Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1lYc_PZGass07WiRfnH8QMVgxVk.roa
File: 1lYc_PZGass07WiRfnH8QMVgxVk.roa (raw, json)
Hash identifier: GyvVs+nJGkNN4Ny6xkiL+d0yZKO3kNgLcTH27ZPLbhc=
Subject key identifier: D6:56:1C:FC:F6:46:6A:CB:34:ED:68:91:7E:71:FC:40:C5:60:C5:59
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0161BE1C
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1lYc_PZGass07WiRfnH8QMVgxVk.roa
Signing time: Sat 25 Jun 2022 10:13:28 +0000
ROA not before: Sat 25 Jun 2022 10:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.143.9.0/24 maxlen: 24
45.143.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23182876 (0x161be1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jun 25 10:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6561cfcf6466acb34ed68917e71fc40c560c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:85:fc:b8:01:71:85:b9:fc:b4:56:f1:0a:
20:49:21:20:6b:79:71:de:54:77:a6:81:15:04:8b:
91:f3:06:50:e3:f8:b2:74:6e:5b:f1:48:04:54:13:
a0:ab:e2:d3:eb:57:d2:9d:69:c0:8a:bb:74:dd:7c:
f3:18:39:df:94:8d:6d:d1:3c:57:1d:82:19:cb:74:
ed:5c:98:d5:9f:3c:dc:5b:23:5d:bb:52:38:36:bb:
03:f7:55:21:4d:d7:ae:2e:38:77:b1:0b:bd:b9:22:
ac:91:b6:55:67:95:38:4c:26:dc:9a:f2:77:74:85:
3d:a2:74:5b:39:6f:d3:eb:fa:e9:53:0e:de:28:36:
fc:98:cd:b5:9c:a5:33:ab:bd:4c:13:6a:8c:cc:1c:
84:d7:66:78:80:51:11:8a:ca:f2:67:6c:c5:20:ac:
b2:98:b1:46:c3:d3:60:89:c8:6a:32:67:2d:0b:0c:
99:38:dc:8d:bf:94:3a:50:6c:05:9b:1e:01:0d:9c:
52:c6:8b:94:0d:9f:21:a7:c8:3a:ba:87:da:38:5a:
62:39:34:79:53:e5:8f:9b:a9:35:55:4a:eb:d0:40:
cd:b9:b6:dd:f5:da:a8:82:62:02:6b:65:d1:8b:9b:
5b:9d:9e:ff:de:10:3c:0f:c8:7b:8c:65:13:54:13:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:1C:FC:F6:46:6A:CB:34:ED:68:91:7E:71:FC:40:C5:60:C5:59
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/1lYc_PZGass07WiRfnH8QMVgxVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1c:ec:6e:4b:b0:55:73:54:38:b5:70:47:e6:84:1d:89:02:
dc:27:d5:f3:5a:0e:96:13:4d:b5:bf:5c:71:1b:fe:f9:11:1c:
31:ac:1d:76:b5:69:7e:93:e3:da:c2:4b:7d:d7:7f:2f:8f:bb:
6a:d4:1b:84:78:99:34:d6:9e:23:ec:f1:7b:df:5f:10:21:db:
0c:82:fd:ed:10:48:95:b4:a3:54:1e:dc:61:69:a4:3a:d8:e9:
91:53:99:dd:27:55:99:b6:3a:c9:b8:60:18:57:ad:ce:b4:71:
2e:76:7e:12:2c:a0:02:63:69:48:c8:fd:02:cc:f5:40:7e:2d:
61:1e:d7:c6:17:68:b1:e8:44:3f:40:ca:ba:93:0b:cb:01:b5:
0d:4f:a7:36:4c:7d:ae:d4:b7:ef:c6:db:88:d4:5a:79:6f:44:
03:54:ce:08:4e:17:53:e2:18:8f:40:28:18:9b:67:bc:77:1f:
ca:a5:e4:29:2f:16:20:cb:fb:6f:73:be:91:05:84:04:6a:52:
b7:44:85:66:42:b2:14:08:2b:a7:05:2f:a8:92:03:46:db:71:
75:dc:64:04:f3:97:2d:77:03:8d:53:f3:03:e1:18:de:98:fa:
93:4b:1f:27:a7:ab:53:ca:4e:21:da:06:41:da:db:62:20:f7:
14:07:12:60
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAWG+HDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjQ0ZGJhY2E1NmRhYzMxOTQwMWY2OGE1MGQ5MTdmNTQyNDYxMWFkMB4XDTIyMDYy
NTEwMTMyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDY1NjFjZmNmNjQ2
NmFjYjM0ZWQ2ODkxN2U3MWZjNDBjNTYwYzU1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOeYhfy4AXGFufy0VvEKIEkhIGt5cd5Ud6aBFQSLkfMGUOP4
snRuW/FIBFQToKvi0+tX0p1pwIq7dN188xg535SNbdE8Vx2CGct07VyY1Z883Fsj
XbtSODa7A/dVIU3Xri44d7ELvbkirJG2VWeVOEwm3Jryd3SFPaJ0Wzlv0+v66VMO
3ig2/JjNtZylM6u9TBNqjMwchNdmeIBREYrK8mdsxSCsspixRsPTYInIajJnLQsM
mTjcjb+UOlBsBZseAQ2cUsaLlA2fIafIOrqH2jhaYjk0eVPlj5upNVVK69BAzbm2
3fXaqIJiAmtl0YubW52e/94QPA/Ie4xlE1QTo+sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTWVhz89kZqyzTtaJF+cfxAxWDFWTAfBgNVHSMEGDAWgBT/RNuspW2sMZQB
9opQ2Rf1QkYRrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L18wVGJyS1Z0ckRHVUFmYUtVTmtYOVVKR0VhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNTNhOTQ3LWZkMDMtNDAxNC05ODI3LWM1ZDg5NTA4MThlYy8x
LzFsWWNfUFpHYXNzMDdXaVJmbkg4UU1WZ3hWay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NTNhOTQ3LWZkMDMtNDAxNC05ODI3LWM1ZDg5NTA4MThlYy8xL18wVGJyS1Z0ckRH
VUFmYUtVTmtYOVVKR0VhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2PCQMEAC2PCzANBgkqhkiG9w0B
AQsFAAOCAQEAUxzsbkuwVXNUOLVwR+aEHYkC3CfV81oOlhNNtb9ccRv++REcMawd
drVpfpPj2sJLfdd/L4+7atQbhHiZNNaeI+zxe99fECHbDIL97RBIlbSjVB7cYWmk
OtjpkVOZ3SdVmbY6ybhgGFetzrRxLnZ+EiygAmNpSMj9Asz1QH4tYR7XxhdosehE
P0DKupMLywG1DU+nNkx9rtS378bbiNRaeW9EA1TOCE4XU+IYj0AoGJtnvHcfyqXk
KS8WIMv7b3O+kQWEBGpSt0SFZkKyFAgrpwUvqJIDRttxddxkBPOXLXcDjVPzA+EY
3pj6k0sfJ6erU8pOIdoGQdrbYiD3FAcSYA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org