Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2LY4WbaDhaYv4EdYWQ1wacqD2Gs.roa
File: 2LY4WbaDhaYv4EdYWQ1wacqD2Gs.roa (raw, json)
Hash identifier: oxoRyrVyJ8ePih+nNEGLikThkioHKzeHs/y8RuDT9WA=
Subject key identifier: D8:B6:38:59:B6:83:85:A6:2F:E0:47:58:59:0D:70:69:CA:83:D8:6B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B627F35
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2LY4WbaDhaYv4EdYWQ1wacqD2Gs.roa
Signing time: Sun 15 May 2022 13:30:40 +0000
ROA not before: Sun 15 May 2022 13:30:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.140.140.0/22 maxlen: 24
45.140.188.0/22 maxlen: 24
45.137.204.0/22 maxlen: 24
2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459439925 (0x1b627f35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 15 13:30:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8b63859b68385a62fe04758590d7069ca83d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:32:02:02:de:26:4d:80:db:ba:27:ed:d1:
83:09:2e:10:47:51:35:a7:a8:8a:c9:59:2d:ae:7d:
82:cd:57:be:36:07:1b:5f:6b:58:d7:92:af:04:d7:
91:48:08:cb:e8:fb:63:d1:90:76:17:a1:be:c2:7d:
b7:6a:38:6e:38:5c:df:37:04:d5:ba:49:97:f1:ba:
a9:ec:07:b2:61:4e:2d:7f:5d:37:7e:ff:7c:1b:7b:
b7:ed:50:82:f4:0e:bf:e1:d0:4d:0c:35:e4:7b:89:
da:1c:f2:1a:be:bf:cb:1c:a2:81:6c:d3:11:85:3b:
4f:85:48:b7:36:fc:a9:08:16:fd:6d:66:c8:8b:ac:
c7:ba:49:bb:4c:9e:f2:c6:04:b0:59:6f:2b:18:c3:
27:c1:14:f1:18:e8:6e:26:69:c2:5a:ac:10:be:a0:
6a:85:9c:65:0c:c3:2b:e9:b3:7c:7d:2b:df:87:48:
a1:6a:3f:22:a0:ab:34:b3:03:9d:33:8e:c0:e1:b8:
eb:2f:0b:52:eb:a9:2a:90:f5:87:88:91:78:86:ad:
12:01:0e:f2:de:42:64:b4:ad:10:f8:63:99:bd:65:
7f:5a:be:2e:e0:9d:b9:33:d1:d4:51:18:d8:fd:00:
48:7a:40:e0:9e:3a:c0:96:2b:f8:be:df:d0:d2:a7:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:38:59:B6:83:85:A6:2F:E0:47:58:59:0D:70:69:CA:83:D8:6B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2LY4WbaDhaYv4EdYWQ1wacqD2Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.204.0/22
45.140.140.0/22
45.140.188.0/22
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
1e:89:a9:28:d0:8e:1e:26:1b:de:59:59:f7:2b:cf:21:fc:7a:
d9:66:72:19:59:0d:4d:21:50:34:8a:76:67:b2:ba:da:4f:43:
fb:f2:c9:8f:9a:a8:db:df:60:10:40:a6:ed:38:3b:79:35:be:
ee:ce:13:d4:fd:4f:da:97:af:a1:d4:f0:e3:08:97:ef:8a:81:
f2:f5:e1:d5:fb:c2:18:e7:d1:05:d2:82:9e:71:fe:23:88:69:
4c:5f:f2:1d:6e:80:bc:a6:50:23:a0:cd:65:e5:e9:4a:1b:d7:
8b:74:c8:74:db:77:8a:01:a7:90:44:8d:ba:d4:a6:6c:d8:2f:
09:c8:3a:3d:23:42:f4:81:85:f0:be:41:51:fb:f0:f1:28:39:
55:30:c4:57:71:25:d4:34:4b:f5:fb:b7:66:73:62:05:e3:fa:
91:89:ae:b1:09:e9:18:dc:93:d4:cc:c9:19:45:13:86:38:c2:
7f:5a:d6:0e:d4:7d:5d:bb:62:6b:0b:df:2f:62:a4:19:a6:e0:
ee:36:0a:10:e8:a7:fe:7b:a3:c2:c8:cb:3c:67:b1:8e:9d:03:
11:03:1d:1f:a5:16:9e:51:a3:9f:d4:17:bc:93:37:f7:dc:ec:
08:6c:66:72:03:3b:96:4e:43:42:ef:af:bf:10:41:1b:b4:aa:
11:70:61:b4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEG2J/NTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDUx
NTEzMzA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDhiNjM4NTliNjgz
ODVhNjJmZTA0NzU4NTkwZDcwNjljYTgzZDg2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSTMgIC3iZNgNu6J+3RgwkuEEdRNaeoislZLa59gs1XvjYH
G19rWNeSrwTXkUgIy+j7Y9GQdhehvsJ9t2o4bjhc3zcE1bpJl/G6qewHsmFOLX9d
N37/fBt7t+1QgvQOv+HQTQw15HuJ2hzyGr6/yxyigWzTEYU7T4VItzb8qQgW/W1m
yIusx7pJu0ye8sYEsFlvKxjDJ8EU8RjobiZpwlqsEL6gaoWcZQzDK+mzfH0r34dI
oWo/IqCrNLMDnTOOwOG46y8LUuupKpD1h4iReIatEgEO8t5CZLStEPhjmb1lf1q+
LuCduTPR1FEY2P0ASHpA4J46wJYr+L7f0NKnh3ECAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBTYtjhZtoOFpi/gR1hZDXBpyoPYazAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
LzJMWTRXYmFEaGFZdjRFZFlXUTF3YWNxRDJHcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowGAQCAAEwEgMEAi2JzAMEAi2MjAMEAi2MvDAOBAIA
AjAIAwYAKgfjRQEwDQYJKoZIhvcNAQELBQADggEBAB6JqSjQjh4mG95ZWfcrzyH8
etlmchlZDU0hUDSKdmeyutpPQ/vyyY+aqNvfYBBApu04O3k1vu7OE9T9T9qXr6HU
8OMIl++KgfL14dX7whjn0QXSgp5x/iOIaUxf8h1ugLymUCOgzWXl6Uob14t0yHTb
d4oBp5BEjbrUpmzYLwnIOj0jQvSBhfC+QVH78PEoOVUwxFdxJdQ0S/X7t2ZzYgXj
+pGJrrEJ6Rjck9TMyRlFE4Y4wn9a1g7UfV27YmsL3y9ipBmm4O42ChDop/57o8LI
yzxnsY6dAxEDHR+lFp5Ro5/UF7yTN/fc7AhsZnIDO5ZOQ0Lvr78QQRu0qhFwYbQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org