Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/1-5YwlxBB9sdX3cQoDRip4YDNi0I.roa
File: 1-5YwlxBB9sdX3cQoDRip4YDNi0I.roa (raw, json)
Hash identifier: S2C92RTJsuYSer1nSuE6060s3ITq5asy9IWvqmAJueM=
Subject key identifier: FB:96:30:97:10:41:F6:C7:57:DD:C4:28:0D:18:A9:E1:80:CD:8B:42
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 018517AB1DCCCC02A64EBBC05092E6E757BE
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/1-5YwlxBB9sdX3cQoDRip4YDNi0I.roa
Signing time: Thu 15 Dec 2022 21:22:48 +0000
ROA not before: Thu 15 Dec 2022 21:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212751
IP address blocks: 45.66.145.0/24 maxlen: 24
45.66.144.0/24 maxlen: 24
45.66.146.0/24 maxlen: 24
45.66.147.0/24 maxlen: 24
2a10:7c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:ab:1d:cc:cc:02:a6:4e:bb:c0:50:92:e6:e7:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Dec 15 21:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb9630971041f6c757ddc4280d18a9e180cd8b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:a5:8b:49:e6:5a:ce:8d:4b:b6:98:07:61:
b6:99:3a:14:ea:d0:f3:84:b6:f5:10:01:a7:44:22:
78:3a:7d:4d:72:fc:3c:f3:cf:be:ff:bf:f9:5b:f4:
69:0b:51:c2:27:bd:b4:03:73:de:46:2b:0c:07:fe:
94:89:7e:b5:dd:d4:6f:79:7a:e4:5b:53:1c:27:c5:
6c:1c:e7:03:70:b9:44:cd:51:a6:6f:66:69:5b:d7:
28:22:3a:a6:0e:b3:c3:e8:ee:f7:d9:ac:68:00:57:
5f:8c:be:57:94:d9:5c:f8:e9:b5:61:dd:4a:22:78:
14:ed:9e:49:3e:ee:39:12:bd:22:be:57:20:dd:65:
e0:74:77:fd:25:6e:6b:98:9c:17:5f:af:16:c3:40:
65:e7:a1:ea:e9:32:85:2b:93:f4:be:52:83:c4:11:
4c:1b:20:79:0c:54:13:b7:85:06:8c:a3:99:4e:b9:
c1:43:cd:5e:6a:e7:f3:a6:6c:75:0d:e8:5e:35:a3:
ca:6c:36:57:08:f7:68:33:c5:69:06:98:47:6a:60:
eb:c8:08:78:be:3f:5f:37:9b:42:20:33:c8:5a:27:
ed:b2:7d:bf:0a:c3:ff:bf:3c:33:a9:9f:70:50:9b:
ab:60:61:3a:34:c7:a8:ad:f0:1c:82:16:cc:3a:76:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:30:97:10:41:F6:C7:57:DD:C4:28:0D:18:A9:E1:80:CD:8B:42
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/1-5YwlxBB9sdX3cQoDRip4YDNi0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.144.0/22
IPv6:
2a10:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
c4:83:8b:30:8f:ce:2c:f8:fb:3c:28:dc:64:f8:10:61:30:04:
3d:91:1e:0d:9c:9d:6c:d0:bd:fc:e7:d6:16:79:fa:0a:d0:d0:
1d:6f:47:d8:f0:c1:a7:5a:26:5e:dc:ba:00:f2:37:03:fb:0d:
50:0f:e9:06:0c:41:8a:43:75:27:d3:c3:06:4c:e6:83:02:6d:
99:bb:50:25:9f:cc:e6:61:74:a3:4e:26:de:09:09:81:9b:f9:
bf:91:15:73:42:bf:04:60:74:ef:47:39:46:6b:19:2f:0d:c8:
b0:d0:a9:99:ed:5d:f6:90:c9:ad:02:af:a6:d3:44:cd:1a:02:
20:f6:8e:ae:b1:8b:fa:96:cb:df:61:4b:23:15:33:30:c0:62:
b5:e8:a2:4a:13:9a:6b:5d:22:b8:06:a8:3d:69:69:f4:b5:47:
3b:aa:41:4e:2c:84:76:13:ea:33:93:12:46:15:3c:b7:4f:00:
76:44:01:d0:70:e2:b3:0d:8b:85:77:b0:e8:f0:ba:8d:eb:da:
a2:91:5c:45:8c:bc:c5:7b:69:14:3c:5d:94:96:8d:50:3f:d6:
00:85:17:fe:a2:b6:88:95:f3:07:b3:9c:e9:19:8b:e0:2f:cf:
09:90:f8:96:ce:2c:c2:32:8d:fb:99:08:f5:6d:5c:b8:69:d0:
0e:ea:d5:f6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYUXqx3MzAKmTrvAUJLm51e+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3
MjM2ZTUwHhcNMjIxMjE1MjEyMjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk2MzA5NzEwNDFmNmM3NTdkZGM0MjgwZDE4YTllMTgwY2Q4YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2+li0nmWs6NS7aYB2G2mToU6tDz
hLb1EAGnRCJ4On1Ncvw888++/7/5W/RpC1HCJ720A3PeRisMB/6UiX613dRveXrk
W1McJ8VsHOcDcLlEzVGmb2ZpW9coIjqmDrPD6O732axoAFdfjL5XlNlc+Om1Yd1K
IngU7Z5JPu45Er0ivlcg3WXgdHf9JW5rmJwXX68Ww0Bl56Hq6TKFK5P0vlKDxBFM
GyB5DFQTt4UGjKOZTrnBQ81eaufzpmx1DeheNaPKbDZXCPdoM8VpBphHamDryAh4
vj9fN5tCIDPIWiftsn2/CsP/vzwzqZ9wUJurYGE6NMeorfAcghbMOnYN3wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPuWMJcQQfbHV93EKA0YqeGAzYtCMB8GA1UdIwQY
MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt
NjU2NDBmMWMxNzlhLzEvMS01WXdseEJCOXNkWDNjUW9EUmlwNFlETmkwSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjUvYjY5NjMzLWMwMzEtNGQyNS05ZTBlLTY1NjQwZjFjMTc5
YS8xL0RVdDAxSW5Fa25pakFEbVVySmY5UUgxeU51VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1CkDAN
BAIAAjAHAwUDKhB8QDANBgkqhkiG9w0BAQsFAAOCAQEAxIOLMI/OLPj7PCjcZPgQ
YTAEPZEeDZydbNC9/OfWFnn6CtDQHW9H2PDBp1omXty6API3A/sNUA/pBgxBikN1
J9PDBkzmgwJtmbtQJZ/M5mF0o04m3gkJgZv5v5EVc0K/BGB070c5RmsZLw3IsNCp
me1d9pDJrQKvptNEzRoCIPaOrrGL+pbL32FLIxUzMMBiteiiShOaa10iuAaoPWlp
9LVHO6pBTiyEdhPqM5MSRhU8t08AdkQB0HDisw2LhXew6PC6jevaopFcRYy8xXtp
FDxdlJaNUD/WAIUX/qK2iJXzB7Oc6RmL4C/PCZD4ls4swjKN+5kI9W1cuGnQDurV
9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:43 2024 by rpki-client on console-fra.rpki-client.org