Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qb4u4EGwRA11BsjuNyLAjj_yVIA.roa
File: qb4u4EGwRA11BsjuNyLAjj_yVIA.roa (raw, json)
Hash identifier: vXc5zjJusQup1+F5Tv5m2Fdz8Ju4On+Me/wXo5BwcjI=
Subject key identifier: A9:BE:2E:E0:41:B0:44:0D:75:06:C8:EE:37:22:C0:8E:3F:F2:54:80
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B03EBC2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qb4u4EGwRA11BsjuNyLAjj_yVIA.roa
Signing time: Tue 12 Apr 2022 05:08:39 +0000
ROA not before: Tue 12 Apr 2022 05:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56309
IP address blocks: 45.136.252.0/22 maxlen: 22
45.91.133.0/24 maxlen: 24
45.91.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453241794 (0x1b03ebc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 12 05:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9be2ee041b0440d7506c8ee3722c08e3ff25480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:62:42:5a:60:18:c7:e1:e2:55:d4:14:f5:
65:b4:c3:66:59:51:c0:a1:80:0a:12:a4:64:67:54:
21:12:33:35:b5:53:15:7a:f6:6c:6c:c6:de:e0:09:
54:4d:b8:54:47:70:0c:6e:95:fb:f1:68:1f:72:26:
c5:6b:7b:71:20:8d:bc:0c:8c:db:d1:27:f8:af:0c:
31:65:c3:6a:83:a0:98:52:9a:81:2a:26:b4:af:c6:
68:87:d2:ba:ce:5e:e0:66:96:55:a5:62:a8:3f:4c:
95:05:79:ec:7d:be:35:b3:cf:e1:c6:d5:ef:df:9b:
e8:28:e0:09:c8:5e:32:a3:a6:87:93:ff:1f:3c:ca:
97:2d:33:f3:47:74:96:84:ea:73:99:9e:fb:50:48:
27:34:5d:03:5d:12:e3:bf:39:6f:b2:fe:cf:43:00:
e7:f7:02:44:3a:9e:3b:3c:b0:0d:2b:b6:6e:f9:e8:
be:35:87:7f:bd:e4:6f:bb:a9:f9:29:bc:c4:39:9a:
67:3a:1d:30:69:d1:36:59:59:c3:07:0d:a1:4a:1b:
db:ab:ee:35:73:6d:83:ab:04:d0:c7:5e:4e:f0:89:
94:f9:42:94:24:ab:d3:08:b2:a8:46:8a:af:f9:3a:
94:d4:9f:e0:49:84:9c:4c:78:19:e4:da:32:3f:95:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:2E:E0:41:B0:44:0D:75:06:C8:EE:37:22:C0:8E:3F:F2:54:80
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qb4u4EGwRA11BsjuNyLAjj_yVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.133.0-45.91.135.255
45.136.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:5e:d2:dd:8e:90:e1:6d:d6:9c:c5:3a:86:ca:b7:5b:0f:7a:
14:ac:e7:92:1e:c0:c7:e8:43:10:8b:c7:a5:f3:5e:ee:c8:67:
d7:dc:50:44:ea:4a:b9:4d:63:37:00:a5:62:5a:c9:6a:24:b8:
3a:e6:54:3d:7e:ed:a5:44:45:bf:61:50:75:c0:19:9e:bc:86:
67:4e:f8:b2:5f:f1:81:43:02:0f:70:00:69:89:41:79:a9:ab:
da:54:a7:75:b8:03:99:7a:24:fb:53:f1:a9:e4:d8:69:95:9b:
b0:c9:9a:c8:c5:9d:2f:ba:6e:43:2e:82:25:c8:86:7e:ee:0e:
50:1d:eb:f5:76:a6:a8:b7:cb:1d:88:a9:e8:d9:9e:66:10:48:
d6:56:3c:ed:20:21:21:9f:e5:15:a8:ff:f8:54:0a:95:65:f2:
f1:2a:0e:8b:99:ee:53:81:bb:0f:29:14:d7:36:ce:60:af:00:
b1:83:1f:cb:54:2f:8e:23:9a:d9:b9:0f:ae:74:28:d1:5e:90:
a7:24:8c:f5:ac:a2:e4:c1:5a:6f:3f:5f:d3:24:5d:2f:83:22:
df:71:55:36:10:74:25:a6:2d:2a:30:41:52:7e:68:a4:9d:47:
25:18:0d:66:6c:94:85:d2:89:4a:48:67:2f:4f:88:25:fa:83:
3a:e0:ec:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEGwPrwjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDQx
MjA1MDgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTliZTJlZTA0MWIw
NDQwZDc1MDZjOGVlMzcyMmMwOGUzZmYyNTQ4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSBYkJaYBjH4eJV1BT1ZbTDZllRwKGAChKkZGdUIRIzNbVT
FXr2bGzG3uAJVE24VEdwDG6V+/FoH3ImxWt7cSCNvAyM29En+K8MMWXDaoOgmFKa
gSomtK/GaIfSus5e4GaWVaViqD9MlQV57H2+NbPP4cbV79+b6CjgCcheMqOmh5P/
HzzKly0z80d0loTqc5me+1BIJzRdA10S4785b7L+z0MA5/cCRDqeOzywDSu2bvno
vjWHf73kb7up+Sm8xDmaZzodMGnRNllZwwcNoUob26vuNXNtg6sE0MdeTvCJlPlC
lCSr0wiyqEaKr/k6lNSf4EmEnEx4GeTaMj+VoXcCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSpvi7gQbBEDXUGyO43IsCOP/JUgDAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L3FiNHU0RUd3UkExMUJzanVOeUxBampfeVZJQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQALVuFAwQDLVuAAwQCLYj8MA0G
CSqGSIb3DQEBCwUAA4IBAQBmXtLdjpDhbdacxTqGyrdbD3oUrOeSHsDH6EMQi8el
817uyGfX3FBE6kq5TWM3AKViWslqJLg65lQ9fu2lREW/YVB1wBmevIZnTviyX/GB
QwIPcABpiUF5qavaVKd1uAOZeiT7U/Gp5NhplZuwyZrIxZ0vum5DLoIlyIZ+7g5Q
Hev1dqaot8sdiKno2Z5mEEjWVjztICEhn+UVqP/4VAqVZfLxKg6Lme5TgbsPKRTX
Ns5grwCxgx/LVC+OI5rZuQ+udCjRXpCnJIz1rKLkwVpvP1/TJF0vgyLfcVU2EHQl
pi0qMEFSfmiknUclGA1mbJSF0olKSGcvT4gl+oM64OwM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org