Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/COS6gIYQ0SIymW_UN6N_oiQfRYQ.roa
File: COS6gIYQ0SIymW_UN6N_oiQfRYQ.roa (raw, json)
Hash identifier: t37gIir0xCOkPRdu6hTST0I4GQtQAO9uAsPPjYNor64=
Subject key identifier: 08:E4:BA:80:86:10:D1:22:32:99:6F:D4:37:A3:7F:A2:24:1F:45:84
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1AF51D97
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/COS6gIYQ0SIymW_UN6N_oiQfRYQ.roa
Signing time: Thu 07 Apr 2022 11:42:54 +0000
ROA not before: Thu 07 Apr 2022 11:42:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
45.84.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452271511 (0x1af51d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 7 11:42:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e4ba808610d12232996fd437a37fa2241f4584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:c9:b6:dc:02:01:a9:6a:b6:00:63:52:be:
ee:db:29:c4:c0:7f:6e:c3:1a:e9:e9:56:30:ec:1e:
bc:62:76:13:a6:6e:85:13:78:4d:27:2f:8a:27:83:
f5:2c:fa:4a:4a:42:60:58:6a:7a:47:c7:1f:36:74:
17:64:69:56:b3:94:e5:dc:c8:c1:69:f7:e8:f1:fb:
ff:1e:6d:9f:09:1a:6b:e2:61:ff:ef:d5:a4:a9:66:
77:e1:93:70:dc:16:34:e4:48:fc:b4:4f:07:e0:f3:
58:fa:c6:9b:f3:15:b3:dc:8e:1e:74:ef:d7:2b:21:
2c:f7:c5:36:c5:e3:2f:5e:d8:3f:d1:b4:db:3a:3c:
db:6d:2f:b0:51:74:24:4d:59:92:d8:74:77:af:f9:
67:b8:60:ce:8f:db:46:8a:b4:9c:ec:b7:18:96:44:
96:d6:d4:d5:8d:8b:ea:4f:16:09:7e:ab:a5:36:67:
3b:53:5a:88:69:f8:e4:27:cf:4f:3b:34:cb:e4:84:
32:18:fe:b6:bc:8a:fe:25:3f:f8:d6:9b:b4:36:3b:
cf:a3:94:dd:f7:19:35:56:b6:8a:c0:1c:8f:2d:de:
8d:e7:22:1f:e8:bb:50:a0:96:9d:08:6f:bb:28:50:
45:15:97:3d:08:56:f2:00:14:06:0a:5b:a6:79:4c:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:BA:80:86:10:D1:22:32:99:6F:D4:37:A3:7F:A2:24:1F:45:84
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/COS6gIYQ0SIymW_UN6N_oiQfRYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.213.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cc:d7:3a:0a:98:f1:4f:fe:d4:65:a7:69:42:b0:3a:50:fd:
ab:7b:da:22:7e:4a:18:d2:22:af:84:df:f4:2b:b2:7b:9f:42:
b4:a1:ed:7c:d4:23:ca:aa:35:5e:b3:1b:41:e0:2d:59:05:6c:
d0:ce:f9:41:05:85:49:e9:4c:ce:44:a1:40:90:82:ae:4e:92:
c8:3e:bf:e7:6a:1c:56:49:81:04:e8:d7:e0:e0:56:35:4a:e8:
a0:03:75:b6:fa:e1:d7:03:95:05:a2:4b:b6:9c:60:47:cc:b5:
91:e3:b1:84:1e:72:70:e0:58:ce:e1:b8:af:22:cc:aa:95:96:
ce:bc:c2:17:99:f8:8b:06:96:9d:71:32:a2:26:4e:09:24:41:
76:05:47:5d:a4:93:c8:f7:cd:9c:5f:de:86:f4:ec:5a:7c:2d:
a0:eb:17:e5:f0:8f:d4:b6:e5:c9:a8:70:51:20:7a:07:30:68:
e0:49:30:38:fe:bb:40:d1:c7:c4:ba:41:e4:29:8f:e9:77:38:
20:32:1b:f9:9e:fb:8c:c0:60:32:2b:65:96:32:ee:8f:cc:07:
64:3e:81:48:d6:72:29:8a:3d:d3:4d:74:76:bb:e7:c2:dd:8f:
90:ab:4b:a6:ec:89:70:17:41:f4:34:c3:1b:6a:75:4f:43:73:
2b:11:52:5a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGvUdlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDQw
NzExNDI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhlNGJhODA4NjEw
ZDEyMjMyOTk2ZmQ0MzdhMzdmYTIyNDFmNDU4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANlwybbcAgGparYAY1K+7tspxMB/bsMa6elWMOwevGJ2E6Zu
hRN4TScviieD9Sz6SkpCYFhqekfHHzZ0F2RpVrOU5dzIwWn36PH7/x5tnwkaa+Jh
/+/VpKlmd+GTcNwWNORI/LRPB+DzWPrGm/MVs9yOHnTv1yshLPfFNsXjL17YP9G0
2zo8220vsFF0JE1Zkth0d6/5Z7hgzo/bRoq0nOy3GJZEltbU1Y2L6k8WCX6rpTZn
O1NaiGn45CfPTzs0y+SEMhj+tryK/iU/+NabtDY7z6OU3fcZNVa2isAcjy3ejeci
H+i7UKCWnQhvuyhQRRWXPQhW8gAUBgpbpnlMjCECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQI5LqAhhDRIjKZb9Q3o3+iJB9FhDAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L0NPUzZnSVlRMFNJeW1XX1VONk5fb2lRZlJZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1U1QMEAIiQIwMEAIiQKzANBgkq
hkiG9w0BAQsFAAOCAQEAYszXOgqY8U/+1GWnaUKwOlD9q3vaIn5KGNIir4Tf9Cuy
e59CtKHtfNQjyqo1XrMbQeAtWQVs0M75QQWFSelMzkShQJCCrk6SyD6/52ocVkmB
BOjX4OBWNUrooAN1tvrh1wOVBaJLtpxgR8y1keOxhB5ycOBYzuG4ryLMqpWWzrzC
F5n4iwaWnXEyoiZOCSRBdgVHXaSTyPfNnF/ehvTsWnwtoOsX5fCP1LblyahwUSB6
BzBo4EkwOP67QNHHxLpB5CmP6Xc4IDIb+Z77jMBgMitlljLuj8wHZD6BSNZyKYo9
0010drvnwt2PkKtLpuyJcBdB9DTDG2p1T0NzKxFSWg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org