Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/RG1otJ9JO99VSodtl-ns3ZgjecA.roa
File: RG1otJ9JO99VSodtl-ns3ZgjecA.roa (raw, json)
Hash identifier: 96Yv14JsW2yvY72cy4HSKnzy2uCb8jcIODbfqAQjWzI=
Subject key identifier: 44:6D:68:B4:9F:49:3B:DF:55:4A:87:6D:97:E9:EC:DD:98:23:79:C0
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0408D5AB
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/RG1otJ9JO99VSodtl-ns3ZgjecA.roa
Signing time: Sat 01 Jan 2022 15:59:54 +0000
ROA not before: Sat 01 Jan 2022 15:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208675
IP address blocks: 45.89.138.0/24 maxlen: 24
45.89.136.0/24 maxlen: 24
45.89.139.0/24 maxlen: 24
45.89.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67687851 (0x408d5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jan 1 15:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=446d68b49f493bdf554a876d97e9ecdd982379c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:9b:07:4d:56:bd:4b:35:74:10:68:01:d5:
09:71:42:23:03:74:3f:23:93:ef:16:29:b7:9c:d2:
5b:06:44:e5:96:5f:c3:a1:c9:43:ab:7f:48:e0:d5:
51:ba:ad:05:6c:47:59:88:d2:4c:af:8f:ef:6f:7f:
80:76:ee:51:21:4b:21:c4:27:cd:08:6d:53:35:3a:
5f:bf:1e:5c:df:b2:dd:85:5e:3d:45:d7:ab:6d:fc:
ff:95:bb:d1:92:cd:62:9b:3d:e9:21:8b:77:46:f3:
70:7f:5e:1e:4f:75:24:b4:b0:2e:15:88:6b:6b:6b:
b5:2e:b4:fb:1d:ff:1d:75:72:19:4e:4f:ab:56:48:
0b:86:b7:2c:6c:22:87:d7:80:30:96:62:c6:aa:87:
8e:c5:49:eb:f0:e4:19:be:9b:5f:51:66:f4:ec:17:
21:dc:a4:bb:17:09:f8:ef:f8:b4:65:39:ac:3e:b3:
1a:75:3a:d9:77:eb:dd:2e:2f:0a:8b:29:b9:8e:f0:
b7:83:1d:8f:c3:4f:c9:10:46:a7:0a:ef:9c:bb:53:
d9:49:40:65:4f:e1:7f:3b:be:8c:b2:da:ee:d3:bc:
55:c6:ee:03:05:b5:2d:5f:91:96:6d:59:30:e5:da:
f5:1b:92:27:50:3d:7e:a1:27:68:58:6a:c2:72:ab:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:68:B4:9F:49:3B:DF:55:4A:87:6D:97:E9:EC:DD:98:23:79:C0
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/RG1otJ9JO99VSodtl-ns3ZgjecA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:15:1a:74:89:cb:b7:8e:6d:90:c6:44:77:ac:74:8c:e1:41:
c5:4c:2f:fa:6e:3c:f3:95:73:78:4b:85:c4:2d:18:ef:91:ac:
57:dc:cf:49:68:26:fb:7c:ae:d9:76:7f:e2:b6:63:4f:d7:53:
a7:9f:ea:79:59:56:3e:fd:5a:ec:fd:95:4f:4b:c7:e6:ff:aa:
41:99:1e:d0:be:a4:43:2a:6a:bf:4a:ff:f9:90:4e:53:1b:1d:
08:64:50:b8:2d:20:c2:11:80:32:e9:92:2f:89:92:46:d5:e7:
ad:d4:4e:d7:6e:14:24:0f:4f:57:68:2d:3e:bf:e1:8a:95:3f:
03:89:51:28:ed:11:ee:65:92:19:0f:50:01:a4:c3:06:60:c0:
00:23:41:a6:d0:14:49:4c:45:91:7d:ac:85:e5:c7:47:02:54:
5c:56:ae:3b:13:33:84:51:5f:49:bc:ab:b3:07:46:ac:ba:dd:
90:74:e6:fb:dd:16:57:99:99:fa:77:ed:18:56:00:3f:24:97:
e2:c2:ed:ec:f3:05:52:15:bf:21:56:fc:a5:92:84:ed:b1:e8:
81:53:3c:2e:88:57:eb:dd:db:c4:d4:42:4f:21:70:7d:8b:61:
98:a4:6c:3b:b8:78:be:ba:28:73:38:2c:c3:18:e7:a0:d6:d3:
ce:28:c9:24
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAjVqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OWY0Nzc5NTc1Y2I5YmYwNTgyNDMyODdlOTgyMzRkZWNhOTExZmM5MB4XDTIyMDEw
MTE1NTk1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQ2ZDY4YjQ5ZjQ5
M2JkZjU1NGE4NzZkOTdlOWVjZGQ5ODIzNzljMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmEmwdNVr1LNXQQaAHVCXFCIwN0PyOT7xYpt5zSWwZE5ZZf
w6HJQ6t/SODVUbqtBWxHWYjSTK+P729/gHbuUSFLIcQnzQhtUzU6X78eXN+y3YVe
PUXXq238/5W70ZLNYps96SGLd0bzcH9eHk91JLSwLhWIa2trtS60+x3/HXVyGU5P
q1ZIC4a3LGwih9eAMJZixqqHjsVJ6/DkGb6bX1Fm9OwXIdykuxcJ+O/4tGU5rD6z
GnU62Xfr3S4vCospuY7wt4Mdj8NPyRBGpwrvnLtT2UlAZU/hfzu+jLLa7tO8Vcbu
AwW1LV+Rlm1ZMOXa9RuSJ1A9fqEnaFhqwnKrAucCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBREbWi0n0k731VKh22X6ezdmCN5wDAfBgNVHSMEGDAWgBS59HeVdcub8Fgk
MofpgjTeypEfyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VmUjNsWFhMbV9CWUpES0g2WUkwM3NxUkg4ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvZjZkMmRkLTAzYTctNGYxZi1iODkwLWNkOWZmMDU1MmY5Mi8x
L1JHMW90SjlKTzk5VlNvZHRsLW5zM1pnamVjQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
ZjZkMmRkLTAzYTctNGYxZi1iODkwLWNkOWZmMDU1MmY5Mi8xL3VmUjNsWFhMbV9C
WUpES0g2WUkwM3NxUkg4ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1ZiDANBgkqhkiG9w0BAQsFAAOC
AQEADRUadInLt45tkMZEd6x0jOFBxUwv+m4885VzeEuFxC0Y75GsV9zPSWgm+3yu
2XZ/4rZjT9dTp5/qeVlWPv1a7P2VT0vH5v+qQZke0L6kQypqv0r/+ZBOUxsdCGRQ
uC0gwhGAMumSL4mSRtXnrdRO124UJA9PV2gtPr/hipU/A4lRKO0R7mWSGQ9QAaTD
BmDAACNBptAUSUxFkX2sheXHRwJUXFauOxMzhFFfSbyrswdGrLrdkHTm+90WV5mZ
+nftGFYAPySX4sLt7PMFUhW/IVb8pZKE7bHogVM8LohX693bxNRCTyFwfYthmKRs
O7h4vrooczgswxjnoNbTzijJJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org