Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiC7Ed7-7TbxG1pk0ZNEJRcvwZI.roa
File: SiC7Ed7-7TbxG1pk0ZNEJRcvwZI.roa (raw, json)
Hash identifier: UuFPoe7ey16QFZhZ00Svqpc4BiHtqWnbj3fMOmiNlL4=
Subject key identifier: 4A:20:BB:11:DE:FE:ED:36:F1:1B:5A:64:D1:93:44:25:17:2F:C1:92
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B095575
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiC7Ed7-7TbxG1pk0ZNEJRcvwZI.roa
Signing time: Thu 14 Apr 2022 08:23:40 +0000
ROA not before: Thu 14 Apr 2022 08:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 45.85.91.0/24 maxlen: 24
136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453596533 (0x1b095575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 14 08:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a20bb11defeed36f11b5a64d1934425172fc192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:b6:ff:1e:0e:92:64:a2:6e:c8:d7:c3:59:
98:f6:fc:77:3b:64:b4:7b:f2:3a:53:75:88:13:5d:
bb:ec:1d:98:e4:80:15:fc:af:c6:49:26:6c:87:c0:
17:98:b2:f0:02:12:5b:24:21:21:67:ba:d4:75:ab:
ac:06:67:e1:ba:8b:c3:8c:dd:f0:8e:fa:67:37:4f:
dc:31:56:01:f1:eb:ab:54:45:3c:a0:a7:97:27:aa:
68:79:71:f1:95:4c:05:51:20:91:4e:6e:a6:45:ef:
6e:50:0e:d1:8b:f1:ee:e6:7a:d6:a9:46:32:39:08:
75:74:ee:46:f3:2c:3b:a7:c1:c7:80:cb:72:c8:88:
c4:9a:58:80:16:29:39:8d:1d:6d:26:7a:f6:0e:ed:
89:cc:41:bc:e1:e4:38:a3:d6:7c:f3:00:25:aa:24:
7e:13:7b:37:09:d9:f4:95:41:4f:72:3d:e3:37:d5:
39:2b:b0:bd:83:5b:b6:20:95:a3:2b:bc:85:ae:e0:
d6:7d:33:39:a2:4b:5b:da:50:09:42:89:06:49:4f:
fa:01:80:e8:ab:38:30:06:85:56:58:62:ab:3d:59:
50:5b:ef:1c:97:a4:ba:92:05:81:ab:32:d6:67:f7:
64:6f:1f:c9:c5:f1:8d:47:0b:27:1b:66:f7:db:4c:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:BB:11:DE:FE:ED:36:F1:1B:5A:64:D1:93:44:25:17:2F:C1:92
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiC7Ed7-7TbxG1pk0ZNEJRcvwZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.91.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1c:04:9d:d5:e3:44:ed:13:91:70:63:d7:bf:ea:6e:71:0c:
d4:cc:0d:56:5c:71:03:8f:4d:a0:6a:8a:03:f1:d5:9b:13:58:
ab:dc:7c:e4:30:da:11:cb:29:eb:ca:db:42:a1:be:e1:50:8c:
a9:0f:8b:05:c8:38:77:03:92:92:28:0e:43:53:9d:d3:75:57:
26:4e:84:4a:c5:4d:b5:6c:77:ce:2a:fd:4f:ec:8d:6f:50:3e:
2a:c1:3b:fc:e4:8b:2c:77:c6:be:26:ea:71:c3:61:88:08:8a:
33:fa:82:89:ce:32:4f:be:e0:e7:a9:ef:96:b9:cf:98:4f:44:
57:bd:63:6d:18:d5:cb:15:1c:4a:c9:5a:93:a3:15:46:cd:4f:
d7:71:5d:a7:74:f1:2e:c9:89:cd:b2:02:1c:32:f3:52:4a:5a:
06:65:3d:5c:84:c1:3e:ae:33:df:6e:5e:60:eb:eb:d1:88:ca:
d0:4c:40:5a:1f:2b:f4:11:46:b0:0e:19:83:9d:bf:a1:5e:78:
40:7f:84:2a:82:0f:6c:af:06:f5:bd:5b:f8:76:5e:9b:b8:59:
b4:22:20:a6:a9:00:65:ef:85:fa:da:19:05:26:5a:29:b7:c5:
dc:1a:9d:3d:32:c0:35:17:81:d4:12:dc:a1:f6:4a:98:c0:22:
7d:50:a0:47
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGwlVdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDQx
NDA4MjM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGEyMGJiMTFkZWZl
ZWQzNmYxMWI1YTY0ZDE5MzQ0MjUxNzJmYzE5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPMtv8eDpJkom7I18NZmPb8dztktHvyOlN1iBNdu+wdmOSA
FfyvxkkmbIfAF5iy8AISWyQhIWe61HWrrAZn4bqLw4zd8I76ZzdP3DFWAfHrq1RF
PKCnlyeqaHlx8ZVMBVEgkU5upkXvblAO0Yvx7uZ61qlGMjkIdXTuRvMsO6fBx4DL
csiIxJpYgBYpOY0dbSZ69g7ticxBvOHkOKPWfPMAJaokfhN7NwnZ9JVBT3I94zfV
OSuwvYNbtiCVoyu8ha7g1n0zOaJLW9pQCUKJBklP+gGA6Ks4MAaFVlhiqz1ZUFvv
HJekupIFgasy1mf3ZG8fycXxjUcLJxtm99tMLkECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRKILsR3v7tNvEbWmTRk0QlFy/BkjAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L1NpQzdFZDctN1RieEcxcGswWk5FSlJjdndaSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1VWwMEAIiQIwMEAIiQKzANBgkq
hkiG9w0BAQsFAAOCAQEANhwEndXjRO0TkXBj17/qbnEM1MwNVlxxA49NoGqKA/HV
mxNYq9x85DDaEcsp68rbQqG+4VCMqQ+LBcg4dwOSkigOQ1Od03VXJk6ESsVNtWx3
zir9T+yNb1A+KsE7/OSLLHfGvibqccNhiAiKM/qCic4yT77g56nvlrnPmE9EV71j
bRjVyxUcSslak6MVRs1P13Fdp3TxLsmJzbICHDLzUkpaBmU9XITBPq4z325eYOvr
0YjK0ExAWh8r9BFGsA4Zg52/oV54QH+EKoIPbK8G9b1b+HZem7hZtCIgpqkAZe+F
+toZBSZaKbfF3BqdPTLANReB1BLcofZKmMAifVCgRw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org