Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/bVOwW4p-1uYBrn0JgE9qWRzY74s.roa
File: bVOwW4p-1uYBrn0JgE9qWRzY74s.roa (raw, json)
Hash identifier: K66jt5BCZtH7/22IU+tNFhg9nz8n//tYLjSjp0CbZ9c=
Subject key identifier: 6D:53:B0:5B:8A:7E:D6:E6:01:AE:7D:09:80:4F:6A:59:1C:D8:EF:8B
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 0689441A
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/bVOwW4p-1uYBrn0JgE9qWRzY74s.roa
Signing time: Wed 06 Apr 2022 11:38:08 +0000
ROA not before: Wed 06 Apr 2022 11:38:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.146.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109659162 (0x689441a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Apr 6 11:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d53b05b8a7ed6e601ae7d09804f6a591cd8ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:0e:fb:62:80:21:1d:cb:56:18:a7:a8:cf:
d0:6a:cd:97:19:09:7c:56:a3:26:6a:c3:a5:23:6c:
0d:41:3f:32:86:64:8b:8a:59:2c:6c:d4:32:3f:09:
89:77:28:4a:ae:2e:ee:8d:d3:2c:b4:a8:9c:e4:76:
1e:03:89:a2:35:fc:9a:bb:b2:41:53:33:cd:e9:e4:
5e:70:9a:d8:14:4f:6b:83:a5:dc:03:e6:a2:3e:b6:
82:79:aa:f3:8b:81:8e:21:dd:e4:dc:a6:33:13:86:
9b:4c:d4:1f:d3:3f:60:1b:0b:8d:c6:e0:ee:48:fd:
25:f7:36:52:cd:de:59:11:4f:bd:84:f8:e7:9b:7b:
54:57:f2:e1:dc:81:3b:46:c0:b3:d6:f6:98:0f:c2:
02:ff:f2:dd:b8:3d:8f:96:f7:81:d4:52:b2:f0:f6:
d1:64:28:48:1f:cd:f9:07:e5:74:45:21:ee:e9:67:
a1:c0:86:ad:57:3f:a7:f0:f9:15:57:65:15:9d:35:
be:d1:43:17:cb:5b:c1:0e:03:ca:d1:01:6a:2d:d1:
6a:86:f9:5e:14:f7:32:20:1a:36:78:ed:64:53:70:
11:5c:b0:aa:13:24:57:a5:d7:11:ea:96:ce:85:ee:
97:c2:31:bd:95:2b:cf:c7:13:db:56:68:54:c4:f5:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:B0:5B:8A:7E:D6:E6:01:AE:7D:09:80:4F:6A:59:1C:D8:EF:8B
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/bVOwW4p-1uYBrn0JgE9qWRzY74s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.161.0/24
Signature Algorithm: sha256WithRSAEncryption
70:47:b3:a0:6b:27:63:5a:d2:d8:97:08:f8:20:b1:d0:dc:4e:
3d:96:05:66:df:ff:33:77:c8:3a:5f:4f:03:c5:fc:b0:6f:27:
4e:a6:4f:e7:47:52:d3:a5:a2:7a:a9:68:fd:49:d2:18:2f:5d:
ad:06:25:a9:8e:4c:7b:89:62:0d:31:39:c8:4e:4d:62:44:0f:
f9:81:43:9d:30:b5:14:71:6c:23:93:61:bd:53:f9:9d:0d:04:
7d:2e:33:86:11:7d:c2:76:b9:17:1f:4b:55:d3:2d:4b:1b:09:
fc:f6:ec:d1:4e:b8:ea:01:aa:80:2b:5b:48:de:70:29:98:3b:
69:e0:e5:ca:4f:7b:48:9d:1a:0b:71:11:9a:c9:ea:e5:0e:e2:
6b:ac:d8:92:31:47:12:e2:1d:9a:1b:75:c2:dc:fd:95:be:c2:
ea:85:16:29:ca:53:21:56:1f:d0:d0:ab:f5:db:18:3c:fe:c8:
6f:2b:5f:3f:e3:1c:ee:aa:de:30:a2:71:b8:6f:c5:7a:db:a1:
11:3a:d0:b3:d8:cc:ef:e1:82:79:f3:97:8a:6a:77:45:7a:e8:
d4:72:14:2c:39:48:9c:ef:bf:cf:62:c1:ba:0d:2d:d5:ee:af:
dd:e3:41:99:91:38:3d:44:f7:b6:33:b9:1c:cd:a4:b0:96:36:
4f:6f:3d:d1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBolEGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZDVhZjNhZTIxZjk3ZWM0ZWM3NWQ1MWE4NWEzZTE2MmVkN2E5ZWQ3MB4XDTIyMDQw
NjExMzgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQ1M2IwNWI4YTdl
ZDZlNjAxYWU3ZDA5ODA0ZjZhNTkxY2Q4ZWY4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQuDvtigCEdy1YYp6jP0GrNlxkJfFajJmrDpSNsDUE/MoZk
i4pZLGzUMj8JiXcoSq4u7o3TLLSonOR2HgOJojX8mruyQVMzzenkXnCa2BRPa4Ol
3APmoj62gnmq84uBjiHd5NymMxOGm0zUH9M/YBsLjcbg7kj9Jfc2Us3eWRFPvYT4
55t7VFfy4dyBO0bAs9b2mA/CAv/y3bg9j5b3gdRSsvD20WQoSB/N+QfldEUh7uln
ocCGrVc/p/D5FVdlFZ01vtFDF8tbwQ4DytEBai3Raob5XhT3MiAaNnjtZFNwEVyw
qhMkV6XXEeqWzoXul8IxvZUrz8cT21ZoVMT1xNUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRtU7Bbin7W5gGufQmAT2pZHNjvizAfBgNVHSMEGDAWgBQdWvOuIfl+xOx1
1RqFo+Fi7Xqe1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hWcnpyaUg1ZnNUc2RkVWFoYVBoWXUxNm50Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvZDM0YWNmLTNhNWYtNDY0Zi05NWVlLTkwOGJiYTEyYjIxYS8x
L2JWT3dXNHAtMXVZQnJuMEpnRTlxV1J6WTc0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
ZDM0YWNmLTNhNWYtNDY0Zi05NWVlLTkwOGJiYTEyYjIxYS8xL0hWcnpyaUg1ZnNU
c2RkVWFoYVBoWXUxNm50Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2SoTANBgkqhkiG9w0BAQsFAAOC
AQEAcEezoGsnY1rS2JcI+CCx0NxOPZYFZt//M3fIOl9PA8X8sG8nTqZP50dS06Wi
eqlo/UnSGC9drQYlqY5Me4liDTE5yE5NYkQP+YFDnTC1FHFsI5NhvVP5nQ0EfS4z
hhF9wna5Fx9LVdMtSxsJ/Pbs0U646gGqgCtbSN5wKZg7aeDlyk97SJ0aC3ERmsnq
5Q7ia6zYkjFHEuIdmht1wtz9lb7C6oUWKcpTIVYf0NCr9dsYPP7IbytfP+Mc7qre
MKJxuG/FetuhETrQs9jM7+GCefOXimp3RXro1HIULDlInO+/z2LBug0t1e6v3eNB
mZE4PUT3tjO5HM2ksJY2T2890Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-ams.rpki-client.org