Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Azldpo2JUfJ5piyINXN5RJYB0cI.roa
File: Azldpo2JUfJ5piyINXN5RJYB0cI.roa (raw, json)
Hash identifier: eQelKutx3n0TsEoagVcaLqMtxr1ZnsudtNmdzWUjymQ=
Subject key identifier: 03:39:5D:A6:8D:89:51:F2:79:A6:2C:88:35:73:79:44:96:01:D1:C2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D1898D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Azldpo2JUfJ5piyINXN5RJYB0cI.roa
Signing time: Sat 01 Jan 2022 04:54:32 +0000
ROA not before: Sat 01 Jan 2022 04:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138577
IP address blocks: 45.15.37.0/24 maxlen: 32
45.15.36.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399608205 (0x17d1898d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03395da68d8951f279a62c88357379449601d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:5f:75:7e:09:83:49:2f:8f:e1:6f:57:7c:
16:0b:b4:b0:0e:f9:fa:df:7e:d9:9e:b3:aa:35:b6:
0a:bb:29:78:8e:5a:8f:4a:2d:33:3e:ec:74:75:67:
61:32:1a:da:e6:46:9a:ef:ac:12:b4:a6:7c:e2:a0:
72:42:d4:21:04:06:25:28:71:43:f5:97:f0:ca:db:
75:19:1a:12:a5:1e:f7:65:7e:94:06:e1:ec:af:e4:
ec:1a:3c:b4:32:11:f0:49:61:da:db:23:f6:f0:55:
5d:ae:62:77:84:9f:8a:16:c1:9e:0c:95:f5:c9:46:
b5:ae:22:7e:85:d1:1a:6b:13:01:1c:b1:e3:2e:d9:
d8:58:c1:e0:43:ab:8e:8e:af:71:df:5b:a4:14:4c:
e9:9b:ab:30:38:47:05:8a:d5:96:ff:17:f4:42:70:
ce:bb:8a:46:46:b5:02:f9:25:26:ac:ac:d7:31:cb:
f0:c1:05:bc:26:e7:24:f8:46:77:7f:f4:41:96:e2:
a2:dd:c1:ce:07:0d:62:5e:09:0c:61:63:66:63:a1:
23:3a:ad:66:b8:0d:e3:c9:18:c7:b5:d3:df:40:21:
0b:50:f8:1f:6d:99:9b:55:06:c7:18:29:92:b4:ff:
f0:25:dc:9e:0a:10:88:ea:de:99:15:29:6b:77:67:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:5D:A6:8D:89:51:F2:79:A6:2C:88:35:73:79:44:96:01:D1:C2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Azldpo2JUfJ5piyINXN5RJYB0cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.36.0/23
Signature Algorithm: sha256WithRSAEncryption
95:0f:f6:d8:13:52:04:d1:e9:68:0b:b7:3b:26:1a:ee:95:b4:
c9:f3:f7:53:2f:ff:cb:c6:2b:35:c8:ec:62:90:2d:42:88:1c:
6c:2c:2e:3e:9c:d2:63:9e:fd:09:45:84:92:9c:42:dc:95:e2:
65:d5:90:03:91:80:24:0e:89:4c:a5:66:46:08:a8:3f:11:93:
85:17:a3:a6:ce:e5:9a:90:c1:41:10:07:7c:0d:a5:42:d3:12:
19:1e:1d:05:f4:1b:76:79:bc:e6:6a:96:02:67:c8:8a:95:5f:
93:2b:19:73:9d:2d:bb:d7:bc:86:17:a6:cd:91:42:dd:a1:fc:
9b:50:c3:03:91:2a:ed:a9:96:d6:5f:7d:91:2f:05:92:c8:07:
4a:c3:e5:9b:5b:d8:e0:43:b7:52:7f:ec:45:49:e6:fe:47:9c:
42:f0:80:21:92:20:8e:56:de:e6:54:ac:87:f4:4e:19:7e:bd:
dd:80:0b:29:c8:82:54:48:d3:82:e3:84:1a:64:30:01:27:05:
d4:a0:cc:0b:9c:c2:a8:ff:b6:2b:5b:74:7a:b6:d8:df:04:a7:
3f:16:cf:14:98:98:0d:3e:5b:a5:b8:3a:fe:d3:81:9f:d4:d7:
1b:ad:14:6c:3f:80:7f:60:1f:20:01:2b:89:66:c9:b4:94:3a:
7b:36:91:a4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF9GJjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDMzOTVkYTY4ZDg5
NTFmMjc5YTYyYzg4MzU3Mzc5NDQ5NjAxZDFjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6bX3V+CYNJL4/hb1d8Fgu0sA75+t9+2Z6zqjW2CrspeI5a
j0otMz7sdHVnYTIa2uZGmu+sErSmfOKgckLUIQQGJShxQ/WX8MrbdRkaEqUe92V+
lAbh7K/k7Bo8tDIR8Elh2tsj9vBVXa5id4SfihbBngyV9clGta4ifoXRGmsTARyx
4y7Z2FjB4EOrjo6vcd9bpBRM6ZurMDhHBYrVlv8X9EJwzruKRka1AvklJqys1zHL
8MEFvCbnJPhGd3/0QZbiot3BzgcNYl4JDGFjZmOhIzqtZrgN48kYx7XT30AhC1D4
H22Zm1UGxxgpkrT/8CXcngoQiOremRUpa3dn8v0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQDOV2mjYlR8nmmLIg1c3lElgHRwjAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L0F6bGRwbzJKVWZKNXBpeUlOWE41UkpZQjBjSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0PJDANBgkqhkiG9w0BAQsFAAOC
AQEAlQ/22BNSBNHpaAu3OyYa7pW0yfP3Uy//y8YrNcjsYpAtQogcbCwuPpzSY579
CUWEkpxC3JXiZdWQA5GAJA6JTKVmRgioPxGThRejps7lmpDBQRAHfA2lQtMSGR4d
BfQbdnm85mqWAmfIipVfkysZc50tu9e8hhemzZFC3aH8m1DDA5Eq7amW1l99kS8F
ksgHSsPlm1vY4EO3Un/sRUnm/kecQvCAIZIgjlbe5lSsh/ROGX693YALKciCVEjT
guOEGmQwAScF1KDMC5zCqP+2K1t0erbY3wSnPxbPFJiYDT5bpbg6/tOBn9TXG60U
bD+Af2AfIAEriWbJtJQ6ezaRpA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org