Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RpK1lu2eVHqMKayfI_Lj3AnRP_c.roa
File: RpK1lu2eVHqMKayfI_Lj3AnRP_c.roa (raw, json)
Hash identifier: BbGcLj5VCJ/PeFMmgirTzfz1dh2Ksroe97zBu6LUkgY=
Subject key identifier: 46:92:B5:96:ED:9E:54:7A:8C:29:AC:9F:23:F2:E3:DC:09:D1:3F:F7
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018267087302C7F4DAE78B1C06DF57B3F829
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RpK1lu2eVHqMKayfI_Lj3AnRP_c.roa
Signing time: Thu 04 Aug 2022 04:06:23 +0000
ROA not before: Thu 04 Aug 2022 04:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.140.247.0/24 maxlen: 24
81.199.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:08:73:02:c7:f4:da:e7:8b:1c:06:df:57:b3:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 4 04:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4692b596ed9e547a8c29ac9f23f2e3dc09d13ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:a3:16:fd:0d:5d:26:49:fc:d7:da:cb:f7:
3c:43:c5:cb:89:21:e0:07:89:67:21:7b:8d:1a:28:
35:5d:a6:11:30:ae:0c:7a:32:52:2c:69:63:93:10:
57:31:01:50:f3:21:16:79:06:77:93:b6:23:fe:07:
a0:ab:63:37:79:91:1c:05:21:d1:d3:56:8c:70:c8:
0d:98:85:30:ae:e0:c0:a6:18:f3:ae:5d:d5:41:f4:
42:cd:85:71:81:43:48:91:18:13:ee:eb:24:55:62:
12:07:0d:13:a2:53:cc:14:99:05:25:b0:c4:01:78:
82:96:9a:ce:cd:97:e3:4c:82:64:e1:f3:15:20:24:
23:80:3e:5c:cf:69:8c:84:34:62:3d:08:6d:fb:f5:
b8:e4:8a:1a:25:67:01:9d:cb:53:cc:ad:1b:75:67:
49:e7:23:80:19:f4:d8:38:56:a2:05:67:ae:55:37:
b1:a2:d9:ed:9e:e7:4b:b7:8e:06:d2:2f:2c:75:3a:
84:f8:d3:af:3f:98:1a:b4:f5:05:37:db:d0:13:38:
b5:8e:c6:a1:1b:e1:8d:58:fb:5f:7b:ac:95:81:19:
32:6a:8c:29:7f:68:dc:7b:43:d5:cf:b1:ff:be:a8:
3b:62:56:cf:45:c5:4d:ab:b8:76:3d:82:44:3a:de:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:B5:96:ED:9E:54:7A:8C:29:AC:9F:23:F2:E3:DC:09:D1:3F:F7
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RpK1lu2eVHqMKayfI_Lj3AnRP_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
81.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:87:53:91:09:1a:98:86:b7:62:32:74:7f:8a:eb:8a:52:e3:
8a:36:10:f9:79:a3:de:5e:cc:54:b3:62:32:7e:d2:19:59:33:
03:36:5f:95:5f:43:c4:d6:bb:61:be:5b:f7:00:4b:e6:3b:e1:
cd:91:10:e4:d3:97:5f:13:be:46:de:f1:e0:03:0b:b5:ea:2e:
8f:a1:65:fb:ea:99:56:31:af:a7:71:fe:28:9b:e7:6e:0b:66:
6d:54:7a:6b:8b:91:9d:1c:68:ae:21:56:32:4c:61:1b:34:02:
8f:99:a6:4b:16:62:ff:06:13:81:a3:2a:9e:10:14:ef:d6:7b:
54:4e:fb:ab:1f:0c:01:90:80:43:00:5f:8d:fe:30:68:bb:1b:
49:51:70:a6:f3:d4:ee:f1:a5:75:22:58:9b:29:40:fe:ec:03:
57:be:cf:2d:6d:3b:4a:e0:85:8e:ab:7e:13:e6:f4:00:cc:96:
89:24:a3:ae:7a:5d:08:c8:8b:04:80:a3:3e:4b:be:78:18:61:
c2:d3:69:e2:71:6a:18:37:96:27:a1:d0:63:30:d2:07:54:5a:
e3:ed:a9:56:72:37:db:c1:e3:eb:71:9a:61:48:85:0e:47:cc:
1d:9f:9c:4b:05:42:3e:0e:2e:1f:f8:4d:6f:31:52:bd:b4:02:
96:1b:ab:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJnCHMCx/Ta54scBt9Xs/gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjIwODA0MDQwNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjkyYjU5NmVkOWU1NDdhOGMyOWFjOWYyM2YyZTNkYzA5ZDEzZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5SjFv0NXSZJ/Nfay/c8Q8XLiSHg
B4lnIXuNGig1XaYRMK4MejJSLGljkxBXMQFQ8yEWeQZ3k7Yj/gegq2M3eZEcBSHR
01aMcMgNmIUwruDAphjzrl3VQfRCzYVxgUNIkRgT7uskVWISBw0TolPMFJkFJbDE
AXiClprOzZfjTIJk4fMVICQjgD5cz2mMhDRiPQht+/W45IoaJWcBnctTzK0bdWdJ
5yOAGfTYOFaiBWeuVTexotntnudLt44G0i8sdTqE+NOvP5gatPUFN9vQEzi1jsah
G+GNWPtfe6yVgRkyaowpf2jce0PVz7H/vqg7YlbPRcVNq7h2PYJEOt4YDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEaStZbtnlR6jCmsnyPy49wJ0T/3MB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvUnBLMWx1MmVWSHFNS2F5ZklfTGozQW5SUF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYz3AwQA
UccfMA0GCSqGSIb3DQEBCwUAA4IBAQAOh1ORCRqYhrdiMnR/iuuKUuOKNhD5eaPe
XsxUs2IyftIZWTMDNl+VX0PE1rthvlv3AEvmO+HNkRDk05dfE75G3vHgAwu16i6P
oWX76plWMa+ncf4om+duC2ZtVHpri5GdHGiuIVYyTGEbNAKPmaZLFmL/BhOBoyqe
EBTv1ntUTvurHwwBkIBDAF+N/jBouxtJUXCm89Tu8aV1IlibKUD+7ANXvs8tbTtK
4IWOq34T5vQAzJaJJKOuel0IyIsEgKM+S754GGHC02nicWoYN5YnodBjMNIHVFrj
7alWcjfbwePrcZphSIUOR8wdn5xLBUI+Di4f+E1vMVK9tAKWG6sj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org