Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EPfi2_ZnRzkpy_DS8xQJ1e7idJo.roa
File: EPfi2_ZnRzkpy_DS8xQJ1e7idJo.roa (raw, json)
Hash identifier: GJM5j1P+zLkr/95JFr5Q/LIBDbkzeYrOtpxggZv0mXQ=
Subject key identifier: 10:F7:E2:DB:F6:67:47:39:29:CB:F0:D2:F3:14:09:D5:EE:E2:74:9A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19D55362
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EPfi2_ZnRzkpy_DS8xQJ1e7idJo.roa
Signing time: Sat 01 Jan 2022 15:56:41 +0000
ROA not before: Sat 01 Jan 2022 15:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25596
IP address blocks: 45.135.4.0/22 maxlen: 22
45.136.72.0/22 maxlen: 22
45.144.216.0/22 maxlen: 22
45.146.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433410914 (0x19d55362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10f7e2dbf667473929cbf0d2f31409d5eee2749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:3d:79:39:0f:65:fc:57:99:cd:ce:97:e2:
8e:ac:fc:ea:4c:3e:21:28:06:2f:b3:a5:79:81:97:
c2:63:75:be:98:63:f0:30:30:ec:c7:41:e9:3a:76:
09:6b:5b:e4:33:9d:b6:1e:47:3e:23:fb:a8:11:a6:
d9:05:0c:40:0d:20:61:47:1c:aa:92:22:8c:05:4f:
8b:27:60:aa:9e:b5:7a:04:cb:9f:a0:e1:f5:a5:b7:
78:1b:22:c6:60:23:bf:5f:33:24:5a:80:bf:c7:44:
df:96:d9:3e:1f:d4:a3:e1:f4:e9:a7:f6:ca:dd:01:
aa:4f:8d:e4:b0:08:97:21:54:10:34:1e:84:cf:0b:
ad:b5:ed:69:37:23:39:2b:05:5f:8c:1b:c5:81:0d:
43:12:5b:89:46:67:f6:44:9d:aa:da:a0:c7:a9:6a:
5d:a9:c5:f5:b8:8f:0a:4f:35:b1:e0:88:fd:69:30:
4b:55:ce:49:eb:b7:db:b0:e0:22:be:20:cf:c5:60:
6e:6b:16:21:8b:02:ec:05:84:2d:2c:44:67:03:e3:
06:48:8d:8e:1d:91:ef:62:b0:00:f7:d2:35:86:8e:
bb:46:d7:52:93:f4:0d:a8:1d:14:6d:eb:71:26:65:
31:b7:5a:39:70:e5:51:72:bf:57:ab:2c:fe:fc:03:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:E2:DB:F6:67:47:39:29:CB:F0:D2:F3:14:09:D5:EE:E2:74:9A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EPfi2_ZnRzkpy_DS8xQJ1e7idJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.4.0/22
45.136.72.0/22
45.144.216.0/22
45.146.56.0/22
Signature Algorithm: sha256WithRSAEncryption
16:64:7f:d1:6f:99:4f:fc:7d:0e:05:0a:0b:ef:8f:d0:e4:33:
60:c1:b8:a9:9e:1d:91:ad:11:0b:b7:3f:5e:40:44:55:d4:41:
5d:a0:17:48:54:94:47:6e:5a:e2:57:b9:c7:9a:e0:3a:d2:6a:
4c:88:68:7f:b7:18:54:98:63:27:d0:ed:62:82:70:2c:e7:fd:
ce:24:54:c1:76:0d:4a:9e:f4:19:31:82:eb:44:3e:61:53:9c:
22:4e:67:0e:32:ad:85:95:63:1b:cf:7c:f7:20:f0:00:d8:a9:
e5:c5:fb:0d:48:ce:89:8d:3e:fe:8b:e1:ef:d1:e0:dd:f2:13:
57:01:05:3c:58:02:36:f2:06:c3:bf:33:3e:8e:f5:66:e2:cd:
9c:f2:40:1d:18:f8:be:71:95:ac:2e:10:f0:e3:ac:e9:bb:ea:
9c:93:c5:db:38:a7:5e:c7:54:7c:a2:8a:a4:8e:86:5c:e4:46:
c7:4b:80:00:24:46:68:0d:31:48:43:8b:22:6e:a1:13:f6:e8:
c7:2a:4b:40:81:52:f4:ca:34:db:e4:3c:68:1d:ab:f4:d7:fb:
98:e8:24:38:2c:d3:15:b6:e6:28:5b:02:b6:e5:af:28:cd:2d:
7f:47:0a:0c:6d:ec:50:45:3b:4f:a4:a1:ee:43:3d:08:6e:e1:
d9:d8:35:d7
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEGdVTYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEw
MTE1NTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBmN2UyZGJmNjY3
NDczOTI5Y2JmMGQyZjMxNDA5ZDVlZWUyNzQ5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLrPXk5D2X8V5nNzpfijqz86kw+ISgGL7OleYGXwmN1vphj
8DAw7MdB6Tp2CWtb5DOdth5HPiP7qBGm2QUMQA0gYUccqpIijAVPiydgqp61egTL
n6Dh9aW3eBsixmAjv18zJFqAv8dE35bZPh/Uo+H06af2yt0Bqk+N5LAIlyFUEDQe
hM8LrbXtaTcjOSsFX4wbxYENQxJbiUZn9kSdqtqgx6lqXanF9biPCk81seCI/Wkw
S1XOSeu327DgIr4gz8VgbmsWIYsC7AWELSxEZwPjBkiNjh2R72KwAPfSNYaOu0bX
UpP0DagdFG3rcSZlMbdaOXDlUXK/V6ss/vwDThMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQQ9+Lb9mdHOSnL8NLzFAnV7uJ0mjAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L0VQZmkyX1puUnprcHlfRFM4eFFKMWU3aWRKby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAi2HBAMEAi2ISAMEAi2Q2AMEAi2S
ODANBgkqhkiG9w0BAQsFAAOCAQEAFmR/0W+ZT/x9DgUKC++P0OQzYMG4qZ4dka0R
C7c/XkBEVdRBXaAXSFSUR25a4le5x5rgOtJqTIhof7cYVJhjJ9DtYoJwLOf9ziRU
wXYNSp70GTGC60Q+YVOcIk5nDjKthZVjG8989yDwANip5cX7DUjOiY0+/ovh79Hg
3fITVwEFPFgCNvIGw78zPo71ZuLNnPJAHRj4vnGVrC4Q8OOs6bvqnJPF2zinXsdU
fKKKpI6GXORGx0uAACRGaA0xSEOLIm6hE/boxypLQIFS9Mo02+Q8aB2r9Nf7mOgk
OCzTFbbmKFsCtuWvKM0tf0cKDG3sUEU7T6Sh7kM9CG7h2dg11w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org