Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/FdJNiZrwyw8-BZ54DZvFm1I0ck4.roa
File: FdJNiZrwyw8-BZ54DZvFm1I0ck4.roa (raw, json)
Hash identifier: jtx6EFa/wtMvWNO8oh408quJunM0Y2SppNGSYLBCqN4=
Subject key identifier: 15:D2:4D:89:9A:F0:CB:0F:3E:05:9E:78:0D:9B:C5:9B:52:34:72:4E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 07B27C4A
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/FdJNiZrwyw8-BZ54DZvFm1I0ck4.roa
Signing time: Sat 01 Jan 2022 07:53:38 +0000
ROA not before: Sat 01 Jan 2022 07:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202120
IP address blocks: 45.135.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129137738 (0x7b27c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 1 07:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d24d899af0cb0f3e059e780d9bc59b5234724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:ab:83:98:cb:9d:2b:7f:46:72:d5:f7:25:
4b:9b:27:30:65:bd:ad:72:57:95:38:df:ac:41:73:
93:90:f1:35:3c:03:9f:17:ad:17:e7:1b:6b:13:cc:
bd:39:ee:44:77:1f:46:91:5b:c3:63:92:44:48:99:
a7:8a:62:b0:61:a1:80:72:0e:50:09:ad:f0:25:06:
b4:7e:bc:4e:6b:12:46:ba:0b:3a:f1:c3:5f:b7:b2:
57:23:3d:4f:1f:4c:c7:56:68:a9:1c:a8:df:74:46:
bd:74:51:21:c5:cd:cd:00:79:1e:b6:52:5f:71:da:
60:4d:34:fc:82:fc:5c:48:4e:bc:50:82:df:29:77:
b2:5f:ac:b3:98:db:7c:b0:3c:b7:b5:20:02:70:0c:
63:a3:f5:91:c7:b5:ff:7a:cf:ea:da:64:56:77:26:
19:e2:fd:6d:68:4c:5f:f9:9a:1c:62:7b:04:b7:97:
62:c9:35:dc:45:4d:0e:ae:9e:f2:b1:88:10:f4:54:
5a:78:12:9b:ef:f5:3e:e4:09:f0:79:99:59:23:aa:
79:2d:7a:d6:05:e7:8a:75:90:9e:61:1f:d3:10:97:
13:e0:fd:da:91:ff:a4:59:b7:3f:80:2f:33:b2:6a:
af:38:ff:a2:87:54:6d:67:b7:b8:a4:fd:82:00:2e:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:4D:89:9A:F0:CB:0F:3E:05:9E:78:0D:9B:C5:9B:52:34:72:4E
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/FdJNiZrwyw8-BZ54DZvFm1I0ck4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b9:df:da:bd:4c:36:22:a3:ed:32:24:5f:cf:71:1c:f7:f9:
7a:9b:7d:3c:f7:61:03:9a:42:8f:4d:70:25:fb:0c:a5:0e:0e:
40:fb:84:b2:c5:c9:fb:7c:1d:7c:9e:53:22:ca:bc:7c:80:e8:
38:bf:e9:ae:a4:fa:ec:74:78:06:f3:2b:ff:34:46:47:7b:74:
39:b3:ff:9c:4b:a6:39:26:44:35:fd:03:67:80:35:22:5f:45:
f3:90:fb:01:9f:e7:73:b9:79:00:4b:88:1d:b8:96:95:42:ad:
ba:c2:dc:50:af:ae:d7:8e:94:77:fd:f7:f6:6b:c2:b8:5a:0b:
a7:44:57:a6:64:34:39:02:ca:91:8c:32:28:5d:1b:b4:44:77:
2e:79:92:b8:62:98:ab:43:2d:75:7a:db:35:42:e7:6e:da:92:
22:e9:51:25:17:9c:9e:b6:92:13:45:81:ca:ec:69:05:bb:4e:
b4:15:4f:79:1e:54:69:a0:e8:73:f4:de:6a:29:a9:17:8d:c2:
6a:db:3e:de:d5:51:d4:2a:b8:e8:67:6e:75:01:63:69:6d:25:
a2:d3:8a:fc:9b:d2:04:74:88:54:d5:89:94:9e:a7:14:13:b2:
ce:32:50:de:7d:33:80:ff:5c:24:91:69:ec:40:ff:45:43:5e:
c5:37:7b:07
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB7J8SjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTYwYjE0NzQ2YzU4NzUyNDRhZTNiNjk0MTYyZWM2ZDhjNjMyNTVlMB4XDTIyMDEw
MTA3NTMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVkMjRkODk5YWYw
Y2IwZjNlMDU5ZTc4MGQ5YmM1OWI1MjM0NzI0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMwSq4OYy50rf0Zy1fclS5snMGW9rXJXlTjfrEFzk5DxNTwD
nxetF+cbaxPMvTnuRHcfRpFbw2OSREiZp4pisGGhgHIOUAmt8CUGtH68TmsSRroL
OvHDX7eyVyM9Tx9Mx1ZoqRyo33RGvXRRIcXNzQB5HrZSX3HaYE00/IL8XEhOvFCC
3yl3sl+ss5jbfLA8t7UgAnAMY6P1kce1/3rP6tpkVncmGeL9bWhMX/maHGJ7BLeX
Ysk13EVNDq6e8rGIEPRUWngSm+/1PuQJ8HmZWSOqeS161gXninWQnmEf0xCXE+D9
2pH/pFm3P4AvM7Jqrzj/oodUbWe3uKT9ggAusxcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQV0k2JmvDLDz4FnngNm8WbUjRyTjAfBgNVHSMEGDAWgBS5YLFHRsWHUkSu
O2lBYuxtjGMlXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VXQ3hSMGJGaDFKRXJqdHBRV0xzYll4akpWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvNDU4MDc4LTQyNmUtNDQ0OS1hMmE5LTE4ODgyYTI4MDliMi8x
L0ZkSk5pWnJ3eXc4LUJaNTREWnZGbTFJMGNrNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
NDU4MDc4LTQyNmUtNDQ0OS1hMmE5LTE4ODgyYTI4MDliMi8xL3VXQ3hSMGJGaDFK
RXJqdHBRV0xzYll4akpWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2H0jANBgkqhkiG9w0BAQsFAAOC
AQEAhrnf2r1MNiKj7TIkX89xHPf5ept9PPdhA5pCj01wJfsMpQ4OQPuEssXJ+3wd
fJ5TIsq8fIDoOL/prqT67HR4BvMr/zRGR3t0ObP/nEumOSZENf0DZ4A1Il9F85D7
AZ/nc7l5AEuIHbiWlUKtusLcUK+u146Ud/339mvCuFoLp0RXpmQ0OQLKkYwyKF0b
tER3LnmSuGKYq0MtdXrbNULnbtqSIulRJRecnraSE0WByuxpBbtOtBVPeR5UaaDo
c/TeaimpF43Cats+3tVR1Cq46GdudQFjaW0lotOK/JvSBHSIVNWJlJ6nFBOyzjJQ
3n0zgP9cJJFp7ED/RUNexTd7Bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org