Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c3BE4kXSWlhAxkekSuLxDVfN8B4.roa
File: c3BE4kXSWlhAxkekSuLxDVfN8B4.roa (raw, json)
Hash identifier: 22wOrh1QtAwcmyiVw+qQYC60jjs+fRAjotlf9Pv/ndo=
Subject key identifier: 73:70:44:E2:45:D2:5A:58:40:C6:47:A4:4A:E2:F1:0D:57:CD:F0:1E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07167081
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c3BE4kXSWlhAxkekSuLxDVfN8B4.roa
Signing time: Tue 04 Jan 2022 18:45:17 +0000
ROA not before: Tue 04 Jan 2022 18:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118911105 (0x7167081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 4 18:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=737044e245d25a5840c647a44ae2f10d57cdf01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:5c:c2:80:49:c8:90:b8:ae:7c:1a:6e:fb:
5c:ef:6e:e3:18:5c:53:8a:b1:44:24:2a:25:b1:a0:
11:88:47:f5:40:33:09:6d:74:b4:7d:89:e1:0e:34:
19:0e:fb:d8:8b:9d:bd:6c:df:8c:da:2e:fe:ca:aa:
8e:5b:80:16:c4:eb:16:25:99:fb:5c:47:96:f4:6e:
ce:7b:c1:f9:25:42:7b:8e:2e:53:70:78:37:c1:ae:
67:7d:ab:6d:7d:e1:11:3e:fc:c7:44:a8:07:4c:da:
f6:bb:f2:df:f4:1c:8f:29:6a:b3:4e:d6:08:99:98:
d9:27:8e:37:5d:b5:0c:75:4c:2f:41:55:a3:3a:76:
86:5a:54:b1:d5:5b:74:60:33:a9:0f:b3:ea:82:c8:
dd:b8:9c:31:f7:45:81:ea:5c:2b:56:a8:56:28:20:
46:c2:e6:db:6e:9d:30:46:c8:01:8f:86:87:51:98:
27:64:b4:36:1a:13:2e:e4:65:50:75:92:c1:f1:ef:
76:f7:c9:a3:cf:28:e2:99:f8:78:9f:e4:d8:b2:54:
8d:db:86:64:92:9a:64:22:6f:46:fa:3e:3c:6f:61:
b5:ab:df:07:8a:4e:e2:35:ea:3f:16:ad:3e:c8:2c:
c0:d2:09:79:1b:8f:7e:ab:c0:2a:0d:e6:fb:d3:5f:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:44:E2:45:D2:5A:58:40:C6:47:A4:4A:E2:F1:0D:57:CD:F0:1E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c3BE4kXSWlhAxkekSuLxDVfN8B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.132.180.0/24
45.144.215.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2a:0c:b8:7c:29:f5:d2:e1:2f:4b:30:be:72:ff:ad:f0:f7:
e5:cb:92:ae:29:1d:3d:a3:52:61:af:e7:4a:12:c6:ec:b2:09:
13:35:05:de:1a:86:0f:29:39:80:55:f2:44:ea:ad:f0:de:88:
3c:ba:aa:5e:e7:01:b0:84:59:64:19:f4:13:a5:2d:31:1c:77:
ee:6b:9e:47:c9:f2:63:d9:76:1d:91:28:6a:17:c3:66:26:8c:
ea:4f:a3:f3:7b:26:db:48:fa:fa:6c:b7:fa:20:00:6a:c3:53:
16:a4:19:04:4d:30:d0:76:73:a7:12:46:3c:5b:fe:c3:c4:83:
5e:6f:42:19:c4:16:b0:0a:ce:b8:59:bb:8f:e9:be:11:a2:55:
af:b5:c3:f5:16:b7:e4:d7:53:05:6d:16:2d:ad:98:68:49:aa:
92:e9:ee:1d:fc:cc:00:78:ef:dc:d8:93:e2:b7:7d:51:c6:2e:
ce:1c:bc:41:8f:84:97:1a:f4:6d:0a:75:e8:21:26:6e:19:00:
45:8f:84:b0:95:f8:5c:9a:64:78:fd:52:d2:6a:f5:cc:54:e5:
fe:ac:3d:3b:3b:2a:16:b5:75:05:01:b4:ef:93:b8:67:08:76:
0f:08:9b:6b:ca:b2:49:45:15:c9:b4:1b:a3:90:d1:e8:c9:89:
ac:77:26:4b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBxZwgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDEw
NDE4NDUxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM3MDQ0ZTI0NWQy
NWE1ODQwYzY0N2E0NGFlMmYxMGQ1N2NkZjAxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOBGXMKASciQuK58Gm77XO9u4xhcU4qxRCQqJbGgEYhH9UAz
CW10tH2J4Q40GQ772IudvWzfjNou/sqqjluAFsTrFiWZ+1xHlvRuznvB+SVCe44u
U3B4N8GuZ32rbX3hET78x0SoB0za9rvy3/Qcjylqs07WCJmY2SeON121DHVML0FV
ozp2hlpUsdVbdGAzqQ+z6oLI3bicMfdFgepcK1aoViggRsLm226dMEbIAY+Gh1GY
J2S0NhoTLuRlUHWSwfHvdvfJo88o4pn4eJ/k2LJUjduGZJKaZCJvRvo+PG9htavf
B4pO4jXqPxatPsgswNIJeRuPfqvAKg3m+9NfoRUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRzcETiRdJaWEDGR6RK4vENV83wHjAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
L2MzQkU0a1hTV2xoQXhrZWtTdUx4RFZmTjhCNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC0JHgMEAC2EtAMEAC2Q1wMEAE1T
JTANBgkqhkiG9w0BAQsFAAOCAQEAlCoMuHwp9dLhL0swvnL/rfD35cuSrikdPaNS
Ya/nShLG7LIJEzUF3hqGDyk5gFXyROqt8N6IPLqqXucBsIRZZBn0E6UtMRx37mue
R8nyY9l2HZEoahfDZiaM6k+j83sm20j6+my3+iAAasNTFqQZBE0w0HZzpxJGPFv+
w8SDXm9CGcQWsArOuFm7j+m+EaJVr7XD9Ra35NdTBW0WLa2YaEmqkunuHfzMAHjv
3NiT4rd9UcYuzhy8QY+Elxr0bQp16CEmbhkARY+EsJX4XJpkeP1S0mr1zFTl/qw9
OzsqFrV1BQG075O4Zwh2Dwiba8qySUUVybQbo5DR6MmJrHcmSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org