Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/Q3y5N9DMkNwL6Zw-n9bS3yylKz4.roa
File: Q3y5N9DMkNwL6Zw-n9bS3yylKz4.roa (raw, json)
Hash identifier: EL8H2wb/Fp3jg0E+FukudDY88iGySSoh9yNSlqkz1rM=
Subject key identifier: 43:7C:B9:37:D0:CC:90:DC:0B:E9:9C:3E:9F:D6:D2:DF:2C:A5:2B:3E
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 080B76CE
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/Q3y5N9DMkNwL6Zw-n9bS3yylKz4.roa
Signing time: Sat 01 Jan 2022 04:01:51 +0000
ROA not before: Sat 01 Jan 2022 04:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 45.92.13.0/24 maxlen: 24
45.92.12.0/24 maxlen: 24
45.92.15.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134969038 (0x80b76ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 1 04:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=437cb937d0cc90dc0be99c3e9fd6d2df2ca52b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:0a:62:1b:49:0c:a5:07:3f:03:cc:d5:6d:
52:cd:a2:f8:8f:42:df:d2:1b:c2:ec:c4:32:d5:2e:
c8:92:29:fe:8b:d3:61:44:fe:64:e1:f6:e8:fd:69:
88:d6:11:1d:f7:68:83:c3:72:c3:09:87:6b:55:2c:
45:b0:a9:7a:3f:3e:e2:1c:dd:28:e8:e4:bc:bf:56:
9a:8d:03:b0:89:91:4e:c5:b6:58:9d:79:3a:4d:e0:
c1:06:f3:d2:c2:8c:a1:4f:6a:41:bc:ca:62:0a:87:
01:2a:8c:4c:f4:6f:01:68:dd:f4:2f:5c:3c:ed:5e:
0a:72:8d:73:53:c3:5d:21:e7:59:8e:3c:c7:65:56:
39:f8:06:64:1e:33:18:fe:9b:55:d0:88:0d:b2:f1:
f8:1c:bc:56:41:35:b9:fe:3c:e4:a1:70:f2:03:8f:
3a:73:3d:7f:f9:41:6d:47:cf:a8:c5:7a:a6:0c:14:
11:12:4b:d4:bf:9c:b0:2e:71:54:3f:82:50:84:3b:
04:6c:92:29:d7:09:58:04:67:c3:6c:77:7e:37:1f:
90:5d:07:bc:6a:ec:d1:89:e7:71:da:79:71:c9:fc:
83:7b:cd:16:8a:30:57:89:41:fe:21:9b:c6:9d:8b:
2c:fe:50:3f:74:3e:43:ec:9f:5a:ba:2f:d7:8e:79:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:B9:37:D0:CC:90:DC:0B:E9:9C:3E:9F:D6:D2:DF:2C:A5:2B:3E
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/Q3y5N9DMkNwL6Zw-n9bS3yylKz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:19:de:44:8a:f9:2b:06:eb:56:84:a6:78:7c:20:d5:7b:c8:
85:c8:c3:ee:1e:e9:b3:bf:e6:50:fc:dd:cc:fa:5f:4a:5c:a3:
f5:8d:ca:41:30:35:e0:38:84:42:bd:8b:4b:92:19:fb:48:19:
ee:3e:48:df:f5:0d:f6:05:24:87:b6:fa:5f:30:69:2a:a6:92:
22:64:61:c6:52:5d:ac:be:7d:97:47:ce:d4:87:63:c4:a9:0e:
90:9d:99:ff:f9:3e:33:a1:a7:c8:a2:a6:31:2f:35:59:b6:f0:
66:ae:59:b3:67:ff:cb:eb:40:1c:6a:f6:97:02:c5:68:30:63:
2e:ce:99:7e:cd:c8:b4:c4:98:04:10:9b:91:60:f6:55:af:ca:
75:b1:01:81:98:ee:5f:d1:74:8c:2b:48:16:93:93:9f:1f:a2:
5b:cd:b5:43:93:e9:82:79:43:35:b1:9d:19:be:33:e5:20:b9:
ba:4e:4e:0e:6b:6e:0e:b3:22:06:d1:63:b3:cd:9f:ef:6a:15:
a0:cb:3b:cb:33:30:f0:f6:06:c4:ae:67:0a:5a:e6:a5:be:99:
57:4d:e7:3f:2d:e9:76:90:80:89:b4:7d:b2:04:57:eb:9b:89:
61:23:12:3a:c0:27:b5:de:43:ef:b4:8b:2e:76:bf:c4:8c:98:
9d:a4:7f:be
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECAt2zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTRlZGJkMTk2MzRjYmI5MWEwZDJkYWZkNzU5ZDRjOWE3ZTc3YjdhMB4XDTIyMDEw
MTA0MDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDM3Y2I5MzdkMGNj
OTBkYzBiZTk5YzNlOWZkNmQyZGYyY2E1MmIzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2uCmIbSQylBz8DzNVtUs2i+I9C39IbwuzEMtUuyJIp/ovT
YUT+ZOH26P1piNYRHfdog8NywwmHa1UsRbCpej8+4hzdKOjkvL9Wmo0DsImRTsW2
WJ15Ok3gwQbz0sKMoU9qQbzKYgqHASqMTPRvAWjd9C9cPO1eCnKNc1PDXSHnWY48
x2VWOfgGZB4zGP6bVdCIDbLx+By8VkE1uf485KFw8gOPOnM9f/lBbUfPqMV6pgwU
ERJL1L+csC5xVD+CUIQ7BGySKdcJWARnw2x3fjcfkF0HvGrs0Ynncdp5ccn8g3vN
FoowV4lB/iGbxp2LLP5QP3Q+Q+yfWrov1455o3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRDfLk30MyQ3AvpnD6f1tLfLKUrPjAfBgNVHSMEGDAWgBSBTtvRljTLuRoN
La/XWdTJp+d7ejAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dVN2IwWlkweTdrYURTMnYxMW5VeWFmbmUzby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvZTgyZGU5LTI1ZjQtNDY2ZS05YzBjLWMwODk5N2E3YTA4Zi8x
L1EzeTVOOURNa053TDZady1uOWJTM3l5bEt6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
ZTgyZGU5LTI1ZjQtNDY2ZS05YzBjLWMwODk5N2E3YTA4Zi8xL2dVN2IwWlkweTdr
YURTMnYxMW5VeWFmbmUzby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1cDDANBgkqhkiG9w0BAQsFAAOC
AQEAfRneRIr5KwbrVoSmeHwg1XvIhcjD7h7ps7/mUPzdzPpfSlyj9Y3KQTA14DiE
Qr2LS5IZ+0gZ7j5I3/UN9gUkh7b6XzBpKqaSImRhxlJdrL59l0fO1IdjxKkOkJ2Z
//k+M6GnyKKmMS81WbbwZq5Zs2f/y+tAHGr2lwLFaDBjLs6Zfs3ItMSYBBCbkWD2
Va/KdbEBgZjuX9F0jCtIFpOTnx+iW821Q5PpgnlDNbGdGb4z5SC5uk5ODmtuDrMi
BtFjs82f72oVoMs7yzMw8PYGxK5nClrmpb6ZV03nPy3pdpCAibR9sgRX65uJYSMS
OsAntd5D77SLLna/xIyYnaR/vg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:29 2023 by rpki-client on console-fra.rpki-client.org