Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zKtpnVbtGZZJtrNcGUeyGzx6tgo.roa
File: zKtpnVbtGZZJtrNcGUeyGzx6tgo.roa (raw, json)
Hash identifier: ojJuMIC50HM4VFnCBZ+qQHf/OF1HfGKrlMCYKOGoJMA=
Subject key identifier: CC:AB:69:9D:56:ED:19:96:49:B6:B3:5C:19:47:B2:1B:3C:7A:B6:0A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0189F8491C193DBBFCB01948DDE77034A960
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zKtpnVbtGZZJtrNcGUeyGzx6tgo.roa
Signing time: Tue 15 Aug 2023 08:21:28 +0000
ROA not before: Tue 15 Aug 2023 08:21:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47154
IP address blocks: 45.155.91.0/24 maxlen: 24
185.243.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:49:1c:19:3d:bb:fc:b0:19:48:dd:e7:70:34:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 15 08:21:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccab699d56ed199649b6b35c1947b21b3c7ab60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:e7:b1:7d:1c:42:53:30:e2:91:a3:9e:19:
08:a1:67:bf:09:50:d4:dd:72:a2:8d:61:37:f1:75:
bb:d7:51:d8:35:0d:d1:0b:bb:4e:fd:9e:3e:45:14:
98:ef:22:b8:91:a4:60:4a:b2:5c:f8:ee:a3:cd:35:
77:9a:c1:d4:51:0e:da:61:f4:ec:88:4d:51:34:f1:
5d:7c:e5:68:fb:19:65:b9:c9:61:27:24:e3:89:64:
89:a1:1b:cc:2b:16:92:a1:bd:76:85:53:4c:1b:fb:
ab:ef:45:a7:c5:c5:cf:ba:97:10:8a:a2:87:35:d6:
e8:b0:44:37:d0:75:e4:da:be:ad:89:d3:95:c1:98:
b5:8f:36:21:05:9a:ec:86:22:a8:8e:4c:25:08:df:
ad:04:5f:f9:cd:90:da:a3:7f:fb:b3:9b:6d:49:38:
37:02:53:1a:d0:0b:83:43:d1:0c:2f:f9:1e:5b:24:
7c:6d:21:12:15:a1:fc:7b:06:ae:ee:a0:a5:64:38:
c7:e3:0a:94:c4:82:53:02:a0:af:6a:cc:7f:df:0a:
4a:77:d0:89:87:d5:be:6b:dd:98:a3:96:05:0f:49:
67:aa:e0:01:a3:52:30:bd:b9:02:f3:fe:e0:cc:a8:
27:26:d9:8a:e7:c0:9d:12:64:b1:52:e9:d5:2b:8e:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:69:9D:56:ED:19:96:49:B6:B3:5C:19:47:B2:1B:3C:7A:B6:0A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zKtpnVbtGZZJtrNcGUeyGzx6tgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
185.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3e:af:8f:9c:bc:57:d4:73:41:fd:80:dc:23:8d:5e:f1:05:
bd:ae:9b:61:4b:c4:7a:3d:26:3f:4e:e8:29:bc:7f:d0:b1:0b:
8d:11:e5:05:7e:ba:91:ef:9c:3b:4c:5a:67:85:b9:b7:e4:fe:
7c:c6:12:d9:f8:b1:05:b0:7d:c3:72:0d:a8:8b:b6:5f:13:2e:
5b:8a:31:ea:94:0b:36:68:de:dd:8f:7e:ea:22:d6:64:71:32:
23:68:d7:30:7b:1b:85:13:a8:40:ad:29:f2:15:9f:13:a5:e0:
e9:f6:c2:92:e4:a8:b5:68:cb:bb:fc:ed:98:ae:e7:8b:65:06:
a3:ea:91:2f:60:86:24:e8:9c:58:6b:f0:dd:c2:ee:43:f7:45:
9f:fe:d1:36:a6:cb:7c:79:5e:c0:de:90:8b:21:b1:7e:ac:30:
68:aa:e6:d4:58:58:e6:cd:07:21:68:ff:a1:5f:b7:02:c8:7f:
5b:5b:d0:99:90:f0:46:5d:41:e0:97:f1:2c:61:c3:f1:50:60:
44:79:a6:0e:a3:a5:10:f3:8d:f9:c4:24:5a:84:7a:e4:a2:b7:
35:bb:b5:f5:c6:a2:92:ce:b8:85:44:b9:29:45:a3:c7:29:e7:
4f:c4:b1:1d:d5:9a:19:c3:42:6a:39:a8:42:23:69:c7:c5:0f:
f2:5c:87:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYn4SRwZPbv8sBlI3edwNKlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwODE1MDgyMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FiNjk5ZDU2ZWQxOTk2NDliNmIzNWMxOTQ3YjIxYjNjN2FiNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHznsX0cQlMw4pGjnhkIoWe/CVDU
3XKijWE38XW711HYNQ3RC7tO/Z4+RRSY7yK4kaRgSrJc+O6jzTV3msHUUQ7aYfTs
iE1RNPFdfOVo+xlluclhJyTjiWSJoRvMKxaSob12hVNMG/ur70WnxcXPupcQiqKH
NdbosEQ30HXk2r6tidOVwZi1jzYhBZrshiKojkwlCN+tBF/5zZDao3/7s5ttSTg3
AlMa0AuDQ9EML/keWyR8bSESFaH8ewau7qClZDjH4wqUxIJTAqCvasx/3wpKd9CJ
h9W+a92Yo5YFD0lnquABo1IwvbkC8/7gzKgnJtmK58CdEmSxUunVK4676wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMyraZ1W7RmWSbazXBlHshs8erYKMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvekt0cG5WYnRHWlpKdHJOY0dVZXlHeng2dGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZtbAwQA
ufMFMA0GCSqGSIb3DQEBCwUAA4IBAQCPPq+PnLxX1HNB/YDcI41e8QW9rpthS8R6
PSY/TugpvH/QsQuNEeUFfrqR75w7TFpnhbm35P58xhLZ+LEFsH3Dcg2oi7ZfEy5b
ijHqlAs2aN7dj37qItZkcTIjaNcwexuFE6hArSnyFZ8TpeDp9sKS5Ki1aMu7/O2Y
rueLZQaj6pEvYIYk6JxYa/Ddwu5D90Wf/tE2pst8eV7A3pCLIbF+rDBoqubUWFjm
zQchaP+hX7cCyH9bW9CZkPBGXUHgl/EsYcPxUGBEeaYOo6UQ8435xCRahHrkorc1
u7X1xqKSzriFRLkpRaPHKedPxLEd1ZoZw0JqOahCI2nHxQ/yXIcz
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:06 2025 by rpki-client