Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZzXdaazHAFhP8yDBSyG-ORrOo4.roa
File: QZzXdaazHAFhP8yDBSyG-ORrOo4.roa (raw, json)
Hash identifier: Xgr7mxY4N4W3o32srSZB7oOtWEP9cVoGFIY8rbqUZWU=
Subject key identifier: 41:9C:D7:75:A6:B3:1C:01:61:3F:CC:83:05:2C:86:F8:E4:6B:3A:8E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184C45CB61797324CE792C2A87E5D39FAA6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZzXdaazHAFhP8yDBSyG-ORrOo4.roa
Signing time: Tue 29 Nov 2022 17:08:40 +0000
ROA not before: Tue 29 Nov 2022 17:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201691
IP address blocks: 45.146.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:5c:b6:17:97:32:4c:e7:92:c2:a8:7e:5d:39:fa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 29 17:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419cd775a6b31c01613fcc83052c86f8e46b3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:43:71:12:24:53:4d:0f:d1:03:05:66:88:
64:db:b8:11:58:61:e7:3a:9b:a0:a0:6d:d9:09:be:
2f:85:a6:9d:83:ac:fc:4b:56:2f:cb:cb:3c:9d:36:
be:cf:3b:f1:0a:69:b7:12:be:aa:58:01:17:74:80:
f0:ca:80:bc:a8:43:e7:d0:e1:98:f7:cc:1a:c0:e6:
eb:94:2a:b2:b4:1c:0f:ca:b9:91:be:4d:26:12:42:
c9:1f:0b:6a:81:4d:38:6b:da:b4:80:bd:f8:7a:05:
7e:f0:52:37:8a:74:e1:7d:57:1c:1f:ee:5e:ec:cf:
f6:6d:bb:bb:64:cf:24:b7:a3:85:03:a0:7e:71:82:
00:46:02:f1:f7:5f:9f:ec:54:d5:05:4d:67:c9:c6:
d0:de:7a:a0:85:06:40:fb:28:8e:2f:7b:c1:58:e6:
9a:9e:98:d2:9e:bb:1d:58:e7:c9:b8:6e:6f:60:47:
ee:40:47:0d:e4:79:25:10:88:35:e3:7d:8e:18:c3:
83:0a:8e:71:61:58:2a:c9:76:79:54:d3:f0:06:34:
0f:d2:d9:39:72:b5:b9:af:50:4a:65:99:f6:48:11:
c2:29:91:f3:6e:63:cc:54:7c:60:db:de:45:73:a3:
2b:f9:32:d9:94:6c:19:a4:25:62:a7:5b:2e:8f:5e:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:D7:75:A6:B3:1C:01:61:3F:CC:83:05:2C:86:F8:E4:6B:3A:8E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZzXdaazHAFhP8yDBSyG-ORrOo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:33:94:25:a2:10:18:dd:fb:06:00:cc:b8:77:ee:dd:10:51:
2d:69:98:5d:ed:8d:3e:75:85:cf:8a:96:17:95:9d:4e:7f:e9:
e3:52:df:00:27:64:f9:f2:7a:84:0c:13:a3:33:3d:3e:ad:a7:
a0:aa:eb:6c:5e:fb:57:ff:e0:4c:ab:2d:db:2b:8e:0a:81:d3:
a8:5b:3a:51:e4:08:c4:31:d2:3e:b1:93:6d:b1:7b:e1:97:a4:
2c:ef:c4:45:03:76:44:ef:61:ee:7f:de:ae:32:df:87:59:bd:
5a:45:53:c6:ba:ff:a1:d5:06:ee:20:c2:cd:3b:64:e9:cc:aa:
78:b1:9e:01:16:f4:f2:c3:23:91:e8:ee:22:ae:4f:7e:ea:98:
8f:7f:28:c3:fc:09:b7:5f:e2:ab:a3:eb:a1:c7:31:b6:ae:3e:
69:6c:f2:d9:39:df:60:f5:ff:c8:1a:b8:de:61:2a:4e:69:fc:
8d:f3:0d:2d:25:fc:55:1d:21:d7:65:16:3f:67:16:8a:f6:01:
a2:d7:49:b8:cb:7d:d1:1b:b0:d6:24:a2:6d:1e:28:d4:f2:23:
e7:cf:70:aa:09:6b:82:1d:33:ee:41:6d:62:59:cc:26:c1:a6:
4e:30:ec:5b:57:b8:63:aa:46:0f:49:0b:da:55:06:d3:af:27:
4e:14:7c:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTEXLYXlzJM55LCqH5dOfqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjIxMTI5MTcwODQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTljZDc3NWE2YjMxYzAxNjEzZmNjODMwNTJjODZmOGU0NmIzYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufBDcRIkU00P0QMFZohk27gRWGHn
OpugoG3ZCb4vhaadg6z8S1Yvy8s8nTa+zzvxCmm3Er6qWAEXdIDwyoC8qEPn0OGY
98wawObrlCqytBwPyrmRvk0mEkLJHwtqgU04a9q0gL34egV+8FI3inThfVccH+5e
7M/2bbu7ZM8kt6OFA6B+cYIARgLx91+f7FTVBU1nycbQ3nqghQZA+yiOL3vBWOaa
npjSnrsdWOfJuG5vYEfuQEcN5HklEIg1432OGMODCo5xYVgqyXZ5VNPwBjQP0tk5
crW5r1BKZZn2SBHCKZHzbmPMVHxg295Fc6Mr+TLZlGwZpCVip1suj14UyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGc13WmsxwBYT/MgwUshvjkazqOMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvUVp6WGRhYXpIQUZoUDh5REJTeUctT1JyT280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLwMA0G
CSqGSIb3DQEBCwUAA4IBAQBOM5QlohAY3fsGAMy4d+7dEFEtaZhd7Y0+dYXPipYX
lZ1Of+njUt8AJ2T58nqEDBOjMz0+raegqutsXvtX/+BMqy3bK44KgdOoWzpR5AjE
MdI+sZNtsXvhl6Qs78RFA3ZE72Huf96uMt+HWb1aRVPGuv+h1QbuIMLNO2TpzKp4
sZ4BFvTywyOR6O4irk9+6piPfyjD/Am3X+Kro+uhxzG2rj5pbPLZOd9g9f/IGrje
YSpOafyN8w0tJfxVHSHXZRY/ZxaK9gGi10m4y33RG7DWJKJtHijU8iPnz3CqCWuC
HTPuQW1iWcwmwaZOMOxbV7hjqkYPSQvaVQbTrydOFHyo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org