Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/lBFB8B91G5-TIXZPPXyMeF4S29U.roa
File: lBFB8B91G5-TIXZPPXyMeF4S29U.roa (raw, json)
Hash identifier: Ys65hditvbCw1K+zQd15PX754ObRbmqVNtY5rGVHa2Q=
Subject key identifier: 94:11:41:F0:1F:75:1B:9F:93:21:76:4F:3D:7C:8C:78:5E:12:DB:D5
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 0604A778
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/lBFB8B91G5-TIXZPPXyMeF4S29U.roa
Signing time: Mon 14 Mar 2022 09:12:41 +0000
ROA not before: Mon 14 Mar 2022 09:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 194.99.58.0/23 maxlen: 23
45.150.96.0/22 maxlen: 22
45.137.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100968312 (0x604a778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Mar 14 09:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=941141f01f751b9f9321764f3d7c8c785e12dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:2b:ec:8f:d9:f6:ea:38:2b:c2:91:8d:f5:
ce:6e:f6:f3:d2:95:e3:32:2c:cd:a0:39:93:7b:21:
13:aa:93:a8:b4:0b:4d:16:2b:21:5b:45:ab:1b:69:
19:e3:34:cf:ca:88:86:80:94:12:34:77:61:f9:45:
f0:6b:c3:fd:94:4f:4e:82:3e:d9:d0:a8:18:5e:58:
4d:d0:56:80:60:1d:67:2e:c0:b4:d7:f5:09:2b:e6:
1c:26:a9:1a:47:66:9b:82:9e:5e:e7:cf:c4:7d:b0:
a9:f7:80:6c:dc:5b:27:19:1f:ed:97:b2:06:35:34:
2b:2c:bf:f4:2c:a0:62:a9:94:62:89:9d:18:f3:67:
98:87:f9:7a:8e:bc:15:e6:ea:b1:0f:d8:3a:2b:42:
9b:c3:df:6c:44:4d:e4:80:f0:81:94:0d:9b:8a:3a:
f4:96:b3:9c:ad:3a:be:73:df:f0:21:83:ec:8e:6b:
e3:7c:49:4c:68:62:5e:37:d2:ef:22:90:0a:e5:16:
b6:fc:91:4d:1a:0d:a1:e3:d0:66:05:06:0f:3f:3d:
c5:ac:9c:d4:65:3c:6b:54:d7:9d:cf:ba:a7:6a:d6:
8a:01:3e:c0:41:76:22:f6:6f:ed:68:a4:1d:8b:53:
d7:d1:ab:22:05:fe:82:a7:27:7d:df:2e:85:07:b0:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:41:F0:1F:75:1B:9F:93:21:76:4F:3D:7C:8C:78:5E:12:DB:D5
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/lBFB8B91G5-TIXZPPXyMeF4S29U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.4.0/22
45.150.96.0/22
194.99.58.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:1f:ab:da:51:80:59:7f:dd:50:89:bf:99:a3:d2:d0:b9:5e:
b4:3f:7f:08:53:eb:59:4a:ac:ff:7e:17:77:94:35:e8:a7:88:
f4:c0:72:d8:6e:0d:0d:3f:75:45:8a:7f:85:c6:e9:e8:d7:fe:
a6:53:46:99:0e:c7:3a:fb:af:ce:c5:da:dc:06:a8:39:82:b9:
04:b2:c2:06:d1:1d:ec:fb:38:12:2c:43:c1:d5:1d:a1:a9:9a:
29:8e:cc:ce:19:5e:e2:49:4f:6e:1c:5a:23:56:2b:13:85:6f:
b1:58:04:1e:0b:94:57:f9:7e:ab:8d:f6:fe:18:02:42:bb:0a:
61:ae:c0:66:c6:90:b3:34:93:a1:37:5b:83:b4:d4:2e:12:18:
7a:69:6f:07:95:9d:12:c6:3a:5b:3c:90:64:6c:7c:b4:1e:f9:
72:75:23:c4:f6:3b:a6:4c:d2:dd:bd:f7:e3:9f:79:b6:85:f8:
60:4a:d8:c5:2a:c4:19:df:11:84:8c:91:9a:d1:b5:81:8c:70:
a0:2b:5e:a6:cb:3e:a1:a7:b3:af:d5:09:09:cb:a2:46:84:ba:
02:dc:2f:a0:82:c3:84:12:8a:e7:95:a5:87:7c:44:50:56:2c:
be:79:10:58:70:4b:26:8b:bd:61:10:e9:be:84:40:ba:55:4f:
88:67:38:5d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBgSneDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODY0YmIzNGZiNWQxNmNhOWQxZmEzZjk3OTRjYjQ4ZDRiZWQ4NDczMB4XDTIyMDMx
NDA5MTI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQxMTQxZjAxZjc1
MWI5ZjkzMjE3NjRmM2Q3YzhjNzg1ZTEyZGJkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLKK+yP2fbqOCvCkY31zm7289KV4zIszaA5k3shE6qTqLQL
TRYrIVtFqxtpGeM0z8qIhoCUEjR3YflF8GvD/ZRPToI+2dCoGF5YTdBWgGAdZy7A
tNf1CSvmHCapGkdmm4KeXufPxH2wqfeAbNxbJxkf7ZeyBjU0Kyy/9CygYqmUYomd
GPNnmIf5eo68FebqsQ/YOitCm8PfbERN5IDwgZQNm4o69JaznK06vnPf8CGD7I5r
43xJTGhiXjfS7yKQCuUWtvyRTRoNoePQZgUGDz89xayc1GU8a1TXnc+6p2rWigE+
wEF2IvZv7WikHYtT19GrIgX+gqcnfd8uhQewvisCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSUEUHwH3Ubn5Mhdk89fIx4XhLb1TAfBgNVHSMEGDAWgBQoZLs0+10Wyp0f
o/l5TLSNS+2EczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tHUzdOUHRkRnNxZEg2UDVlVXkwalV2dGhITS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvNDdmNDQ1LTVlYTktNDM3ZC1hNTlhLTU5MDBhNTk0N2I4ZC8x
L2xCRkI4QjkxRzUtVElYWlBQWHlNZUY0UzI5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
NDdmNDQ1LTVlYTktNDM3ZC1hNTlhLTU5MDBhNTk0N2I4ZC8xL0tHUzdOUHRkRnNx
ZEg2UDVlVXkwalV2dGhITS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi2JBAMEAi2WYAMEAcJjOjANBgkq
hkiG9w0BAQsFAAOCAQEAKx+r2lGAWX/dUIm/maPS0LletD9/CFPrWUqs/34Xd5Q1
6KeI9MBy2G4NDT91RYp/hcbp6Nf+plNGmQ7HOvuvzsXa3AaoOYK5BLLCBtEd7Ps4
EixDwdUdoamaKY7Mzhle4klPbhxaI1YrE4VvsVgEHguUV/l+q432/hgCQrsKYa7A
ZsaQszSToTdbg7TULhIYemlvB5WdEsY6WzyQZGx8tB75cnUjxPY7pkzS3b334595
toX4YErYxSrEGd8RhIyRmtG1gYxwoCtepss+oaezr9UJCcuiRoS6AtwvoILDhBKK
55Wlh3xEUFYsvnkQWHBLJou9YRDpvoRAulVPiGc4XQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-fra.rpki-client.org