Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/cBBCOKe1cjqFkBWD5s2MTuQf74E.roa
File: cBBCOKe1cjqFkBWD5s2MTuQf74E.roa (raw, json)
Hash identifier: 6XH6FVCL71Y8MEXowEouOOoOpvGScCCZNyStpZhxezI=
Subject key identifier: 70:10:42:38:A7:B5:72:3A:85:90:15:83:E6:CD:8C:4E:E4:1F:EF:81
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 02DC0C83
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/cBBCOKe1cjqFkBWD5s2MTuQf74E.roa
Signing time: Sat 11 Jun 2022 17:25:02 +0000
ROA not before: Sat 11 Jun 2022 17:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56381
IP address blocks: 141.98.136.0/24 maxlen: 24
45.129.92.0/24 maxlen: 24
2a09:11c0:1000::/36 maxlen: 36
2a09:11c0:100::/48 maxlen: 48
2a09:11c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47975555 (0x2dc0c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jun 11 17:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70104238a7b5723a85901583e6cd8c4ee41fef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:d5:76:d6:95:7e:a8:e2:8a:49:f6:5c:ed:
7c:c3:b7:df:1e:9d:a7:f1:d9:c5:b7:df:b2:09:9c:
02:46:f6:ad:95:e1:51:12:9e:84:1c:5c:8f:e3:df:
7b:4b:1d:91:d2:c2:fb:65:7e:f5:0b:93:e7:47:8b:
e9:af:30:72:94:22:30:a9:e9:13:91:32:ad:7e:7d:
9d:6a:65:bb:7c:a5:39:f9:83:2e:0a:cb:9b:f8:ab:
a6:46:29:99:59:8f:00:2f:aa:c4:40:f9:d5:ca:31:
a0:d1:a5:32:ad:b4:af:7c:4b:8e:fe:0a:38:80:c6:
6e:66:dc:9e:9b:32:c8:5f:ba:75:82:53:93:e3:c7:
d0:e7:f2:0e:42:75:25:90:b5:71:25:c8:b4:33:e1:
87:a3:72:89:6f:12:8b:85:e7:a8:45:1e:49:f3:0c:
73:aa:4d:f6:04:ed:c2:de:eb:6d:7d:94:c8:8c:2b:
aa:b0:3a:b0:b4:dd:41:ee:21:64:98:ef:26:fd:f6:
94:50:af:22:83:88:fc:5e:82:e9:49:aa:53:66:6b:
4e:ab:4a:eb:f4:87:27:6a:7b:24:f6:01:33:66:63:
bc:8d:e4:ee:4f:30:ba:b6:33:17:f7:de:07:6a:97:
ac:69:ca:be:08:08:34:13:4d:10:1c:b0:6b:dd:70:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:42:38:A7:B5:72:3A:85:90:15:83:E6:CD:8C:4E:E4:1F:EF:81
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/cBBCOKe1cjqFkBWD5s2MTuQf74E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
141.98.136.0/24
IPv6:
2a09:11c0::/48
2a09:11c0:100::/48
2a09:11c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
52:f9:5c:2b:68:0b:f0:df:8c:27:19:64:17:d2:ac:04:7c:c7:
5e:3d:02:41:e6:b6:6e:ad:95:85:24:1e:22:bc:fd:5c:02:a4:
86:15:95:fd:42:39:f5:b8:9b:09:06:47:28:54:30:42:e3:40:
8d:30:13:10:37:35:60:ff:4a:86:0a:29:78:d8:e4:e3:a3:4c:
b3:55:c1:03:29:f7:57:ce:f3:6e:3d:a7:2c:7c:a1:f6:e3:75:
de:57:c6:39:29:ab:3f:58:70:da:12:39:2a:03:3c:e9:43:19:
d0:dd:ae:2a:d0:e2:ac:db:77:b2:04:d2:2b:76:29:e1:4e:a1:
ca:e8:b9:a3:c0:59:d7:29:a0:1b:b1:1a:25:f2:63:1a:01:e8:
57:39:b3:d1:90:b3:9b:3a:f7:5e:48:28:71:3f:a1:72:92:97:
ca:94:45:d4:46:54:6c:51:09:6e:71:97:d5:c9:71:25:b8:e2:
fb:7e:7f:7e:24:2d:5f:47:ae:41:3f:a3:b5:22:12:66:7e:82:
cc:98:ac:b0:02:f8:ff:f3:3b:b9:f3:ad:75:2a:97:e3:57:2a:
18:9c:63:69:c3:e6:e8:6b:98:83:1e:af:95:4b:5a:95:94:57:
70:96:8f:bf:96:b4:5f:96:40:5c:30:f3:52:90:cf:36:22:48:
2a:07:4f:dd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEAtwMgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDRlYjIwNGYzNTgwMDQ3ODgyMjRlMmZiMThlNGQ1ZTc0YmViZjhkMB4XDTIyMDYx
MTE3MjUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzAxMDQyMzhhN2I1
NzIzYTg1OTAxNTgzZTZjZDhjNGVlNDFmZWY4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6x1XbWlX6o4opJ9lztfMO33x6dp/HZxbffsgmcAkb2rZXh
URKehBxcj+Pfe0sdkdLC+2V+9QuT50eL6a8wcpQiMKnpE5EyrX59nWplu3ylOfmD
LgrLm/irpkYpmVmPAC+qxED51coxoNGlMq20r3xLjv4KOIDGbmbcnpsyyF+6dYJT
k+PH0OfyDkJ1JZC1cSXItDPhh6NyiW8Si4XnqEUeSfMMc6pN9gTtwt7rbX2UyIwr
qrA6sLTdQe4hZJjvJv32lFCvIoOI/F6C6UmqU2ZrTqtK6/SHJ2p7JPYBM2ZjvI3k
7k8wurYzF/feB2qXrGnKvggINBNNEBywa91w8zMCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBRwEEI4p7VyOoWQFYPmzYxO5B/vgTAfBgNVHSMEGDAWgBTwTrIE81gAR4gi
Ti+xjk1edL6/jTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhFNnlCUE5ZQUVlSUlrNHZzWTVOWG5TLXY0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOWFiNDJhLWRmOTItNGU0Mi05ZTMzLTVjNTg5MmFmYTQ4Ny8x
L2NCQkNPS2UxY2pxRmtCV0Q1czJNVHVRZjc0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OWFiNDJhLWRmOTItNGU0Mi05ZTMzLTVjNTg5MmFmYTQ4Ny8xLzhFNnlCUE5ZQUVl
SUlrNHZzWTVOWG5TLXY0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwEgQCAAEwDAMEAC2BXAMEAI1iiDAgBAIAAjAaAwcA
KgkRwAAAAwcAKgkRwAEAAwYEKgkRwBAwDQYJKoZIhvcNAQELBQADggEBAFL5XCto
C/DfjCcZZBfSrAR8x149AkHmtm6tlYUkHiK8/VwCpIYVlf1COfW4mwkGRyhUMELj
QI0wExA3NWD/SoYKKXjY5OOjTLNVwQMp91fO8249pyx8ofbjdd5Xxjkpqz9YcNoS
OSoDPOlDGdDdrirQ4qzbd7IE0it2KeFOocrouaPAWdcpoBuxGiXyYxoB6Fc5s9GQ
s5s6915IKHE/oXKSl8qURdRGVGxRCW5xl9XJcSW44vt+f34kLV9HrkE/o7UiEmZ+
gsyYrLAC+P/zO7nzrXUql+NXKhicY2nD5uhrmIMer5VLWpWUV3CWj7+WtF+WQFww
81KQzzYiSCoHT90=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org