Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L03qEryYMEs5IRkKARjbeT7S2Ys.roa
File: L03qEryYMEs5IRkKARjbeT7S2Ys.roa (raw, json)
Hash identifier: dc6wMOwFE2vULx6xXdnGY07xByHzqcrrEGc/ovWZ1HI=
Subject key identifier: 2F:4D:EA:12:BC:98:30:4B:39:21:19:0A:01:18:DB:79:3E:D2:D9:8B
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01830E27D633FEAE4839B69200F5F1E84A86
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L03qEryYMEs5IRkKARjbeT7S2Ys.roa
Signing time: Mon 05 Sep 2022 14:57:15 +0000
ROA not before: Mon 05 Sep 2022 14:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:27:d6:33:fe:ae:48:39:b6:92:00:f5:f1:e8:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Sep 5 14:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f4dea12bc98304b3921190a0118db793ed2d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1f:a6:c8:88:30:ce:3c:61:3c:7e:89:79:53:
56:70:2d:a4:a8:73:8c:dc:fa:5e:0a:67:28:a4:ab:
7e:f6:07:b5:29:72:38:d5:ab:36:eb:38:83:7a:c9:
65:8b:86:1b:38:7e:5e:58:34:b7:4d:be:b0:cc:22:
11:9d:09:ad:5e:9d:7b:94:05:ff:ef:84:2c:9d:55:
d0:6d:42:9a:3f:4a:ed:41:40:f5:72:43:06:7a:c8:
e1:c3:e6:6f:9f:6d:54:48:6e:2d:41:75:58:da:48:
5a:e1:19:6d:bc:f8:cb:a8:19:59:18:c3:e5:a7:f2:
b1:23:f5:5a:80:0f:28:ab:c3:94:5a:35:64:4c:df:
57:cc:30:10:f5:34:a6:b2:7b:6c:df:8b:36:ea:33:
04:d6:01:5f:07:56:e1:d8:1c:2e:20:1e:55:a3:08:
ac:ed:18:ca:53:81:7e:e2:e3:3e:2d:b2:63:d1:80:
37:49:58:ee:78:41:9d:70:8f:52:50:15:07:a3:60:
9b:61:1c:7a:24:69:af:a2:80:2a:31:5c:32:08:83:
e5:70:0a:5f:b5:cf:0c:67:23:ff:e9:70:b8:f7:30:
71:20:e0:f3:84:1a:cc:38:8d:c8:94:d8:5c:a7:b1:
97:b0:3b:dc:ed:41:32:e3:86:cd:f5:81:82:f4:0c:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:EA:12:BC:98:30:4B:39:21:19:0A:01:18:DB:79:3E:D2:D9:8B
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L03qEryYMEs5IRkKARjbeT7S2Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:58:9c:fe:77:85:c2:f8:60:bd:3f:14:f8:d1:a9:bf:3e:34:
91:20:a2:51:ad:fb:46:59:39:5a:9b:85:3f:a0:08:95:a2:8d:
99:20:5e:4a:b2:12:dd:2a:55:60:48:4d:18:71:af:13:1e:4a:
83:8d:73:44:25:04:37:c5:53:8f:30:17:a7:38:59:a1:4e:1f:
eb:a7:0f:ff:db:c7:46:5d:b5:b7:f7:05:34:6b:70:ec:51:cd:
83:44:0d:03:5a:f3:da:a1:6c:ad:0b:9f:df:3c:c7:0d:eb:23:
dd:0d:5a:0c:ac:3f:f5:05:b4:05:0b:14:d4:57:ca:87:17:da:
34:fd:96:17:0d:6d:fb:8a:11:c2:f4:b3:b4:75:56:dc:e7:14:
52:34:cf:88:b5:3c:40:1e:f4:28:35:98:2d:6f:c2:8c:ff:59:
bd:a7:15:2c:3f:10:33:ea:f1:41:2a:78:e2:ae:bc:09:c5:f1:
a4:0b:30:07:be:fb:b5:aa:38:67:2b:aa:4e:fd:8d:5a:b1:c6:
90:83:0f:cc:56:9e:7d:36:23:24:b3:55:a6:0d:e6:d8:55:0a:
56:f5:49:70:b1:65:66:bc:70:84:3e:28:2a:77:43:07:19:c2:
9e:a0:0f:82:ff:28:18:13:f4:d2:3e:9c:6a:9f:fc:41:ea:f2:
12:96:60:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMOJ9Yz/q5IObaSAPXx6EqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjIwOTA1MTQ1NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjRkZWExMmJjOTgzMDRiMzkyMTE5MGEwMTE4ZGI3OTNlZDJkOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR+myIgwzjxhPH6JeVNWcC2kqHOM
3PpeCmcopKt+9ge1KXI41as26ziDeslli4YbOH5eWDS3Tb6wzCIRnQmtXp17lAX/
74QsnVXQbUKaP0rtQUD1ckMGesjhw+Zvn21USG4tQXVY2kha4RltvPjLqBlZGMPl
p/KxI/VagA8oq8OUWjVkTN9XzDAQ9TSmsnts34s26jME1gFfB1bh2BwuIB5Vowis
7RjKU4F+4uM+LbJj0YA3SVjueEGdcI9SUBUHo2CbYRx6JGmvooAqMVwyCIPlcApf
tc8MZyP/6XC49zBxIODzhBrMOI3IlNhcp7GXsDvc7UEy44bN9YGC9AyCvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9N6hK8mDBLOSEZCgEY23k+0tmLMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvTDAzcUVyeVlNRXM1SVJrS0FSamJlVDdTMllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYz1MA0G
CSqGSIb3DQEBCwUAA4IBAQDQWJz+d4XC+GC9PxT40am/PjSRIKJRrftGWTlam4U/
oAiVoo2ZIF5KshLdKlVgSE0Yca8THkqDjXNEJQQ3xVOPMBenOFmhTh/rpw//28dG
XbW39wU0a3DsUc2DRA0DWvPaoWytC5/fPMcN6yPdDVoMrD/1BbQFCxTUV8qHF9o0
/ZYXDW37ihHC9LO0dVbc5xRSNM+ItTxAHvQoNZgtb8KM/1m9pxUsPxAz6vFBKnji
rrwJxfGkCzAHvvu1qjhnK6pO/Y1ascaQgw/MVp59NiMks1WmDebYVQpW9UlwsWVm
vHCEPigqd0MHGcKeoA+C/ygYE/TSPpxqn/xB6vISlmDa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org