Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eSAwNJHJpzU19RmMxhpHKtnlTw0.roa
File: eSAwNJHJpzU19RmMxhpHKtnlTw0.roa (raw, json)
Hash identifier: aGT8vLzJmholgXBDgsGGE9uOS3A5iBKRhwzgJOvt2Sc=
Subject key identifier: 79:20:30:34:91:C9:A7:35:35:F5:19:8C:C6:1A:47:2A:D9:E5:4F:0D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA459A7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eSAwNJHJpzU19RmMxhpHKtnlTw0.roa
Signing time: Sat 01 Jan 2022 05:04:49 +0000
ROA not before: Sat 01 Jan 2022 05:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7040
IP address blocks: 45.130.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212097447 (0xca459a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7920303491c9a73535f5198cc61a472ad9e54f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:53:4d:e2:8a:58:7f:3e:d6:d4:bb:1c:8b:
ac:bb:1a:ef:f1:9e:3e:65:fd:f1:e8:00:a2:34:3d:
d1:f5:61:15:66:be:65:c6:2e:3d:40:44:28:76:87:
cf:db:8d:e8:f4:44:77:71:02:d4:d6:19:9f:c0:27:
8e:b0:61:cd:86:47:09:99:92:95:b4:46:63:ba:0e:
aa:29:56:26:bd:41:da:ec:be:1c:20:13:7f:26:c7:
20:f9:47:ca:64:61:dd:09:01:f9:43:8c:5a:36:2b:
ae:f7:e3:0e:07:63:0c:45:d7:c0:b6:10:1a:e2:85:
55:f8:9b:c1:27:29:04:99:19:43:a2:c7:cb:2d:02:
13:37:a0:9d:a5:96:42:e9:3a:d3:47:b7:6c:ba:27:
cb:b7:2f:86:44:81:f3:61:ee:8e:21:35:a1:4f:b6:
61:e2:73:f8:79:b3:7a:72:51:fb:32:89:5a:9d:cd:
35:6e:b9:b5:91:7d:98:2f:1c:48:fa:3a:fa:6f:d3:
2a:3f:28:6c:86:bc:cf:66:fa:04:07:06:1b:02:de:
ed:d0:e3:23:1a:5e:ae:c4:0f:99:5b:76:20:91:ad:
87:23:47:66:85:84:81:ed:a7:e8:47:d7:5e:46:90:
b3:4e:40:13:be:eb:3b:45:6a:06:24:c0:78:ff:85:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:30:34:91:C9:A7:35:35:F5:19:8C:C6:1A:47:2A:D9:E5:4F:0D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eSAwNJHJpzU19RmMxhpHKtnlTw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.80.0/24
Signature Algorithm: sha256WithRSAEncryption
44:af:97:89:7b:e8:31:58:ff:25:12:2b:79:a0:fb:87:ac:4a:
38:d1:ed:d0:90:ff:93:61:12:c8:c6:f2:c0:74:ad:91:c4:df:
f8:4e:17:50:06:43:4e:19:ce:6e:b6:90:a8:59:22:dc:80:3f:
09:43:9e:2c:d5:12:f1:8e:f1:a7:66:b9:2e:89:37:45:f4:37:
68:b4:fa:e9:08:f8:9e:72:c3:8d:8c:d7:d0:2e:a0:c4:9f:ba:
fc:cb:5c:b7:eb:09:22:61:be:6d:4d:b0:93:3a:91:fd:af:04:
39:e6:86:47:52:7f:28:f4:90:0a:ee:79:01:c5:f4:a3:42:23:
0d:70:30:63:c4:32:53:c3:90:43:22:50:61:63:bf:9d:05:46:
92:36:fd:fd:f7:5f:9a:73:ce:ff:ee:3a:3f:82:da:c8:cd:d9:
6c:9d:77:4e:96:fb:5b:fb:25:72:11:ac:1d:bf:f7:67:3f:e5:
ac:11:40:40:12:1a:e1:0d:8f:15:c0:0d:1b:14:d9:56:48:3d:
7a:08:12:c5:e1:a4:2f:b9:55:b9:33:fd:87:33:9f:0c:3d:81:
5b:9a:22:8d:88:18:b4:f9:14:3b:01:54:e7:85:49:3e:b2:c4:
b7:75:70:25:12:a3:6b:55:c7:99:bc:34:89:eb:99:5f:11:ab:
56:bf:2b:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDKRZpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDQ0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkyMDMwMzQ5MWM5
YTczNTM1ZjUxOThjYzYxYTQ3MmFkOWU1NGYwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRRU03iilh/PtbUuxyLrLsa7/GePmX98egAojQ90fVhFWa+
ZcYuPUBEKHaHz9uN6PREd3EC1NYZn8AnjrBhzYZHCZmSlbRGY7oOqilWJr1B2uy+
HCATfybHIPlHymRh3QkB+UOMWjYrrvfjDgdjDEXXwLYQGuKFVfibwScpBJkZQ6LH
yy0CEzegnaWWQuk600e3bLony7cvhkSB82HujiE1oU+2YeJz+HmzenJR+zKJWp3N
NW65tZF9mC8cSPo6+m/TKj8obIa8z2b6BAcGGwLe7dDjIxpersQPmVt2IJGthyNH
ZoWEge2n6EfXXkaQs05AE77rO0VqBiTAeP+FmzMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5IDA0kcmnNTX1GYzGGkcq2eVPDTAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L2VTQXdOSkhKcHpVMTlSbU14aHBIS3RubFR3MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2CUDANBgkqhkiG9w0BAQsFAAOC
AQEARK+XiXvoMVj/JRIreaD7h6xKONHt0JD/k2ESyMbywHStkcTf+E4XUAZDThnO
braQqFki3IA/CUOeLNUS8Y7xp2a5Lok3RfQ3aLT66Qj4nnLDjYzX0C6gxJ+6/Mtc
t+sJImG+bU2wkzqR/a8EOeaGR1J/KPSQCu55AcX0o0IjDXAwY8QyU8OQQyJQYWO/
nQVGkjb9/fdfmnPO/+46P4LayM3ZbJ13Tpb7W/slchGsHb/3Zz/lrBFAQBIa4Q2P
FcANGxTZVkg9eggSxeGkL7lVuTP9hzOfDD2BW5oijYgYtPkUOwFU54VJPrLEt3Vw
JRKja1XHmbw0ieuZXxGrVr8rjA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org