZSQ+zJFVtZqBB9Q9LNAsgNGdUqKcW7YQ3NIY5qxgiQ0p
ymhGvASd+0W53or3VEb1Goz5as5QoqR5hN6/Cj52bAQAixdSXzZv9hFgawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEl+5IFruaJRBEOkdN7c5GyT2FYtMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvU1g3a2dXdTVvbEVFUTZSMDN0emtiSlBZVmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVszMA0G
CSqGSIb3DQEBCwUAA4IBAQA82VHAiegYDTCPM8qc210w8q/F9JzNqLeLhd9taNEH
/kISxQJ2oZM1ZjanAKFKffuYKPOPG0e2B1jFRN8MybpkXOtmg621TImMtKMDLQ+w
HvzbUV3SljCrnxiHS4bi7Kje/5GRzI72YmLG+YND16Wk36r+dIDbWA0Lj0/ExS4l
l0MXR0oYF4Q6yvO6SQtg/8rn7giBtlOsh5yulHNTFcqlxJXKv/LAXSxywNAMwlK0
n64cEy2VGdFUCrytW5zQNKX7kUnDvIk+WGNQxJ8XrOhIiy1B7VViVmrQtqLXP8fl
4dO6izXIPiXrwAmn+CM1MOdoFS+JxB0MdkcJisyAA+yp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org