Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fvQmFn471s6-5ZHzp4weLA7WwWE.roa
File: fvQmFn471s6-5ZHzp4weLA7WwWE.roa (raw, json)
Hash identifier: kBFLoujvgY8nI1cblKofJmGt/E8g1rPXG7tlU3F4K3c=
Subject key identifier: 7E:F4:26:16:7E:3B:D6:CE:BE:E5:91:F3:A7:8C:1E:2C:0E:D6:C1:61
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 034C749A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fvQmFn471s6-5ZHzp4weLA7WwWE.roa
Signing time: Sat 01 Jan 2022 16:04:42 +0000
ROA not before: Sat 01 Jan 2022 16:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210720
IP address blocks: 45.8.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55342234 (0x34c749a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef426167e3bd6cebee591f3a78c1e2c0ed6c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:e2:d9:02:25:bf:e2:d6:1d:87:76:2d:66:
af:a3:9b:4c:05:df:2c:71:67:ca:2e:1d:a6:d0:66:
2e:b7:e1:43:c4:09:dc:a2:b6:8a:90:52:e1:1b:f5:
b2:36:a4:ab:bf:96:9a:6d:44:a6:cf:ec:12:e0:69:
72:07:aa:f5:5f:c2:67:f9:16:8c:9b:37:de:c6:e2:
f1:cf:47:83:0b:db:49:00:79:e2:1d:96:c5:f9:cd:
07:41:b0:ce:8c:d7:84:eb:17:15:1f:40:44:63:0b:
54:26:d3:bf:5e:5f:f5:78:b4:25:14:ff:47:69:05:
04:6b:a5:7b:ea:a8:ae:5d:7e:b2:86:10:02:9d:ce:
e3:e4:c6:66:7d:b7:67:87:a8:b4:b5:28:ec:29:b6:
64:4f:55:9b:1f:14:31:57:47:0f:bf:a7:f4:c9:c2:
97:51:6b:16:3d:4a:01:f7:96:f1:aa:53:42:6f:8a:
ea:df:ce:7d:49:12:57:4a:9f:4e:2e:1b:23:3f:4d:
84:4f:c1:45:8a:51:41:7b:5b:ae:87:6c:cf:17:e5:
c0:e4:c3:34:99:cc:ae:46:7c:26:a8:00:f6:c5:de:
87:42:a1:5c:d4:e8:5b:3d:95:88:b6:ff:e4:ab:cf:
12:80:8b:30:0d:bb:6e:02:82:1f:52:94:45:e2:f7:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:26:16:7E:3B:D6:CE:BE:E5:91:F3:A7:8C:1E:2C:0E:D6:C1:61
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fvQmFn471s6-5ZHzp4weLA7WwWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5c:c1:8e:05:f2:81:76:44:48:e5:b5:95:27:25:49:45:86:
4d:da:c6:15:f6:de:4b:86:56:c7:a4:49:53:1b:bb:5d:6b:5b:
e8:38:87:3c:d7:bd:16:90:c7:1c:9e:b2:f6:7f:e5:91:a6:27:
a4:d5:78:88:41:be:85:03:f6:d8:f7:aa:8f:95:d0:ad:cb:db:
b5:96:4a:55:43:f9:d4:bb:df:b9:af:c7:88:19:0a:1b:80:86:
1b:f5:b5:ff:0b:fb:27:22:19:96:af:1f:aa:e4:87:1d:cc:27:
65:82:f9:26:7b:02:e9:47:9b:74:a2:3a:e6:85:f4:05:de:f9:
14:bc:7f:8d:d6:ea:80:e6:f8:68:51:f0:26:a2:af:e8:5b:bf:
df:42:23:56:31:00:0b:b5:ed:23:fe:e9:b5:20:87:fe:1d:64:
57:6f:ee:29:72:05:7b:d6:6c:fb:26:38:fe:47:1b:3f:6b:ad:
90:0b:b7:9b:d4:76:a7:32:4e:dd:a8:5f:e1:3d:73:82:0c:15:
bd:03:22:b2:f9:11:e5:69:a5:33:44:95:33:4c:ee:d9:21:6c:
c4:fb:5c:0d:49:65:a9:b3:f0:9b:a4:09:f9:96:91:34:9f:52:
39:06:d2:4c:81:0c:29:fe:47:2b:86:18:e3:b5:db:9e:58:fe:
f4:bf:73:0e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0x0mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDEw
MTE2MDQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VmNDI2MTY3ZTNi
ZDZjZWJlZTU5MWYzYTc4YzFlMmMwZWQ2YzE2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMR/4tkCJb/i1h2Hdi1mr6ObTAXfLHFnyi4dptBmLrfhQ8QJ
3KK2ipBS4Rv1sjakq7+Wmm1Eps/sEuBpcgeq9V/CZ/kWjJs33sbi8c9HgwvbSQB5
4h2WxfnNB0GwzozXhOsXFR9ARGMLVCbTv15f9Xi0JRT/R2kFBGule+qorl1+soYQ
Ap3O4+TGZn23Z4eotLUo7Cm2ZE9Vmx8UMVdHD7+n9MnCl1FrFj1KAfeW8apTQm+K
6t/OfUkSV0qfTi4bIz9NhE/BRYpRQXtbrodszxflwOTDNJnMrkZ8JqgA9sXeh0Kh
XNToWz2ViLb/5KvPEoCLMA27bgKCH1KUReL31WkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR+9CYWfjvWzr7lkfOnjB4sDtbBYTAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L2Z2UW1GbjQ3MXM2LTVaSHpwNHdlTEE3V3dXRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0I0TANBgkqhkiG9w0BAQsFAAOC
AQEAHVzBjgXygXZESOW1lSclSUWGTdrGFfbeS4ZWx6RJUxu7XWtb6DiHPNe9FpDH
HJ6y9n/lkaYnpNV4iEG+hQP22Peqj5XQrcvbtZZKVUP51Lvfua/HiBkKG4CGG/W1
/wv7JyIZlq8fquSHHcwnZYL5JnsC6UebdKI65oX0Bd75FLx/jdbqgOb4aFHwJqKv
6Fu/30IjVjEAC7XtI/7ptSCH/h1kV2/uKXIFe9Zs+yY4/kcbP2utkAu3m9R2pzJO
3ahf4T1zggwVvQMisvkR5WmlM0SVM0zu2SFsxPtcDUllqbPwm6QJ+ZaRNJ9SOQbS
TIEMKf5HK4YY47Xbnlj+9L9zDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org