Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6Swsb6Ogp2wYsdQe14lYorlWKdI.roa
File: 6Swsb6Ogp2wYsdQe14lYorlWKdI.roa (raw, json)
Hash identifier: GoY160yRNmM7Y4RgVlCGNpQH7asOFkwj+O1W0ZZ690s=
Subject key identifier: E9:2C:2C:6F:A3:A0:A7:6C:18:B1:D4:1E:D7:89:58:A2:B9:56:29:D2
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 04276CBF
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6Swsb6Ogp2wYsdQe14lYorlWKdI.roa
Signing time: Wed 26 Jan 2022 09:17:46 +0000
ROA not before: Wed 26 Jan 2022 09:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398772
IP address blocks: 45.136.60.0/22 maxlen: 24
45.130.204.0/22 maxlen: 24
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69692607 (0x4276cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 26 09:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92c2c6fa3a0a76c18b1d41ed78958a2b95629d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:58:de:fd:7a:b4:48:8c:b6:52:57:0b:3b:
5f:67:94:fc:e4:6d:d2:70:5b:13:2e:fd:37:12:ed:
f1:f5:24:57:e2:64:b8:19:21:7d:28:38:87:dc:f3:
9e:8e:6b:3e:2a:bb:b6:54:a7:63:78:8d:9f:eb:7d:
d7:34:f1:f3:a2:51:f0:0c:55:47:91:08:9a:20:7e:
97:42:4e:13:d9:a8:f5:2f:02:65:37:cf:f3:12:b3:
a5:21:cb:f5:5f:5b:a9:a6:17:49:54:e0:50:c4:6e:
6a:54:f5:44:99:1e:f6:f9:93:6e:d0:4d:bf:d4:0e:
e0:b4:a2:99:15:e9:f6:7b:3d:7d:e7:39:f6:68:c5:
af:67:11:44:bf:4f:64:10:8e:6e:8c:c8:b8:b7:ff:
7d:b7:8e:51:4a:7e:99:08:a7:98:05:35:d5:8d:dc:
18:aa:3f:7b:da:e9:2b:e8:58:a2:08:0d:f8:10:47:
0a:ea:1b:ee:0c:f2:a3:7e:79:49:ec:92:a5:42:9e:
c5:c2:67:9b:56:0e:5c:31:28:66:90:a0:78:03:60:
f5:12:cf:e4:28:65:6c:58:9c:ec:34:61:e5:f6:00:
e0:cf:4e:da:07:a5:ec:df:8c:15:40:80:cc:de:ce:
57:18:2e:2d:15:8c:d6:6d:ea:d6:07:38:d8:64:09:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:2C:6F:A3:A0:A7:6C:18:B1:D4:1E:D7:89:58:A2:B9:56:29:D2
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6Swsb6Ogp2wYsdQe14lYorlWKdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.44.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
Signature Algorithm: sha256WithRSAEncryption
85:1a:3f:04:97:c8:46:24:1e:ce:a7:63:f2:e9:09:53:39:11:
72:02:c2:b5:dc:76:94:3b:78:f8:14:b3:08:ab:3d:3d:0e:3e:
30:eb:18:f6:d2:bb:f8:cc:04:ac:c5:71:db:ff:6d:ca:e3:44:
a8:d4:ff:e7:5f:c3:f6:d3:af:8a:d3:4c:d0:51:6d:27:e8:f1:
f4:73:db:65:d0:6e:68:2e:37:98:7a:86:86:0c:2a:f4:79:a9:
08:ca:9b:ca:77:5e:46:1a:ac:90:e1:91:85:3a:65:f3:9c:55:
c0:3c:96:7b:b3:61:1e:d8:86:77:ae:5a:3d:71:50:7d:f5:b6:
90:bc:25:d0:73:cf:0d:ba:97:2f:1e:14:bb:8a:52:96:fa:07:
42:ae:31:5b:e6:e0:47:08:ae:4e:f0:62:d2:8c:9a:b7:4e:2b:
1f:e1:b6:e4:a8:5b:cb:51:d3:f7:75:81:d0:49:f5:6a:98:50:
7f:a7:76:c9:6e:d2:a9:1e:60:2c:12:b3:2f:1e:cd:a2:43:8f:
47:7f:81:a9:5a:f4:8e:3a:a4:2a:86:fe:49:84:11:02:1d:56:
f0:f6:04:78:64:1b:9d:a9:28:f4:4e:79:41:8e:4f:64:fa:94:
cb:f3:b2:7f:8e:03:5a:af:52:41:2a:11:eb:06:83:82:80:92:
56:65:03:45
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBCdsvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OGQ1ZTM3MTc4ZDg1MjRjNzI2NjBhMWQ3OTYxNjU5OTllNTg2NjIyMB4XDTIyMDEy
NjA5MTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTkyYzJjNmZhM2Ew
YTc2YzE4YjFkNDFlZDc4OTU4YTJiOTU2MjlkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwHWN79erRIjLZSVws7X2eU/ORt0nBbEy79NxLt8fUkV+Jk
uBkhfSg4h9zzno5rPiq7tlSnY3iNn+t91zTx86JR8AxVR5EImiB+l0JOE9mo9S8C
ZTfP8xKzpSHL9V9bqaYXSVTgUMRualT1RJke9vmTbtBNv9QO4LSimRXp9ns9fec5
9mjFr2cRRL9PZBCObozIuLf/fbeOUUp+mQinmAU11Y3cGKo/e9rpK+hYoggN+BBH
Cuob7gzyo355SeySpUKexcJnm1YOXDEoZpCgeANg9RLP5ChlbFic7DRh5fYA4M9O
2gel7N+MFUCAzN7OVxguLRWM1m3q1gc42GQJRlkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTpLCxvo6CnbBix1B7XiViiuVYp0jAfBgNVHSMEGDAWgBTI1eNxeNhSTHJm
Ch15YWWZnlhmIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lOWGpjWGpZVWt4eVpnb2RlV0ZsbVo1WVppSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvYjU0Y2EzLTczZDUtNDk4NC04NzgyLTllMGFlZDJmYjhlYy8x
LzZTd3NiNk9ncDJ3WXNkUWUxNGxZb3JsV0tkSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
YjU0Y2EzLTczZDUtNDk4NC04NzgyLTllMGFlZDJmYjhlYy8xL3lOWGpjWGpZVWt4
eVpnb2RlV0ZsbVo1WVppSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAi0MLAMEAi1fjAMEAi2CzAMEAi2I
PAMEAi2RwDANBgkqhkiG9w0BAQsFAAOCAQEAhRo/BJfIRiQezqdj8ukJUzkRcgLC
tdx2lDt4+BSzCKs9PQ4+MOsY9tK7+MwErMVx2/9tyuNEqNT/51/D9tOvitNM0FFt
J+jx9HPbZdBuaC43mHqGhgwq9HmpCMqbyndeRhqskOGRhTpl85xVwDyWe7NhHtiG
d65aPXFQffW2kLwl0HPPDbqXLx4Uu4pSlvoHQq4xW+bgRwiuTvBi0oyat04rH+G2
5Khby1HT93WB0En1aphQf6d2yW7SqR5gLBKzLx7NokOPR3+BqVr0jjqkKob+SYQR
Ah1W8PYEeGQbnako9E55QY5PZPqUy/Oyf44DWq9SQSoR6waDgoCSVmUDRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org