Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/Wq3ClF9DWYn3dF0B1bdttHJFX_Y.roa
File: Wq3ClF9DWYn3dF0B1bdttHJFX_Y.roa (raw, json)
Hash identifier: G1YTBOUtWexQuDSGBBRUC+iYi7Vk3zpc685jt7uju9Y=
Subject key identifier: 5A:AD:C2:94:5F:43:59:89:F7:74:5D:01:D5:B7:6D:B4:72:45:5F:F6
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 01831D2C91D5E9284B62B7EDDADF0C87D334
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/Wq3ClF9DWYn3dF0B1bdttHJFX_Y.roa
Signing time: Thu 08 Sep 2022 12:56:43 +0000
ROA not before: Thu 08 Sep 2022 12:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60670
IP address blocks: 45.155.110.0/24 maxlen: 24
45.155.109.0/24 maxlen: 24
45.155.108.0/24 maxlen: 24
45.155.111.0/24 maxlen: 24
185.180.184.0/24 maxlen: 24
185.180.186.0/24 maxlen: 24
185.180.185.0/24 maxlen: 24
185.180.187.0/24 maxlen: 24
2a0a:ad80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:2c:91:d5:e9:28:4b:62:b7:ed:da:df:0c:87:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Sep 8 12:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aadc2945f435989f7745d01d5b76db472455ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:de:3f:be:30:37:c7:2a:88:f1:66:0d:48:
88:4d:c1:28:19:80:8e:c8:c6:57:ee:fc:56:f6:b5:
a3:ee:d3:c5:47:f0:bf:c0:64:b5:42:f9:be:12:72:
65:78:eb:0b:be:12:e0:f2:b5:4d:ed:33:41:33:1e:
7d:51:d6:97:58:fb:f3:ff:87:c9:a5:dc:f5:05:0c:
53:09:42:3c:36:97:98:16:f4:3d:8a:46:28:c0:29:
bc:84:77:1f:60:03:e8:1a:38:d4:ad:f0:f5:f9:c1:
32:52:83:a2:1b:1e:6c:63:2a:6c:6d:e6:db:5e:f9:
f9:a6:03:c8:76:c4:bd:f8:22:b4:08:fd:a5:9e:78:
93:65:c8:a9:e8:59:6f:f4:1d:60:e5:65:bf:1d:e2:
b2:f4:96:04:e5:66:81:be:a5:d4:08:5c:c3:57:e0:
2c:96:46:86:c6:ca:89:02:50:d6:b2:80:3f:58:d3:
b3:be:9b:b1:c9:89:f8:c6:c4:79:08:d8:c3:ce:7a:
2e:7f:73:0a:60:a1:ae:0e:64:0b:3c:0d:74:78:31:
06:61:a3:e2:e3:07:8e:01:84:8c:c3:7d:47:21:8c:
64:ec:4a:2f:da:bb:20:7b:ef:c1:16:62:a2:5e:1e:
af:8b:90:da:72:17:e4:6d:48:34:5c:23:88:b1:a3:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:C2:94:5F:43:59:89:F7:74:5D:01:D5:B7:6D:B4:72:45:5F:F6
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/Wq3ClF9DWYn3dF0B1bdttHJFX_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.108.0/22
185.180.184.0/22
IPv6:
2a0a:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
1a:32:37:c1:c3:04:d5:24:94:29:d7:6e:44:60:cd:18:38:dd:
63:4e:82:38:f9:98:8f:da:c8:de:c8:4e:d8:de:aa:0c:b4:20:
3a:4f:68:fc:57:fa:54:ee:da:55:71:60:8b:f8:2b:84:ff:de:
fd:c8:66:58:63:bb:03:fc:f5:c1:9a:0b:5e:84:98:1d:ea:ec:
0a:ac:be:ce:c2:ef:58:75:9d:8c:a2:17:a7:6f:42:0b:6b:22:
62:b1:5d:f0:d1:ae:04:55:56:7e:50:9f:4e:24:8b:0c:53:d0:
6a:0b:a6:8c:f0:ab:2f:c8:d0:e2:1a:2e:e6:6a:5a:48:d2:86:
af:7e:ec:8d:f8:e1:fe:43:4b:c1:1b:0e:84:d9:10:2f:1e:9b:
d2:57:4c:69:b3:92:69:15:20:50:3d:c0:9b:47:82:58:79:72:
97:19:20:ce:59:19:f8:12:fb:44:63:17:8b:93:93:26:08:36:
6e:85:c3:a0:b9:cb:6a:60:4d:c0:2b:96:c2:63:8b:90:45:9c:
c5:1d:e2:76:b2:bc:2f:33:b9:13:69:ff:a1:7f:c4:f2:f3:3e:
54:5f:75:32:a7:a8:33:82:62:de:a3:17:42:83:8a:73:d8:e6:
00:29:03:6c:59:5c:fa:ec:cc:73:7e:db:5b:e4:99:15:15:95:
10:ae:e9:70
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYMdLJHV6ShLYrft2t8Mh9M0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjIwOTA4MTI1NjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWFkYzI5NDVmNDM1OTg5Zjc3NDVkMDFkNWI3NmRiNDcyNDU1ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tneP74wN8cqiPFmDUiITcEoGYCO
yMZX7vxW9rWj7tPFR/C/wGS1Qvm+EnJleOsLvhLg8rVN7TNBMx59UdaXWPvz/4fJ
pdz1BQxTCUI8NpeYFvQ9ikYowCm8hHcfYAPoGjjUrfD1+cEyUoOiGx5sYypsbebb
Xvn5pgPIdsS9+CK0CP2lnniTZcip6Flv9B1g5WW/HeKy9JYE5WaBvqXUCFzDV+As
lkaGxsqJAlDWsoA/WNOzvpuxyYn4xsR5CNjDznouf3MKYKGuDmQLPA10eDEGYaPi
4weOAYSMw31HIYxk7Eov2rsge+/BFmKiXh6vi5DachfkbUg0XCOIsaM4MQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFqtwpRfQ1mJ93RdAdW3bbRyRV/2MB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEvV3EzQ2xGOURXWW4zZEYwQjFiZHR0SEpGWF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZtsAwQC
ubS4MA0EAgACMAcDBQMqCq2AMA0GCSqGSIb3DQEBCwUAA4IBAQAaMjfBwwTVJJQp
125EYM0YON1jToI4+ZiP2sjeyE7Y3qoMtCA6T2j8V/pU7tpVcWCL+CuE/979yGZY
Y7sD/PXBmgtehJgd6uwKrL7Owu9YdZ2Mohenb0ILayJisV3w0a4EVVZ+UJ9OJIsM
U9BqC6aM8KsvyNDiGi7malpI0oavfuyN+OH+Q0vBGw6E2RAvHpvSV0xps5JpFSBQ
PcCbR4JYeXKXGSDOWRn4EvtEYxeLk5MmCDZuhcOguctqYE3AK5bCY4uQRZzFHeJ2
srwvM7kTaf+hf8Ty8z5UX3Uyp6gzgmLeoxdCg4pz2OYAKQNsWVz67Mxzfttb5JkV
FZUQrulw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org