Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VvNd_lqa0Ras6EO4PKvh5wnRMk8.roa
File: VvNd_lqa0Ras6EO4PKvh5wnRMk8.roa (raw, json)
Hash identifier: +ZM2AG70/rfSU4/rtkKvhryLSLuOB8MAR8fTVBnBL48=
Subject key identifier: 56:F3:5D:FE:5A:9A:D1:16:AC:E8:43:B8:3C:AB:E1:E7:09:D1:32:4F
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0182D4A34686C777614414CC232BAD0C362E
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VvNd_lqa0Ras6EO4PKvh5wnRMk8.roa
Signing time: Thu 25 Aug 2022 10:54:06 +0000
ROA not before: Thu 25 Aug 2022 10:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136744
IP address blocks: 45.151.96.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:a3:46:86:c7:77:61:44:14:cc:23:2b:ad:0c:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 25 10:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56f35dfe5a9ad116ace843b83cabe1e709d1324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:d1:df:03:93:5d:e8:ff:50:2b:f2:62:ae:
e9:00:77:6a:c2:cb:ac:6b:ef:4b:b1:cc:54:44:f2:
41:b1:90:d5:08:22:db:50:b1:a1:f3:4e:36:01:ea:
78:ea:1c:86:35:09:33:87:0c:4c:f6:2b:0a:0c:5c:
2f:5b:5b:6f:50:4f:b8:5a:be:12:c9:2e:fc:31:a1:
df:be:4f:ac:f5:0a:65:1c:1e:de:c3:bb:55:47:77:
f4:a7:7d:80:39:db:ee:ba:02:38:3f:2b:86:65:00:
fc:d9:a0:09:9b:63:42:e2:e4:b8:53:f0:a1:41:de:
46:db:38:4e:ef:24:fb:4c:f8:e5:54:8f:6a:0b:dd:
d4:eb:73:f9:54:d6:c2:e0:36:7d:03:a0:6b:77:fc:
5e:9a:c7:eb:91:21:f3:70:b5:52:e9:35:20:36:bf:
b4:4f:f2:38:28:3b:d4:f1:b5:62:2c:f4:ed:70:44:
1e:13:d1:e3:f3:c6:f4:6c:95:2d:08:c9:6b:94:87:
8a:5a:1d:37:81:de:f3:17:9e:54:9a:cd:a7:05:48:
65:9a:c4:60:0c:b9:b6:c5:5c:13:ff:80:90:9f:a4:
71:92:16:6d:a6:de:74:72:2e:9f:0f:eb:9c:c5:e2:
ad:5e:62:14:53:f1:36:fa:1c:22:dd:11:3c:05:db:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:5D:FE:5A:9A:D1:16:AC:E8:43:B8:3C:AB:E1:E7:09:D1:32:4F
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VvNd_lqa0Ras6EO4PKvh5wnRMk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/24
94.137.73.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ee:c2:c2:e9:a4:2e:ce:03:ae:55:fb:1b:b5:e4:b6:17:2d:
bf:38:21:b2:19:86:5c:a6:32:5f:9d:34:50:d5:18:7f:e9:ed:
ce:c8:76:6e:f8:9e:ed:96:27:c6:0b:77:6f:96:52:f0:68:be:
8e:0c:9f:7e:46:01:64:9b:c0:7b:86:fe:36:0a:fb:3a:0b:46:
1b:af:18:15:d9:35:1a:01:70:9c:a1:78:99:24:65:fd:38:01:
54:6e:f0:f1:0b:89:b6:e7:08:af:06:ed:67:32:d1:37:9f:c6:
cb:e0:10:0d:7f:8d:68:95:8b:fb:09:fb:6b:d3:b0:79:12:0c:
b3:13:05:d3:d8:6d:83:f1:12:ce:df:a4:35:1f:35:00:39:a4:
7e:8c:1c:52:9a:69:75:87:5b:2e:57:65:f2:9d:04:b4:07:a9:
6c:f7:05:63:23:64:52:76:6f:c3:38:1a:08:81:2f:2e:b8:25:
68:6f:d8:c0:32:26:1e:a7:be:ce:a1:6d:ea:30:07:a1:fc:b8:
2c:78:1b:6f:cf:a4:6b:bf:52:ee:c6:8b:70:e2:45:0a:18:7e:
7c:ae:09:e5:28:08:09:af:a5:44:e3:62:34:8d:bf:49:fe:d6:
2b:e4:8c:29:79:47:8b:97:8a:db:87:1f:ec:e0:84:ac:63:78:
54:7b:b3:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLUo0aGx3dhRBTMIyutDDYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjIwODI1MTA1NDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmYzNWRmZTVhOWFkMTE2YWNlODQzYjgzY2FiZTFlNzA5ZDEzMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHrR3wOTXej/UCvyYq7pAHdqwsus
a+9LscxURPJBsZDVCCLbULGh8042Aep46hyGNQkzhwxM9isKDFwvW1tvUE+4Wr4S
yS78MaHfvk+s9QplHB7ew7tVR3f0p32AOdvuugI4PyuGZQD82aAJm2NC4uS4U/Ch
Qd5G2zhO7yT7TPjlVI9qC93U63P5VNbC4DZ9A6Brd/xemsfrkSHzcLVS6TUgNr+0
T/I4KDvU8bViLPTtcEQeE9Hj88b0bJUtCMlrlIeKWh03gd7zF55Ums2nBUhlmsRg
DLm2xVwT/4CQn6RxkhZtpt50ci6fD+ucxeKtXmIUU/E2+hwi3RE8Bdt2cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFbzXf5amtEWrOhDuDyr4ecJ0TJPMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvVnZOZF9scWEwUmFzNkVPNFBLdmg1d25STWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZdgAwQA
XolJMA0GCSqGSIb3DQEBCwUAA4IBAQCD7sLC6aQuzgOuVfsbteS2Fy2/OCGyGYZc
pjJfnTRQ1Rh/6e3OyHZu+J7tlifGC3dvllLwaL6ODJ9+RgFkm8B7hv42Cvs6C0Yb
rxgV2TUaAXCcoXiZJGX9OAFUbvDxC4m25wivBu1nMtE3n8bL4BANf41olYv7Cftr
07B5EgyzEwXT2G2D8RLO36Q1HzUAOaR+jBxSmml1h1suV2XynQS0B6ls9wVjI2RS
dm/DOBoIgS8uuCVob9jAMiYep77OoW3qMAeh/LgseBtvz6Rrv1Luxotw4kUKGH58
rgnlKAgJr6VE42I0jb9J/tYr5IwpeUeLl4rbhx/s4ISsY3hUe7Pl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org