Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/e626n6ixC29BGgbl7qHOOD-hlrQ.roa
File: e626n6ixC29BGgbl7qHOOD-hlrQ.roa (raw, json)
Hash identifier: /Njpr59B3MnyKbfdu88h7jFOq+uIPOks/bL7jvXlgv8=
Subject key identifier: 7B:AD:BA:9F:A8:B1:0B:6F:41:1A:06:E5:EE:A1:CE:38:3F:A1:96:B4
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 027222E2
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/e626n6ixC29BGgbl7qHOOD-hlrQ.roa
Signing time: Sat 01 Jan 2022 11:04:44 +0000
ROA not before: Sat 01 Jan 2022 11:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208115
IP address blocks: 45.157.54.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
45.157.52.0/24 maxlen: 24
45.157.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41034466 (0x27222e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 11:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7badba9fa8b10b6f411a06e5eea1ce383fa196b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:18:af:74:c7:77:1b:bf:9a:c2:00:b2:f8:
e5:15:6c:3b:c1:f4:a7:a6:6d:32:e0:a3:e8:b4:4b:
5c:44:a8:89:60:aa:33:63:ef:2f:1e:c7:38:cc:c4:
56:05:ac:77:50:3f:f5:94:fc:53:13:4f:4e:21:28:
49:e2:42:d2:d1:48:68:26:e1:40:3e:d5:1c:eb:a0:
0b:f0:0e:44:35:12:fc:ff:ef:e2:37:41:d1:4f:91:
f7:cd:ef:e4:02:1f:de:8f:f8:e3:e7:9e:6c:be:25:
0e:1f:39:8a:b9:3c:fc:dd:fc:94:34:eb:f2:c0:d3:
57:ad:28:af:e4:5c:4b:46:9b:2b:f4:8d:96:fa:a3:
b7:e5:92:13:22:e3:19:d3:15:72:70:92:db:27:b2:
01:16:20:0d:8a:6e:af:f8:68:35:e5:eb:28:0d:91:
c9:6f:8e:84:c5:50:0a:34:cc:55:7a:36:84:33:65:
83:c4:58:4f:0a:cc:3e:d1:ca:b8:1c:4a:f3:31:7b:
49:21:ec:c9:88:fc:c6:8a:1b:5d:b8:bf:4f:c6:4a:
52:2a:2c:b3:1b:87:ac:cd:ae:67:ef:19:ec:2f:9a:
1a:c6:aa:ab:c3:9e:06:6c:cf:4d:12:a0:b4:8e:dc:
c3:eb:70:cb:eb:47:19:cc:f1:d8:43:f4:7c:69:7c:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:BA:9F:A8:B1:0B:6F:41:1A:06:E5:EE:A1:CE:38:3F:A1:96:B4
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/e626n6ixC29BGgbl7qHOOD-hlrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:c3:22:22:13:bf:8f:4d:cb:b7:31:6d:23:ae:e5:f5:be:cc:
8d:02:22:fc:18:e0:16:51:5b:a4:09:08:fc:1b:6f:17:2e:23:
db:13:ec:29:2c:cd:96:54:8a:5b:39:58:92:b1:7b:af:94:c2:
8f:8e:1c:96:04:b1:11:be:75:f4:98:86:25:46:76:ff:67:84:
75:d4:dc:55:ee:e7:59:fa:9d:b6:98:c8:96:68:78:b4:61:d9:
7c:d9:1d:72:46:ba:69:94:8c:ce:f7:c8:77:2a:9b:7e:ec:57:
91:89:7e:0a:2e:91:7d:50:b2:40:53:95:e6:fe:79:74:ec:78:
db:ac:83:c5:7f:33:b2:fb:d2:c2:cc:85:0b:4e:c1:c4:9b:ec:
2d:32:cd:08:41:a0:35:9e:3b:1d:3e:98:63:da:86:30:62:56:
81:0a:49:cb:0a:f1:c5:c2:7f:68:f8:29:ef:d1:1c:f9:1e:cc:
c3:f9:06:8d:4e:1e:9b:4e:59:79:ec:de:83:c1:28:a7:43:6d:
40:e9:3b:9a:c6:4a:45:b6:16:78:3d:e4:3b:58:21:f5:9e:03:
ae:0c:35:f9:be:a6:5a:64:32:0d:54:92:bd:39:c6:28:d8:c7:
91:ae:5a:9b:3c:78:68:03:0c:74:46:dd:d3:a7:93:ed:3a:3d:
fa:49:7d:6b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAnIi4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTk4YWU1ZDVmMTI4MjVhODRlNmM0MDFjMDEzY2E1ZTVkY2Q5ZWM5MB4XDTIyMDEw
MTExMDQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JhZGJhOWZhOGIx
MGI2ZjQxMWEwNmU1ZWVhMWNlMzgzZmExOTZiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGjGK90x3cbv5rCALL45RVsO8H0p6ZtMuCj6LRLXESoiWCq
M2PvLx7HOMzEVgWsd1A/9ZT8UxNPTiEoSeJC0tFIaCbhQD7VHOugC/AORDUS/P/v
4jdB0U+R983v5AIf3o/44+eebL4lDh85irk8/N38lDTr8sDTV60or+RcS0abK/SN
lvqjt+WSEyLjGdMVcnCS2yeyARYgDYpur/hoNeXrKA2RyW+OhMVQCjTMVXo2hDNl
g8RYTwrMPtHKuBxK8zF7SSHsyYj8xoobXbi/T8ZKUiossxuHrM2uZ+8Z7C+aGsaq
q8OeBmzPTRKgtI7cw+twy+tHGczx2EP0fGl8pncCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR7rbqfqLELb0EaBuXuoc44P6GWtDAfBgNVHSMEGDAWgBRVmK5dXxKCWoTm
xAHAE8peXc2eyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZaaXVYVjhTZ2xxRTVzUUJ3QlBLWGwzTm5zay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvMWY2MDczLTg3YjItNGJiMy1hY2I3LTVjM2RiOThiZjg2NC8x
L2U2MjZuNml4QzI5QkdnYmw3cUhPT0QtaGxyUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
MWY2MDczLTg3YjItNGJiMy1hY2I3LTVjM2RiOThiZjg2NC8xL1ZaaXVYVjhTZ2xx
RTVzUUJ3QlBLWGwzTm5zay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2dNDANBgkqhkiG9w0BAQsFAAOC
AQEA3MMiIhO/j03LtzFtI67l9b7MjQIi/BjgFlFbpAkI/BtvFy4j2xPsKSzNllSK
WzlYkrF7r5TCj44clgSxEb519JiGJUZ2/2eEddTcVe7nWfqdtpjIlmh4tGHZfNkd
cka6aZSMzvfIdyqbfuxXkYl+Ci6RfVCyQFOV5v55dOx426yDxX8zsvvSwsyFC07B
xJvsLTLNCEGgNZ47HT6YY9qGMGJWgQpJywrxxcJ/aPgp79Ec+R7Mw/kGjU4em05Z
eezeg8Eop0NtQOk7msZKRbYWeD3kO1gh9Z4Drgw1+b6mWmQyDVSSvTnGKNjHka5a
mzx4aAMMdEbd06eT7To9+kl9aw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org