Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/NQRDTVJ7J_AidA843Km0vVBGg-g.roa
File: NQRDTVJ7J_AidA843Km0vVBGg-g.roa (raw, json)
Hash identifier: 62azRsJOUMRktN11rbusY4gYMaShz3z6LHOQm1v5950=
Subject key identifier: 35:04:43:4D:52:7B:27:F0:22:74:0F:38:DC:A9:B4:BD:50:46:83:E8
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 01847EFCCAC99FBC8E0095B489E488656BD5
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/NQRDTVJ7J_AidA843Km0vVBGg-g.roa
Signing time: Wed 16 Nov 2022 05:50:06 +0000
ROA not before: Wed 16 Nov 2022 05:50:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.134.251.0/24 maxlen: 24
45.134.249.0/24 maxlen: 24
45.140.71.0/24 maxlen: 24
45.140.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:ca:c9:9f:bc:8e:00:95:b4:89:e4:88:65:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Nov 16 05:50:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3504434d527b27f022740f38dca9b4bd504683e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:26:66:ec:30:ef:e7:d8:43:f0:64:28:0f:
cc:61:e4:96:1c:c7:58:7d:50:85:9f:f9:db:f7:63:
d7:5b:ac:88:87:77:07:a1:3f:3e:58:f4:33:ab:f4:
77:da:60:cd:f5:f8:f6:28:43:0b:f3:6e:d0:33:79:
ad:4a:e2:66:77:64:e5:09:5a:10:aa:30:19:ec:d3:
e4:b1:74:89:a8:55:fc:6d:b6:88:3f:0e:ce:6c:37:
3b:0e:77:39:ae:cc:57:d3:4b:ea:68:cf:a4:3f:8d:
05:19:c6:3d:ed:76:79:ea:f5:78:56:cf:49:c0:cb:
ee:c2:6f:c6:69:be:88:cd:49:2c:b7:e1:bf:3d:1d:
b2:45:c9:31:28:fe:1f:6f:ab:d7:fa:96:7c:0e:de:
e0:30:43:d6:4f:b2:cb:08:29:55:66:2e:10:07:d9:
27:d0:78:98:e7:1e:78:a5:5a:f5:58:4c:b8:08:d8:
05:eb:ed:8c:71:bc:bc:cc:8b:c1:e3:6c:1d:46:a4:
e1:4b:97:51:84:18:dd:f8:90:11:e6:ef:a9:89:72:
79:50:47:e5:d8:08:af:fe:29:8f:da:0c:b5:7c:96:
4a:6a:b5:f5:3b:26:c7:58:9d:bf:2b:0b:80:6f:f7:
dc:38:13:c1:9b:a2:33:68:22:74:8c:93:7a:4f:60:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:43:4D:52:7B:27:F0:22:74:0F:38:DC:A9:B4:BD:50:46:83:E8
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/NQRDTVJ7J_AidA843Km0vVBGg-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.249.0/24
45.134.251.0/24
45.140.69.0/24
45.140.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:99:9d:7d:ac:a3:1b:bd:e6:71:88:fe:e2:e6:7c:79:d9:40:
7a:2b:62:d1:4d:d8:da:eb:cc:bc:da:93:fd:eb:57:6d:9c:a9:
bb:27:3f:57:dc:97:d3:88:86:f8:11:c9:54:97:15:04:ee:05:
11:86:f6:b5:04:21:84:7d:6f:46:b7:df:55:40:fd:54:62:2c:
04:bc:5c:4f:1f:96:6b:c0:58:0a:f5:69:d1:20:3a:a3:15:4f:
cc:7b:e3:51:ea:aa:70:eb:3b:bb:ac:09:03:f0:87:1b:05:ea:
a3:0c:cf:f7:27:93:f8:55:b0:fd:36:65:a4:74:22:83:78:da:
6a:ce:ec:a1:80:ae:f3:41:e8:55:74:69:70:09:25:68:dc:1e:
03:a8:58:33:45:79:95:21:a7:50:25:de:56:0b:82:e9:a9:fb:
db:f4:cf:64:58:25:db:3b:13:f0:29:90:7e:7e:7e:c8:3a:d2:
ef:2a:4c:20:2e:07:81:fa:11:97:df:96:e7:28:a0:e3:6e:01:
a6:c2:31:0d:79:28:88:96:64:da:95:77:ad:7d:bb:05:b2:6a:
0c:e6:b0:94:9f:46:fe:ff:9c:ce:b1:42:8a:bf:19:02:ce:f0:
8d:8f:93:d1:1a:18:cc:31:70:a8:af:84:52:7d:72:71:68:b0:
71:1f:3c:8e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYR+/MrJn7yOAJW0ieSIZWvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODNjZTQ0YWU0YzcwMWVhOTcxZDMzNGRmYWJiYzViMjhl
NjQ3NmUwHhcNMjIxMTE2MDU1MDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA0NDM0ZDUyN2IyN2YwMjI3NDBmMzhkY2E5YjRiZDUwNDY4M2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/YmZuww7+fYQ/BkKA/MYeSWHMdY
fVCFn/nb92PXW6yIh3cHoT8+WPQzq/R32mDN9fj2KEML827QM3mtSuJmd2TlCVoQ
qjAZ7NPksXSJqFX8bbaIPw7ObDc7Dnc5rsxX00vqaM+kP40FGcY97XZ56vV4Vs9J
wMvuwm/Gab6IzUkst+G/PR2yRckxKP4fb6vX+pZ8Dt7gMEPWT7LLCClVZi4QB9kn
0HiY5x54pVr1WEy4CNgF6+2Mcby8zIvB42wdRqThS5dRhBjd+JAR5u+piXJ5UEfl
2Aiv/imP2gy1fJZKarX1OybHWJ2/KwuAb/fcOBPBm6IzaCJ0jJN6T2CmAQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDUEQ01SeyfwInQPONyptL1QRoPoMB8GA1UdIwQY
MBaAFBqDzkSuTHAeqXHTNN+rvFso5kduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDkt
NDI0ZGRhNTE5ZWYxLzEvTlFSRFRWSjdKX0FpZEE4NDNLbTB2VkJHZy1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDktNDI0ZGRhNTE5ZWYx
LzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYb5AwQA
LYb7AwQALYxFAwQALYxHMA0GCSqGSIb3DQEBCwUAA4IBAQCjmZ19rKMbveZxiP7i
5nx52UB6K2LRTdja68y82pP961dtnKm7Jz9X3JfTiIb4EclUlxUE7gURhva1BCGE
fW9Gt99VQP1UYiwEvFxPH5ZrwFgK9WnRIDqjFU/Me+NR6qpw6zu7rAkD8IcbBeqj
DM/3J5P4VbD9NmWkdCKDeNpqzuyhgK7zQehVdGlwCSVo3B4DqFgzRXmVIadQJd5W
C4Lpqfvb9M9kWCXbOxPwKZB+fn7IOtLvKkwgLgeB+hGX35bnKKDjbgGmwjENeSiI
lmTalXetfbsFsmoM5rCUn0b+/5zOsUKKvxkCzvCNj5PRGhjMMXCor4RSfXJxaLBx
HzyO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-ams.rpki-client.org