Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zqQ1k88sNqNnriyjD-dG5azmwH0.roa
File: zqQ1k88sNqNnriyjD-dG5azmwH0.roa (raw, json)
Hash identifier: RUfvS41UPj/pppzXXANjlgJ6nR2QLr24Dw9alseZIHw=
Subject key identifier: CE:A4:35:93:CF:2C:36:A3:67:AE:2C:A3:0F:E7:46:E5:AC:E6:C0:7D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183A28C9A632D82A379403E76B7A43943DA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zqQ1k88sNqNnriyjD-dG5azmwH0.roa
Signing time: Tue 04 Oct 2022 10:31:07 +0000
ROA not before: Tue 04 Oct 2022 10:31:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210793
IP address blocks: 45.81.248.0/22 maxlen: 22
45.95.120.0/22 maxlen: 22
45.86.88.0/22 maxlen: 22
147.78.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:8c:9a:63:2d:82:a3:79:40:3e:76:b7:a4:39:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 4 10:31:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cea43593cf2c36a367ae2ca30fe746e5ace6c07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:04:0a:a9:46:ec:c3:a5:36:7f:f7:e0:ce:
07:9f:91:5d:1a:0c:74:d1:00:1d:34:81:87:79:ca:
34:7d:25:b1:27:0c:1f:80:d0:5d:84:86:ad:01:b6:
a0:af:a9:a4:10:01:7a:54:43:e5:a4:25:55:5a:16:
74:5c:07:6f:3e:ca:23:af:f5:d9:1c:df:ae:45:38:
53:03:81:87:62:a6:35:f0:c0:1d:a4:51:4f:d0:78:
c7:3f:b9:05:52:29:dc:c3:df:c2:67:5f:be:4c:55:
62:54:d0:45:09:ee:8c:b8:2a:02:c2:56:03:cb:a7:
c1:ab:6f:ba:97:7e:a6:8a:cc:0e:47:f4:5b:be:ac:
b7:26:ec:e4:16:f2:21:e3:8d:0f:4f:1f:7f:e1:67:
15:b8:af:6f:4c:52:f2:1d:90:8a:33:b3:42:31:5c:
46:1f:6e:9f:f6:f5:b0:f4:46:db:94:1d:db:70:42:
db:eb:d2:82:a2:87:0a:d7:f1:82:47:ab:e1:77:21:
6e:8e:16:bc:59:d9:13:fe:bf:31:36:5d:da:86:4f:
a2:89:a7:e1:a9:ba:85:1e:67:23:19:48:b7:b0:d1:
4b:b0:5f:0d:19:f9:6a:db:93:d3:1a:f3:27:e5:1c:
39:a9:0a:5d:c3:c9:34:b1:f4:8c:dd:e8:0c:ed:27:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:35:93:CF:2C:36:A3:67:AE:2C:A3:0F:E7:46:E5:AC:E6:C0:7D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zqQ1k88sNqNnriyjD-dG5azmwH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.248.0/22
45.86.88.0/22
45.95.120.0/22
147.78.124.0/22
Signature Algorithm: sha256WithRSAEncryption
41:84:f6:f2:0b:43:f8:32:73:b4:7b:fc:ae:ef:5d:57:25:d3:
47:24:91:1e:28:96:e7:8c:49:6a:3d:60:39:71:29:ec:3b:9e:
f9:d1:f8:43:33:c2:dd:35:20:4d:78:c5:70:7e:46:4e:42:d3:
e8:db:d1:e0:44:73:17:47:5d:c9:b7:6a:4b:3d:71:7a:98:21:
41:54:2c:8f:a3:52:03:1b:22:c4:15:73:64:29:c2:9d:8d:85:
92:1c:4c:28:cd:b3:01:73:66:7d:f9:9e:a7:cc:8e:9b:17:82:
e9:7e:b7:09:31:9c:e3:43:b6:df:0d:7d:74:a6:aa:49:cb:53:
f4:9e:8d:45:5b:38:1c:8c:c8:27:c7:7d:b2:5f:49:70:7f:af:
09:01:63:ae:f7:f6:84:d6:6b:57:66:86:8c:86:17:36:17:c4:
43:4d:d7:65:ab:20:49:32:fb:09:2c:64:2e:72:0b:12:55:9e:
6f:1e:ce:b8:89:52:ef:55:9a:d6:78:58:9e:07:16:33:30:13:
65:ac:94:18:3c:50:09:c6:21:ef:c8:b6:b6:bc:1e:30:7f:ee:
a1:40:a6:a7:ff:d2:a4:79:b6:d3:90:f2:b3:c3:49:36:9a:fa:
0e:b9:f0:89:fd:61:25:6b:64:a2:94:e1:7a:4b:69:ba:07:67:
87:fa:72:ae
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYOijJpjLYKjeUA+drekOUPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjIxMDA0MTAzMTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWE0MzU5M2NmMmMzNmEzNjdhZTJjYTMwZmU3NDZlNWFjZTZjMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWIECqlG7MOlNn/34M4Hn5FdGgx0
0QAdNIGHeco0fSWxJwwfgNBdhIatAbagr6mkEAF6VEPlpCVVWhZ0XAdvPsojr/XZ
HN+uRThTA4GHYqY18MAdpFFP0HjHP7kFUincw9/CZ1++TFViVNBFCe6MuCoCwlYD
y6fBq2+6l36miswOR/Rbvqy3JuzkFvIh440PTx9/4WcVuK9vTFLyHZCKM7NCMVxG
H26f9vWw9EbblB3bcELb69KCoocK1/GCR6vhdyFujha8WdkT/r8xNl3ahk+iiafh
qbqFHmcjGUi3sNFLsF8NGflq25PTGvMn5Rw5qQpdw8k0sfSM3egM7SeGOQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFM6kNZPPLDajZ64sow/nRuWs5sB9MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvenFRMWs4OHNOcU5ucml5akQtZEc1YXptd0gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVH4AwQC
LVZYAwQCLV94AwQCk058MA0GCSqGSIb3DQEBCwUAA4IBAQBBhPbyC0P4MnO0e/yu
711XJdNHJJEeKJbnjElqPWA5cSnsO5750fhDM8LdNSBNeMVwfkZOQtPo29HgRHMX
R13Jt2pLPXF6mCFBVCyPo1IDGyLEFXNkKcKdjYWSHEwozbMBc2Z9+Z6nzI6bF4Lp
frcJMZzjQ7bfDX10pqpJy1P0no1FWzgcjMgnx32yX0lwf68JAWOu9/aE1mtXZoaM
hhc2F8RDTddlqyBJMvsJLGQucgsSVZ5vHs64iVLvVZrWeFieBxYzMBNlrJQYPFAJ
xiHvyLa2vB4wf+6hQKan/9KkebbTkPKzw0k2mvoOufCJ/WEla2SilOF6S2m6B2eH
+nKu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org