Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4gxAtarM9kBTE0_z2JWFvU86Ls.roa
File: C4gxAtarM9kBTE0_z2JWFvU86Ls.roa (raw, json)
Hash identifier: MMgrk+awO6CdwJDC4toHLlVvAqSQl8BrHiCCaJZuRII=
Subject key identifier: 0B:88:31:02:D6:AB:33:D9:01:4C:4D:3F:CF:62:56:16:F5:3C:E8:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018346659F517E8543B4F7ABF3BDA69470ED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4gxAtarM9kBTE0_z2JWFvU86Ls.roa
Signing time: Fri 16 Sep 2022 13:03:28 +0000
ROA not before: Fri 16 Sep 2022 13:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.117.0/24 maxlen: 24
45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:46:65:9f:51:7e:85:43:b4:f7:ab:f3:bd:a6:94:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 16 13:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b883102d6ab33d9014c4d3fcf625616f53ce8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:5f:03:5a:36:93:14:8e:c1:30:db:17:e7:
15:24:72:9f:43:f8:94:09:16:de:b1:e8:59:d8:cd:
a5:46:96:c8:50:b3:9c:b6:60:5c:d0:2f:8a:50:2e:
b1:8d:b9:86:d8:91:68:40:00:16:c4:e1:e8:6c:07:
af:b0:7f:f8:82:b6:bd:c4:0d:16:d0:10:2b:40:fa:
65:79:38:83:fd:5f:74:1d:1e:fe:13:27:e3:ee:3a:
6e:3e:91:22:d6:ab:94:8e:ec:69:c8:c5:1b:45:33:
36:59:7a:d8:f5:9b:5b:90:b9:ad:d7:26:79:a1:a1:
a3:b4:70:69:6d:c1:c5:b8:a3:33:df:a5:6d:89:8c:
09:b8:0c:ba:62:0f:8f:b5:79:3c:21:52:66:d0:a1:
b0:da:bd:14:8d:19:6e:08:bc:50:4b:90:a1:18:8b:
90:dc:1c:df:3a:fc:ad:55:c9:98:75:89:ff:93:d6:
c5:ba:34:9a:1b:6d:c2:9e:1a:60:40:e9:82:5e:9d:
1a:be:9c:c2:4d:69:59:63:b0:69:96:98:40:24:53:
d9:f4:08:ad:24:23:00:d2:be:8f:17:8a:0a:ec:ad:
bc:3b:10:1f:01:21:60:81:7d:f6:2e:93:56:6c:af:
72:c6:42:0c:b4:a4:2f:87:71:b7:6a:eb:49:77:29:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:88:31:02:D6:AB:33:D9:01:4C:4D:3F:CF:62:56:16:F5:3C:E8:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4gxAtarM9kBTE0_z2JWFvU86Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/23
45.148.119.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
15:97:86:1e:dd:17:a1:26:7b:eb:6e:e7:3e:53:47:68:2b:d3:
35:68:6f:d9:b7:f4:69:0e:bd:92:8a:30:d7:d4:d5:60:1e:0c:
04:e5:b8:fa:0d:d4:19:07:09:1c:c2:f4:ac:e9:4a:da:be:78:
82:3e:57:85:5a:21:2b:65:ff:ab:33:cc:53:a5:b8:fb:48:df:
6f:b0:8c:d0:e0:fa:9c:77:71:b3:81:b4:2f:b2:d4:c8:8c:46:
b4:6c:01:99:2b:9a:c5:fb:11:88:b1:37:c1:74:1a:54:a3:5a:
ab:d4:f0:eb:90:7e:b5:a8:08:93:f9:8e:cd:15:26:2d:bc:f9:
9b:b1:bf:b5:59:6d:df:0b:a8:bc:ae:92:5e:5c:f5:ad:6a:41:
6a:8d:02:a1:8d:ef:7c:2c:2f:4f:f8:e6:40:7a:ba:22:1d:db:
45:31:e8:19:a3:79:59:d9:eb:d4:e7:3f:d9:73:3f:a2:f0:39:
e4:d7:cc:e9:96:83:0e:eb:cb:35:7e:0d:ff:01:c5:0d:0f:c0:
81:03:5d:04:c3:82:a5:25:7a:03:a4:32:1e:92:a1:36:dc:1f:
a3:94:e9:2d:e4:41:9b:e4:15:6b:08:11:10:5b:2e:1f:93:30:
ec:bd:22:af:95:6c:08:44:81:9e:aa:29:c5:60:22:80:8d:bc:
3c:7f:05:34
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYNGZZ9RfoVDtPer872mlHDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwOTE2MTMwMzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjg4MzEwMmQ2YWIzM2Q5MDE0YzRkM2ZjZjYyNTYxNmY1M2NlOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBfA1o2kxSOwTDbF+cVJHKfQ/iU
CRbesehZ2M2lRpbIULOctmBc0C+KUC6xjbmG2JFoQAAWxOHobAevsH/4gra9xA0W
0BArQPpleTiD/V90HR7+Eyfj7jpuPpEi1quUjuxpyMUbRTM2WXrY9ZtbkLmt1yZ5
oaGjtHBpbcHFuKMz36VtiYwJuAy6Yg+PtXk8IVJm0KGw2r0UjRluCLxQS5ChGIuQ
3BzfOvytVcmYdYn/k9bFujSaG23CnhpgQOmCXp0avpzCTWlZY7BplphAJFPZ9Ait
JCMA0r6PF4oK7K28OxAfASFggX32LpNWbK9yxkIMtKQvh3G3autJdym0lwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFAuIMQLWqzPZAUxNP89iVhb1POi7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQzRneEF0YXJNOWtCVEUwX3oySldGdlU4NkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQBLZR0AwQA
LZR3MCoEAgACMCQDBwQqDpfABGADBwQqDrEHEqADBwQqEMxAAdADBwQqEMxBARAw
DQYJKoZIhvcNAQELBQADggEBABWXhh7dF6Eme+tu5z5TR2gr0zVob9m39GkOvZKK
MNfU1WAeDATluPoN1BkHCRzC9KzpStq+eII+V4VaIStl/6szzFOluPtI32+wjNDg
+px3cbOBtC+y1MiMRrRsAZkrmsX7EYixN8F0GlSjWqvU8OuQfrWoCJP5js0VJi28
+Zuxv7VZbd8LqLyukl5c9a1qQWqNAqGN73wsL0/45kB6uiId20Ux6BmjeVnZ69Tn
P9lzP6LwOeTXzOmWgw7ryzV+Df8BxQ0PwIEDXQTDgqUlegOkMh6SoTbcH6OU6S3k
QZvkFWsIERBbLh+TMOy9Iq+VbAhEgZ6qKcVgIoCNvDx/BTQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:56 2023 by rpki-client on console-ams.rpki-client.org