Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/IZY815CXq8JPVhU1Kmn6mNxppE4.roa
File: IZY815CXq8JPVhU1Kmn6mNxppE4.roa (raw, json)
Hash identifier: 3rsz5JzId4PCFIy1fMpNi2G+vPx3fWheKjKi9+p8SYI=
Subject key identifier: 21:96:3C:D7:90:97:AB:C2:4F:56:15:35:2A:69:FA:98:DC:69:A4:4E
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 05A5E218
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/IZY815CXq8JPVhU1Kmn6mNxppE4.roa
Signing time: Fri 04 Feb 2022 09:56:10 +0000
ROA not before: Fri 04 Feb 2022 09:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94757400 (0x5a5e218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Feb 4 09:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21963cd79097abc24f5615352a69fa98dc69a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:d4:08:69:96:44:3d:67:64:28:9b:3f:17:
32:7d:e2:ba:63:00:79:1f:91:16:3a:8b:98:85:09:
88:66:1b:41:57:ce:71:3c:50:1f:1b:04:65:cd:5b:
20:65:be:88:95:92:ac:47:fa:41:79:72:cf:7c:1d:
ff:29:e7:4b:b3:0a:7a:8b:6b:db:aa:d2:55:49:82:
35:47:a1:3d:c2:40:20:11:77:c8:02:4c:bc:58:fc:
53:a9:78:0f:f6:ca:7d:fe:1c:e1:0f:71:29:43:f8:
80:05:83:78:6c:7e:35:89:4f:43:d5:31:75:34:f0:
80:7f:99:ee:2f:45:70:cc:07:4b:74:00:37:32:f9:
d6:b7:3f:08:47:70:4f:8c:65:e2:c5:56:20:b6:64:
da:c1:08:13:ed:e7:4d:4b:b7:14:76:44:74:b4:2c:
f4:3c:05:fc:6b:df:0c:6e:65:1d:f9:09:22:49:9c:
a8:a8:d3:16:6b:6a:aa:e0:12:0e:64:dc:a4:c6:da:
95:0b:e0:6e:85:92:04:4c:75:63:02:fc:b7:10:d4:
4a:5e:50:95:03:82:fe:44:ef:c8:71:17:b2:ad:82:
cd:90:2a:96:03:e7:68:da:b7:d7:d7:0e:3d:77:69:
6e:30:a7:ef:eb:b3:72:a1:45:aa:6c:50:98:02:f6:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:3C:D7:90:97:AB:C2:4F:56:15:35:2A:69:FA:98:DC:69:A4:4E
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/IZY815CXq8JPVhU1Kmn6mNxppE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.45.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:99:4b:f4:ab:8c:51:af:73:a0:c7:a3:55:1b:1d:f6:4e:
4b:d7:da:cc:90:26:18:3c:4e:9c:d5:cb:83:3b:6b:a8:27:91:
b5:10:ee:95:6a:9a:4e:a1:fe:c4:67:74:64:8e:c8:c4:3b:de:
9d:c1:66:a5:3a:92:f3:92:af:8d:a8:b1:8c:16:17:04:30:45:
6a:7e:02:a9:19:b2:e5:a8:1e:18:21:be:cb:a1:e3:40:42:bd:
0c:20:89:7a:a5:59:56:8c:83:e3:20:39:da:49:bd:74:2c:03:
a0:5f:d7:68:3f:79:dc:ed:ee:dd:98:03:49:c9:94:df:03:10:
49:2c:fc:88:6a:20:82:f3:7c:17:aa:92:44:59:f2:9a:e2:62:
2e:b3:e9:50:47:94:d7:58:be:2e:f0:83:6e:ec:61:39:6f:c0:
90:59:d7:90:80:c5:f2:ed:d3:0c:39:d3:12:6b:a5:4b:2d:dc:
2e:45:a6:e9:7c:03:b2:aa:81:1b:4d:34:fc:b7:e2:fe:02:b1:
62:54:4b:53:96:db:cd:55:42:7c:cb:29:30:33:de:12:e2:d2:
70:e8:94:ea:50:bd:b9:29:49:4e:77:b6:6b:1a:52:c6:53:29:
5f:4e:bd:9a:5b:52:83:15:dd:88:00:b0:c0:8f:a3:ba:bb:e1:
af:f1:60:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaXiGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzExZGFlZmFmZjgxYzdlNTAxMjc4ZDg3ZDliYzJiMjA0ZDcxMTU1MB4XDTIyMDIw
NDA5NTYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjE5NjNjZDc5MDk3
YWJjMjRmNTYxNTM1MmE2OWZhOThkYzY5YTQ0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKO/1AhplkQ9Z2Qomz8XMn3iumMAeR+RFjqLmIUJiGYbQVfO
cTxQHxsEZc1bIGW+iJWSrEf6QXlyz3wd/ynnS7MKeotr26rSVUmCNUehPcJAIBF3
yAJMvFj8U6l4D/bKff4c4Q9xKUP4gAWDeGx+NYlPQ9UxdTTwgH+Z7i9FcMwHS3QA
NzL51rc/CEdwT4xl4sVWILZk2sEIE+3nTUu3FHZEdLQs9DwF/GvfDG5lHfkJIkmc
qKjTFmtqquASDmTcpMbalQvgboWSBEx1YwL8txDUSl5QlQOC/kTvyHEXsq2CzZAq
lgPnaNq319cOPXdpbjCn7+uzcqFFqmxQmAL2XPsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhljzXkJerwk9WFTUqafqY3GmkTjAfBgNVHSMEGDAWgBTcEdrvr/gcflAS
eNh9m8KyBNcRVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNCSGE3Nl80SEg1UUVuallmWnZDc2dUWEVWVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvYjIyNjAzLTkwYWItNDNhZC1hYjE2LTY1MjQ5Y2JjNTczYy8x
L0laWTgxNUNYcThKUFZoVTFLbW42bU54cHBFNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
YjIyNjAzLTkwYWItNDNhZC1hYjE2LTY1MjQ5Y2JjNTczYy8xLzNCSGE3Nl80SEg1
UUVuallmWnZDc2dUWEVWVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6aLTANBgkqhkiG9w0BAQsFAAOC
AQEASCCZS/SrjFGvc6DHo1UbHfZOS9fazJAmGDxOnNXLgztrqCeRtRDulWqaTqH+
xGd0ZI7IxDvencFmpTqS85KvjaixjBYXBDBFan4CqRmy5ageGCG+y6HjQEK9DCCJ
eqVZVoyD4yA52km9dCwDoF/XaD953O3u3ZgDScmU3wMQSSz8iGoggvN8F6qSRFny
muJiLrPpUEeU11i+LvCDbuxhOW/AkFnXkIDF8u3TDDnTEmulSy3cLkWm6XwDsqqB
G000/Lfi/gKxYlRLU5bbzVVCfMspMDPeEuLScOiU6lC9uSlJTne2axpSxlMpX069
mltSgxXdiACwwI+jurvhr/FgXw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org