Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/inkZvwv04lo4Dp5G8kUWg266GwA.roa
File: inkZvwv04lo4Dp5G8kUWg266GwA.roa (raw, json)
Hash identifier: s0D+Rs7bLxz3Am/mbhhsOa6/dzGYygExoGE5bQmBvgk=
Subject key identifier: 8A:79:19:BF:0B:F4:E2:5A:38:0E:9E:46:F2:45:16:83:6E:BA:1B:00
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018C493BBC38A080B3600ECC1549C0C85AF4
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/inkZvwv04lo4Dp5G8kUWg266GwA.roa
Signing time: Fri 08 Dec 2023 11:41:40 +0000
ROA not before: Fri 08 Dec 2023 11:41:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
45.87.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:3b:bc:38:a0:80:b3:60:0e:cc:15:49:c0:c8:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 8 11:41:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a7919bf0bf4e25a380e9e46f24516836eba1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:2d:46:8d:c8:19:19:cc:92:26:54:86:15:
38:6b:e8:be:5e:32:d1:08:83:a9:61:a1:5c:83:a1:
1b:19:27:c8:ea:7b:4f:f9:d9:b7:a1:cf:7d:d1:5c:
0c:49:48:88:35:17:c0:9b:a4:bb:95:a8:d3:5d:d4:
16:dd:49:93:72:3e:a9:b4:20:41:01:32:f6:b3:9e:
a9:0e:68:78:21:27:05:30:ed:4b:9f:81:23:19:d3:
43:e5:13:17:ad:a1:12:1f:c2:27:21:3e:ed:be:fa:
95:df:c2:e9:84:ab:3c:5a:d2:02:68:92:0e:ea:5f:
96:f6:6d:5c:cb:01:c0:b0:7a:1f:0b:82:34:90:51:
55:71:53:69:dd:7c:e4:a8:94:fb:b7:5d:af:3a:f6:
2a:e6:ae:8c:18:31:1f:61:f7:c1:ba:35:75:20:63:
fa:db:99:46:35:81:3d:76:69:41:0f:41:1b:76:ad:
a4:5a:4a:f4:ba:65:38:a9:40:96:db:ff:e3:39:67:
4f:b2:c9:41:dc:be:a8:ca:b9:e6:1a:cc:18:56:13:
a8:92:0d:ef:fb:f5:aa:fd:ff:ae:d7:1b:45:8c:cb:
f0:3f:92:85:05:d5:51:bd:37:cc:ac:71:0e:77:47:
c9:98:82:33:8c:45:fb:83:f0:18:03:36:c6:b8:c3:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:19:BF:0B:F4:E2:5A:38:0E:9E:46:F2:45:16:83:6E:BA:1B:00
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/inkZvwv04lo4Dp5G8kUWg266GwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/24
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
07:71:2a:69:b5:9b:b6:d5:ba:cf:4a:21:85:dc:b4:13:61:f3:
d2:8f:bf:bf:02:31:ba:5f:b6:4b:f7:6a:89:36:8d:96:86:c9:
85:f0:5c:f0:51:49:0c:44:50:51:50:ee:dd:e9:5c:66:00:04:
4e:95:da:bb:cd:3e:d6:4f:ea:94:e7:44:90:54:db:14:27:1d:
9c:5b:a5:07:9d:75:6d:e5:1a:07:bb:16:b7:7e:fd:55:54:48:
9d:e2:c1:ef:3d:bf:2f:41:a2:a2:c8:b5:44:4c:8a:49:3b:c2:
c6:4e:76:cd:3e:2c:da:f3:d4:d7:8c:a9:1c:ce:d4:83:ac:42:
7d:2c:6e:db:2c:44:8a:1f:32:7b:24:87:c0:b6:23:1f:a3:ab:
37:48:77:ba:e0:be:f1:cc:5f:b7:77:48:e0:95:4a:57:64:90:
01:75:bc:b2:e6:62:a5:f0:d8:a4:46:f0:a1:73:0b:00:48:73:
b6:23:e5:d5:e4:84:d3:67:38:b0:54:3d:e0:de:d0:e4:dc:42:
89:b1:d5:00:28:36:10:72:4c:df:0f:7d:bf:ac:7c:e5:c1:48:
79:3a:dc:e3:d7:db:68:4a:b1:38:9d:a7:61:95:6a:35:1c:66:
c6:24:ee:22:d9:36:40:3f:e9:2d:c7:8c:85:7e:c0:ed:f2:2a:
e2:b7:3f:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxJO7w4oICzYA7MFUnAyFr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjMxMjA4MTE0MTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTc5MTliZjBiZjRlMjVhMzgwZTllNDZmMjQ1MTY4MzZlYmExYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNAtRo3IGRnMkiZUhhU4a+i+XjLR
CIOpYaFcg6EbGSfI6ntP+dm3oc990VwMSUiINRfAm6S7lajTXdQW3UmTcj6ptCBB
ATL2s56pDmh4IScFMO1Ln4EjGdND5RMXraESH8InIT7tvvqV38LphKs8WtICaJIO
6l+W9m1cywHAsHofC4I0kFFVcVNp3XzkqJT7t12vOvYq5q6MGDEfYffBujV1IGP6
25lGNYE9dmlBD0Ebdq2kWkr0umU4qUCW2//jOWdPsslB3L6oyrnmGswYVhOokg3v
+/Wq/f+u1xtFjMvwP5KFBdVRvTfMrHEOd0fJmIIzjEX7g/AYAzbGuMNp+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIp5Gb8L9OJaOA6eRvJFFoNuuhsAMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvaW5rWnZ3djA0bG80RHA1RzhrVVdnMjY2R3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVegAwQB
LVeiMA0GCSqGSIb3DQEBCwUAA4IBAQAHcSpptZu21brPSiGF3LQTYfPSj7+/AjG6
X7ZL92qJNo2WhsmF8FzwUUkMRFBRUO7d6VxmAAROldq7zT7WT+qU50SQVNsUJx2c
W6UHnXVt5RoHuxa3fv1VVEid4sHvPb8vQaKiyLVETIpJO8LGTnbNPiza89TXjKkc
ztSDrEJ9LG7bLESKHzJ7JIfAtiMfo6s3SHe64L7xzF+3d0jglUpXZJABdbyy5mKl
8NikRvChcwsASHO2I+XV5ITTZziwVD3g3tDk3EKJsdUAKDYQckzfD32/rHzlwUh5
Otzj19toSrE4nadhlWo1HGbGJO4i2TZAP+ktx4yFfsDt8iritz/u
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:17 2025 by rpki-client