Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/jH6tu0JW-TKN2_QpX74bblVZJUM.roa
File: jH6tu0JW-TKN2_QpX74bblVZJUM.roa (raw, json)
Hash identifier: Yc2e+Ra0ePqad7c3K6IRIzWXDes3LJeTreetUzGi8xw=
Subject key identifier: 8C:7E:AD:BB:42:56:F9:32:8D:DB:F4:29:5F:BE:1B:6E:55:59:25:43
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 07C8E5F0
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/jH6tu0JW-TKN2_QpX74bblVZJUM.roa
Signing time: Sat 01 Jan 2022 09:01:54 +0000
ROA not before: Sat 01 Jan 2022 09:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39389
IP address blocks: 45.131.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130606576 (0x7c8e5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jan 1 09:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c7eadbb4256f9328ddbf4295fbe1b6e55592543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:3f:fc:a8:aa:85:ab:b0:1e:25:0e:cd:9d:
8a:0a:4a:12:20:54:d3:34:c0:11:c3:82:27:25:0f:
1b:56:0f:8d:6b:31:05:fb:ec:4b:aa:08:0e:17:e4:
d1:53:57:a3:ed:27:a5:fb:94:bf:3a:b3:20:5d:c6:
52:74:6f:0b:71:a8:1b:d5:16:8d:6c:8b:3b:a0:cc:
04:87:b7:4f:97:61:79:1a:b9:aa:83:72:73:b3:0b:
d1:e5:d3:60:3d:7f:8b:77:d5:73:61:ca:26:54:16:
9f:fe:84:e5:4e:de:29:e0:c9:5b:f4:8d:40:b1:f6:
f2:79:7b:80:a1:a4:3a:59:51:f8:75:62:b2:cf:0f:
dd:a1:cc:6e:62:68:b5:b9:c8:e3:99:25:64:75:1c:
c9:36:ca:22:2a:f0:25:de:f8:d4:62:f4:0a:40:47:
73:05:2c:dc:8b:ca:8c:12:1f:60:f9:14:5e:c3:1e:
23:d2:5b:00:e5:49:ac:8a:28:68:2b:e0:ec:74:bd:
fc:a5:cf:0e:c3:49:44:79:4b:0d:a0:77:65:5a:e8:
99:96:6e:73:41:7b:c2:19:08:9b:20:d4:07:19:c2:
d2:19:a8:18:7c:dc:4d:f1:66:f7:db:27:77:91:a5:
a6:2e:e1:92:98:2c:11:4a:46:b5:64:f9:3e:ee:e4:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:AD:BB:42:56:F9:32:8D:DB:F4:29:5F:BE:1B:6E:55:59:25:43
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/jH6tu0JW-TKN2_QpX74bblVZJUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:59:c4:10:d1:aa:13:2a:0e:48:a5:0f:97:9e:c7:39:a7:
2e:49:d1:f9:7e:e4:3c:38:92:9d:76:b7:76:b6:7a:dd:bb:b5:
92:d1:35:e3:9e:e7:0c:c4:b7:ff:d6:6d:4d:4f:e7:54:06:71:
79:8d:7c:74:4f:40:6f:2c:c6:cc:d3:e4:35:2e:5e:f4:b5:1a:
98:31:62:cb:a0:22:50:2c:9b:41:55:2a:55:dd:53:0b:a5:81:
69:36:31:26:c5:0b:23:a2:1f:a1:d5:2f:2f:c1:96:6d:ba:7b:
a4:9e:0c:09:f7:72:e4:87:13:6c:19:78:ed:86:72:9c:82:e6:
bf:93:05:85:1f:19:84:6a:c5:a6:aa:b8:12:38:c4:61:1a:6f:
bd:2e:aa:5b:0d:84:ef:d7:24:ba:b8:b1:75:47:93:bc:41:03:
4a:02:b4:19:a9:33:b3:f8:65:dc:17:6e:2a:df:3c:fb:43:a5:
f3:08:c1:19:40:7e:63:65:9d:ef:94:67:7f:cc:72:a1:06:3b:
2e:2e:04:3e:cd:36:e2:7d:99:f4:92:89:d8:a6:30:08:ce:e1:
fa:f0:26:8e:29:d8:06:9e:49:b7:05:b2:69:91:38:90:03:ea:
43:45:38:92:95:a7:f1:9f:b8:8f:c6:58:76:26:50:eb:91:53:
cb:1f:11:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB8jl8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjUxMzkyY2Q3ZTZlNDBhNDVjMWI4YTQ0Nzk4ODBlZWY5NjBmMzMwMB4XDTIyMDEw
MTA5MDE1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGM3ZWFkYmI0MjU2
ZjkzMjhkZGJmNDI5NWZiZTFiNmU1NTU5MjU0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbRP/yoqoWrsB4lDs2digpKEiBU0zTAEcOCJyUPG1YPjWsx
BfvsS6oIDhfk0VNXo+0npfuUvzqzIF3GUnRvC3GoG9UWjWyLO6DMBIe3T5dheRq5
qoNyc7ML0eXTYD1/i3fVc2HKJlQWn/6E5U7eKeDJW/SNQLH28nl7gKGkOllR+HVi
ss8P3aHMbmJotbnI45klZHUcyTbKIirwJd741GL0CkBHcwUs3IvKjBIfYPkUXsMe
I9JbAOVJrIooaCvg7HS9/KXPDsNJRHlLDaB3ZVromZZuc0F7whkImyDUBxnC0hmo
GHzcTfFm99snd5Glpi7hkpgsEUpGtWT5Pu7kIAcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSMfq27Qlb5Mo3b9ClfvhtuVVklQzAfBgNVHSMEGDAWgBTSUTks1+bkCkXB
uKRHmIDu+WDzMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBsRTVMTmZtNUFwRndiaWtSNWlBN3ZsZzh6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvMjM0ZGJiLTlmZTQtNGJiOC1hOTc0LWRmMWQ1MjA1YzVkMC8x
L2pINnR1MEpXLVRLTjJfUXBYNzRiYmxWWkpVTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
MjM0ZGJiLTlmZTQtNGJiOC1hOTc0LWRmMWQ1MjA1YzVkMC8xLzBsRTVMTmZtNUFw
RndiaWtSNWlBN3ZsZzh6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2DWDANBgkqhkiG9w0BAQsFAAOC
AQEACpFZxBDRqhMqDkilD5eexzmnLknR+X7kPDiSnXa3drZ63bu1ktE1457nDMS3
/9ZtTU/nVAZxeY18dE9AbyzGzNPkNS5e9LUamDFiy6AiUCybQVUqVd1TC6WBaTYx
JsULI6IfodUvL8GWbbp7pJ4MCfdy5IcTbBl47YZynILmv5MFhR8ZhGrFpqq4EjjE
YRpvvS6qWw2E79ckurixdUeTvEEDSgK0Gakzs/hl3BduKt88+0Ol8wjBGUB+Y2Wd
75Rnf8xyoQY7Li4EPs024n2Z9JKJ2KYwCM7h+vAmjinYBp5JtwWyaZE4kAPqQ0U4
kpWn8Z+4j8ZYdiZQ65FTyx8R9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org