Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/jlocDArz4H6VA_hU1MJ2LO_iLo0.roa
File: jlocDArz4H6VA_hU1MJ2LO_iLo0.roa (raw, json)
Hash identifier: nJ8M5iFljpoNSSTQTlLjcxZOQPyW4+L3h0xfUAcKnFQ=
Subject key identifier: 8E:5A:1C:0C:0A:F3:E0:7E:95:03:F8:54:D4:C2:76:2C:EF:E2:2E:8D
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0186FC1A
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/jlocDArz4H6VA_hU1MJ2LO_iLo0.roa
Signing time: Sat 01 Jan 2022 05:52:53 +0000
ROA not before: Sat 01 Jan 2022 05:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43689
IP address blocks: 45.139.10.0/23 maxlen: 23
45.139.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25623578 (0x186fc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e5a1c0c0af3e07e9503f854d4c2762cefe22e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:e5:ad:99:a2:48:6d:09:cc:80:41:03:65:
a3:46:a4:2e:b5:3a:09:d7:6e:6e:3f:e8:ac:46:e4:
48:7b:ed:08:52:c8:fd:e3:05:57:d0:ee:d8:4d:01:
cb:19:37:48:9b:06:12:43:2b:f6:16:47:f3:b3:52:
73:f3:27:61:13:84:91:6b:6e:ff:0c:6a:4c:37:27:
ca:0b:b1:63:b9:0c:00:71:45:1e:90:2d:01:62:9a:
a8:64:ee:89:5d:79:f0:5b:9e:1b:cb:0e:65:94:78:
a8:a8:b1:e4:32:dd:45:38:02:35:76:36:80:9b:56:
04:b6:00:80:98:96:32:43:f9:44:42:a1:ad:69:54:
fe:44:92:75:94:88:45:26:56:08:4c:97:7c:a1:2f:
4d:5b:99:5a:6d:64:30:65:e9:bb:35:7f:9e:08:28:
e0:5d:87:79:d0:3b:de:9b:e3:e9:b6:49:27:79:4a:
1d:88:9c:a6:6b:6a:72:94:50:2c:37:c1:55:f8:4d:
e6:3a:3d:55:c3:74:6d:e8:34:d5:a2:eb:b9:c4:bf:
6e:55:a1:a9:ac:14:4f:d8:d0:8f:72:64:59:72:02:
1d:2c:cd:14:ff:00:98:1f:81:3d:8c:1b:d9:8f:cc:
9c:0e:c2:a8:88:6e:12:af:36:08:f7:a6:0e:51:ca:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:1C:0C:0A:F3:E0:7E:95:03:F8:54:D4:C2:76:2C:EF:E2:2E:8D
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/jlocDArz4H6VA_hU1MJ2LO_iLo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/22
Signature Algorithm: sha256WithRSAEncryption
45:68:fd:c7:34:5a:8a:9c:c7:68:40:a5:e8:06:e1:2f:1e:a5:
d8:b8:74:d4:de:28:60:1a:9d:cb:f3:6f:d4:eb:24:25:7d:c7:
17:59:01:7e:f4:e8:b4:91:d9:2a:0f:b2:94:f2:e6:7d:1b:97:
f7:72:fb:0d:8a:d0:82:f3:4e:19:5e:e3:a2:64:4c:1a:d1:5e:
02:25:d7:ed:0b:3b:95:cf:b5:4a:88:e8:ab:4d:6d:84:85:d2:
2a:c1:2c:e9:bc:6f:f0:70:96:ff:3b:82:8f:95:37:3e:6e:53:
66:19:f4:cb:fe:1c:3c:79:29:60:b8:ae:c2:e1:7d:cf:b5:58:
ee:f8:0b:0c:ea:63:ce:e2:c1:1f:18:52:73:f6:70:75:6b:59:
ec:0e:3b:d6:c3:82:50:75:a2:7f:11:3d:9c:67:16:19:28:e9:
43:86:4d:c8:e9:98:6a:f4:f2:6d:97:d2:d6:f5:a0:d4:25:38:
c7:fc:5b:7d:80:8f:42:45:0f:a0:0c:7f:16:f0:16:1f:6b:b8:
5f:dd:e0:a5:01:48:10:d1:75:a7:78:e7:f8:f6:a1:08:d1:e2:
f1:ea:31:aa:15:37:39:4b:2d:e3:8b:fe:4a:a8:b4:ae:6d:a4:
f5:dc:51:60:de:b6:3b:c0:bb:d1:88:79:22:27:80:bd:41:da:
85:d1:f2:b8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYb8GjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODdiNTk0ZTVlNjcxM2E1YjgwYTU0ODFhNWNlNzFlNjUyZDg0NTczMB4XDTIyMDEw
MTA1NTI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU1YTFjMGMwYWYz
ZTA3ZTk1MDNmODU0ZDRjMjc2MmNlZmUyMmU4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmR5a2ZokhtCcyAQQNlo0akLrU6Cddubj/orEbkSHvtCFLI
/eMFV9Du2E0Byxk3SJsGEkMr9hZH87NSc/MnYROEkWtu/wxqTDcnyguxY7kMAHFF
HpAtAWKaqGTuiV158FueG8sOZZR4qKix5DLdRTgCNXY2gJtWBLYAgJiWMkP5REKh
rWlU/kSSdZSIRSZWCEyXfKEvTVuZWm1kMGXpuzV/nggo4F2HedA73pvj6bZJJ3lK
HYicpmtqcpRQLDfBVfhN5jo9VcN0beg01aLrucS/blWhqawUT9jQj3JkWXICHSzN
FP8AmB+BPYwb2Y/MnA7CqIhuEq82CPemDlHKjn0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOWhwMCvPgfpUD+FTUwnYs7+IujTAfBgNVHSMEGDAWgBTIe1lOXmcTpbgK
VIGlznHmUthFczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lIdFpUbDVuRTZXNENsU0JwYzV4NWxMWVJYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8x
L2psb2NEQXJ6NEg2VkFfaFUxTUoyTE9faUxvMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
ODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8xL3lIdFpUbDVuRTZX
NENsU0JwYzV4NWxMWVJYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2LCDANBgkqhkiG9w0BAQsFAAOC
AQEARWj9xzRaipzHaECl6AbhLx6l2Lh01N4oYBqdy/Nv1OskJX3HF1kBfvTotJHZ
Kg+ylPLmfRuX93L7DYrQgvNOGV7jomRMGtFeAiXX7Qs7lc+1Sojoq01thIXSKsEs
6bxv8HCW/zuCj5U3Pm5TZhn0y/4cPHkpYLiuwuF9z7VY7vgLDOpjzuLBHxhSc/Zw
dWtZ7A471sOCUHWifxE9nGcWGSjpQ4ZNyOmYavTybZfS1vWg1CU4x/xbfYCPQkUP
oAx/FvAWH2u4X93gpQFIENF1p3jn+PahCNHi8eoxqhU3OUst44v+Sqi0rm2k9dxR
YN62O8C70Yh5IieAvUHahdHyuA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org