Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YjKAjbQx4qeo4vsqEnIRgeZtqF4.roa
File: YjKAjbQx4qeo4vsqEnIRgeZtqF4.roa (raw, json)
Hash identifier: EOTMCJpzLGs50SL2/10jJpYmt+WCyqV+ehFGWtOyqC0=
Subject key identifier: 62:32:80:8D:B4:31:E2:A7:A8:E2:FB:2A:12:72:11:81:E6:6D:A8:5E
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018249FE5DBA53C6C2BFD7F51A3A79ACEEA8
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YjKAjbQx4qeo4vsqEnIRgeZtqF4.roa
Signing time: Fri 29 Jul 2022 12:46:23 +0000
ROA not before: Fri 29 Jul 2022 12:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61424
IP address blocks: 45.89.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:fe:5d:ba:53:c6:c2:bf:d7:f5:1a:3a:79:ac:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 29 12:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6232808db431e2a7a8e2fb2a12721181e66da85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:d0:45:d5:5d:3c:e4:4b:50:bd:48:99:d4:
f0:65:0a:e9:29:79:80:f0:c9:d7:76:0b:2f:14:39:
13:fb:93:89:4a:e3:1d:ce:5a:06:f8:56:16:84:09:
ba:5c:55:46:4e:12:da:61:d0:3a:b8:ca:c6:48:a8:
32:ef:bf:45:e5:74:64:73:01:d6:72:42:ea:b4:98:
f1:09:d8:82:3f:bd:ce:b5:58:ed:70:20:1f:eb:64:
c2:9f:cf:8e:86:1b:8f:2b:6e:a4:ba:ef:0a:f1:d4:
02:21:e8:8f:e8:e2:3d:cd:a2:8e:90:6e:ce:00:98:
a3:31:8d:ac:b4:a1:80:4b:79:da:0b:50:55:2c:ab:
09:4a:8d:08:5b:91:08:24:33:56:c3:bc:1b:d7:e3:
42:34:d0:d0:0f:22:5d:e3:e0:a0:76:0a:36:ec:5c:
3b:8d:e0:a8:d3:65:59:71:6d:e1:5a:6d:a6:8e:24:
48:1a:47:74:c4:fa:c6:29:08:3d:c6:8c:5e:93:b1:
73:09:ef:06:a4:b6:4c:73:54:0e:e1:a5:1f:8f:f9:
fb:93:d4:26:73:23:73:fc:d2:2a:50:35:4c:af:cb:
31:03:13:73:60:c3:b0:7b:6e:d6:6a:9f:27:3a:98:
d9:da:1a:ff:c4:c0:31:2a:ad:5f:d2:ab:08:00:ea:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:32:80:8D:B4:31:E2:A7:A8:E2:FB:2A:12:72:11:81:E6:6D:A8:5E
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YjKAjbQx4qeo4vsqEnIRgeZtqF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.54.0/24
Signature Algorithm: sha256WithRSAEncryption
71:75:23:21:fb:7c:7b:ca:dd:51:f4:44:3f:21:d3:a0:99:1d:
a5:44:96:4b:37:58:82:52:79:b1:0d:38:09:52:46:6a:b8:50:
eb:71:9f:8a:dc:ad:15:12:b1:8e:dc:0a:e5:33:0e:36:fc:be:
7d:f3:30:a8:e6:5c:a7:27:c1:54:ce:a6:e8:2a:29:52:b3:e8:
2a:9d:08:4f:75:93:23:96:ff:6b:08:8d:21:6d:41:e2:5d:d8:
f8:9f:3c:e9:f4:66:37:ca:48:7b:eb:e5:b3:49:65:a1:46:df:
b6:3c:08:e5:31:58:c2:9b:1c:fa:f0:8f:d6:dd:36:30:42:2d:
70:d8:be:00:0b:2f:4a:54:cc:47:41:62:43:75:8e:34:16:52:
89:5e:17:66:80:02:08:34:f6:93:be:39:d6:aa:2e:c8:6f:32:
b9:9b:3a:f3:f9:03:7a:93:4f:1f:58:41:2c:34:53:24:fd:cd:
b0:4b:8f:6d:6b:ba:84:a5:a1:c8:a7:3a:71:f1:07:bc:d3:1d:
d9:9f:12:09:e6:23:c5:29:85:b9:47:46:71:03:18:15:91:ea:
4a:7e:3d:c6:20:1b:40:d2:c4:4f:5c:d1:de:c4:3c:ca:12:15:
13:52:9e:7c:a0:e1:54:92:90:b4:d9:87:f4:e5:89:2b:47:9e:
7d:dd:e2:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJJ/l26U8bCv9f1Gjp5rO6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjIwNzI5MTI0NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjMyODA4ZGI0MzFlMmE3YThlMmZiMmExMjcyMTE4MWU2NmRhODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTvQRdVdPORLUL1ImdTwZQrpKXmA
8MnXdgsvFDkT+5OJSuMdzloG+FYWhAm6XFVGThLaYdA6uMrGSKgy779F5XRkcwHW
ckLqtJjxCdiCP73OtVjtcCAf62TCn8+OhhuPK26kuu8K8dQCIeiP6OI9zaKOkG7O
AJijMY2stKGAS3naC1BVLKsJSo0IW5EIJDNWw7wb1+NCNNDQDyJd4+Cgdgo27Fw7
jeCo02VZcW3hWm2mjiRIGkd0xPrGKQg9xoxek7FzCe8GpLZMc1QO4aUfj/n7k9Qm
cyNz/NIqUDVMr8sxAxNzYMOwe27Wap8nOpjZ2hr/xMAxKq1f0qsIAOrk4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIygI20MeKnqOL7KhJyEYHmbaheMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvWWpLQWpiUXg0cWVvNHZzcUVuSVJnZVp0cUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVk2MA0G
CSqGSIb3DQEBCwUAA4IBAQBxdSMh+3x7yt1R9EQ/IdOgmR2lRJZLN1iCUnmxDTgJ
UkZquFDrcZ+K3K0VErGO3ArlMw42/L598zCo5lynJ8FUzqboKilSs+gqnQhPdZMj
lv9rCI0hbUHiXdj4nzzp9GY3ykh76+WzSWWhRt+2PAjlMVjCmxz68I/W3TYwQi1w
2L4ACy9KVMxHQWJDdY40FlKJXhdmgAIINPaTvjnWqi7IbzK5mzrz+QN6k08fWEEs
NFMk/c2wS49ta7qEpaHIpzpx8Qe80x3ZnxIJ5iPFKYW5R0ZxAxgVkepKfj3GIBtA
0sRPXNHexDzKEhUTUp58oOFUkpC02Yf05YkrR5593eKJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org