Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/SW7qRQIJfo3xHNFdmnMacVjZflw.roa
File: SW7qRQIJfo3xHNFdmnMacVjZflw.roa (raw, json)
Hash identifier: KpF52vLHvo3AQj70U/lm7Os+8p6QJ+UXGX9oPR5YheM=
Subject key identifier: 49:6E:EA:45:02:09:7E:8D:F1:1C:D1:5D:9A:73:1A:71:58:D9:7E:5C
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 03815053
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/SW7qRQIJfo3xHNFdmnMacVjZflw.roa
Signing time: Sat 01 Jan 2022 15:58:03 +0000
ROA not before: Sat 01 Jan 2022 15:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22769
IP address blocks: 45.138.71.0/24 maxlen: 24
45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58806355 (0x3815053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 15:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=496eea4502097e8df11cd15d9a731a7158d97e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:92:f6:1b:7d:6d:c2:f0:6d:75:ba:5c:ba:
4f:b1:48:b0:c1:28:1d:87:c1:e1:ac:12:59:32:9e:
ed:44:2d:90:6e:dd:24:40:18:59:4b:3c:6a:b3:92:
fb:cf:c9:c6:2f:6f:93:4a:8e:1a:4f:fa:2e:f4:a9:
58:30:f6:6c:4f:2d:66:f4:bd:7e:17:ec:2e:77:1c:
59:d4:6b:05:7a:0b:9a:cd:45:19:7a:d8:7d:b6:8d:
da:92:44:be:62:d6:4c:7a:fa:d5:08:98:7d:28:89:
79:d5:3d:57:26:98:e5:b5:3d:ab:e1:22:49:80:46:
0f:ff:48:35:8c:a2:88:0a:3b:08:45:7d:a6:10:4f:
57:0f:d1:bc:94:44:9a:72:cf:5d:ef:ba:5c:76:ba:
37:d4:ba:8a:83:6e:2b:36:ad:4d:e3:7c:00:31:f3:
5b:2b:7c:79:7c:e8:a5:2c:e0:89:30:d1:e0:e0:86:
99:32:a6:2c:d7:a0:53:3b:97:0c:74:30:36:ab:7b:
b7:df:af:4c:87:1f:73:0d:f2:d9:33:b3:34:43:3e:
52:a0:e8:1b:ad:de:ac:72:dc:82:0b:04:39:88:8e:
ad:7d:b9:66:28:bb:fd:31:8b:4d:41:bb:ed:44:c8:
95:98:d2:ab:3b:06:13:31:61:34:ef:b0:87:00:ab:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:EA:45:02:09:7E:8D:F1:1C:D1:5D:9A:73:1A:71:58:D9:7E:5C
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/SW7qRQIJfo3xHNFdmnMacVjZflw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
Signature Algorithm: sha256WithRSAEncryption
03:7e:74:46:49:68:90:b6:c1:bf:6a:c2:0c:67:52:8a:f1:c6:
81:3b:a9:16:e5:50:11:de:3c:59:90:23:55:8a:f0:a7:96:17:
9e:e5:a1:a5:b0:32:7a:80:03:a7:93:5d:6d:ae:99:88:99:bb:
44:6d:91:a6:0e:58:ba:21:9b:2a:e4:82:56:86:20:fa:49:b6:
6d:04:2c:0d:b2:39:32:6d:1e:d0:c5:5a:2d:17:59:db:a8:6a:
f8:50:59:c5:52:f6:b1:f3:ac:34:18:c4:d6:a0:3f:1d:6d:6f:
69:6e:6e:56:b5:89:a7:ba:89:fa:4a:2f:5c:5c:30:4f:cc:6b:
4c:c8:5d:52:17:da:a6:e2:a1:a1:60:de:39:cd:05:8c:c9:cb:
21:49:2a:a8:bf:33:db:df:54:33:d3:65:c5:b1:e8:9f:3a:e9:
3d:95:e9:79:54:e1:78:ff:e6:62:96:db:0a:77:d6:b9:9d:73:
3d:db:ae:81:51:a8:ee:c2:72:a5:cb:89:69:f0:2b:51:12:86:
b1:a8:a1:95:4f:b1:c9:a7:57:78:e1:83:3b:cc:cc:a4:6a:21:
d0:d0:ce:67:d4:e8:d7:56:a3:6f:46:ea:4b:a0:50:a2:7e:0b:
41:8e:e8:3c:a1:fb:99:80:4b:da:ea:74:f7:aa:18:9c:54:25:
cd:8f:48:a6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA4FQUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzMzNjFmYmE4NDA5MTc0ZmIzYzQ4MmI4Y2EyNmYyMzVlYmQyMmMyMB4XDTIyMDEw
MTE1NTgwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk2ZWVhNDUwMjA5
N2U4ZGYxMWNkMTVkOWE3MzFhNzE1OGQ5N2U1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANCPkvYbfW3C8G11uly6T7FIsMEoHYfB4awSWTKe7UQtkG7d
JEAYWUs8arOS+8/Jxi9vk0qOGk/6LvSpWDD2bE8tZvS9fhfsLnccWdRrBXoLms1F
GXrYfbaN2pJEvmLWTHr61QiYfSiJedU9VyaY5bU9q+EiSYBGD/9INYyiiAo7CEV9
phBPVw/RvJREmnLPXe+6XHa6N9S6ioNuKzatTeN8ADHzWyt8eXzopSzgiTDR4OCG
mTKmLNegUzuXDHQwNqt7t9+vTIcfcw3y2TOzNEM+UqDoG63erHLcggsEOYiOrX25
Zii7/TGLTUG77UTIlZjSqzsGEzFhNO+whwCr/BECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJbupFAgl+jfEc0V2acxpxWNl+XDAfBgNVHSMEGDAWgBQzM2H7qECRdPs8
SCuMom8jXr0iwjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L016TmgtNmhBa1hUN1BFZ3JqS0p2STE2OUlzSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvMTFlMTNmLTRjZWEtNDRhZi04MWY5LWIyY2NjZjBlYWRhYi8x
L1NXN3FSUUlKZm8zeEhORmRtbk1hY1ZqWmZsdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
MTFlMTNmLTRjZWEtNDRhZi04MWY5LWIyY2NjZjBlYWRhYi8xL016TmgtNmhBa1hU
N1BFZ3JqS0p2STE2OUlzSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2KRDANBgkqhkiG9w0BAQsFAAOC
AQEAA350RklokLbBv2rCDGdSivHGgTupFuVQEd48WZAjVYrwp5YXnuWhpbAyeoAD
p5Ndba6ZiJm7RG2Rpg5YuiGbKuSCVoYg+km2bQQsDbI5Mm0e0MVaLRdZ26hq+FBZ
xVL2sfOsNBjE1qA/HW1vaW5uVrWJp7qJ+kovXFwwT8xrTMhdUhfapuKhoWDeOc0F
jMnLIUkqqL8z299UM9NlxbHonzrpPZXpeVTheP/mYpbbCnfWuZ1zPduugVGo7sJy
pcuJafArURKGsaihlU+xyadXeOGDO8zMpGoh0NDOZ9To11ajb0bqS6BQon4LQY7o
PKH7mYBL2up096oYnFQlzY9Ipg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org