Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Z_yfIlZQqA-fKswt70K1LnQnrGo.roa
File: Z_yfIlZQqA-fKswt70K1LnQnrGo.roa (raw, json)
Hash identifier: N4UHdTvoH9PS5tAXqHMYQgRXQjJyqUBCTC67I8SeCPw=
Subject key identifier: 67:FC:9F:22:56:50:A8:0F:9F:2A:CC:2D:EF:42:B5:2E:74:27:AC:6A
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01841A474D488E9D165FF09929360E870E17
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Z_yfIlZQqA-fKswt70K1LnQnrGo.roa
Signing time: Thu 27 Oct 2022 16:29:51 +0000
ROA not before: Thu 27 Oct 2022 16:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201839
IP address blocks: 45.67.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:47:4d:48:8e:9d:16:5f:f0:99:29:36:0e:87:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 27 16:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67fc9f225650a80f9f2acc2def42b52e7427ac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:7a:d4:52:f5:c9:64:2e:f4:68:d9:c8:42:
59:2d:bd:ff:a5:0a:5f:37:87:4a:ea:68:40:08:f3:
b7:de:7a:da:d9:42:c6:40:79:bd:80:fa:53:92:92:
70:1b:2a:c7:f2:50:91:d2:3c:0d:fa:2e:3c:62:fc:
fd:50:b5:6c:3e:d5:34:7a:65:33:28:45:69:b2:5b:
e3:bf:ea:29:a6:98:e1:34:97:f8:b0:47:6a:a9:2e:
d2:d6:ae:8c:98:18:b5:9d:1f:01:a5:5b:00:cd:9f:
78:8c:f8:58:4b:80:a7:13:64:e7:9c:f9:5d:22:ae:
67:6b:15:d8:1f:ca:1c:d0:51:0e:05:f1:e5:54:1b:
a9:e7:84:90:f8:ac:d6:d0:fa:7c:fe:5d:50:d9:00:
bd:ad:70:9c:6c:1b:18:e5:1a:0c:d1:4a:d9:a1:00:
40:36:60:e8:7f:20:1b:c8:d1:37:81:e3:26:11:74:
fb:36:62:01:57:8b:81:2e:9c:0b:73:27:6b:51:b0:
aa:f0:f0:7f:00:16:d6:02:f4:d9:ec:a9:5c:84:f5:
7a:be:73:7d:ca:f8:33:d1:7d:e3:ae:e3:c0:25:bd:
6a:1f:09:32:e6:f8:c8:71:68:7b:b4:10:ea:3c:ce:
fe:f0:75:ba:5c:1a:fa:76:26:21:b4:4c:90:d0:a9:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:9F:22:56:50:A8:0F:9F:2A:CC:2D:EF:42:B5:2E:74:27:AC:6A
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Z_yfIlZQqA-fKswt70K1LnQnrGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.215.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3b:26:1c:a4:8f:f5:5d:e3:f0:15:c4:a6:cf:d7:56:db:56:
00:6c:d6:25:7e:ad:7f:03:cd:c9:cc:e9:29:3e:d0:c3:73:b8:
7e:b3:45:17:87:d8:ba:d3:9b:77:89:b8:c8:f8:be:35:34:13:
6c:c8:78:ab:d3:a5:11:c5:3f:82:b3:0a:b1:9c:f7:2e:e7:42:
ea:10:74:ed:d6:05:d5:4d:6f:43:77:f5:de:98:c2:7e:58:8c:
6d:7d:8a:31:74:ea:6a:87:9a:5b:e0:06:c8:46:41:db:96:60:
69:52:d2:de:3b:7d:ff:f0:b6:d7:59:56:ce:b4:a1:89:8e:39:
f3:a6:b0:c1:61:fd:19:c0:64:1f:8f:9a:6c:44:68:be:92:d5:
b2:a6:05:a4:a6:b7:dc:99:6d:67:5d:9b:49:29:9d:a1:33:ef:
a2:b1:c2:d4:13:fd:36:6b:3e:a0:3b:d5:04:cc:eb:ad:3b:54:
1a:ca:56:5e:f5:68:19:8f:18:ec:b3:11:c1:5d:65:ce:b2:35:
66:15:a2:0c:cb:1e:23:e3:26:bc:3d:0d:36:b4:03:94:83:e6:
c5:10:7a:3b:3c:0d:4c:0e:be:85:f9:ea:72:57:6d:8e:51:93:
94:a1:e3:2a:70:67:55:0a:1a:4d:5a:1e:2d:58:23:a6:4c:25:
7e:96:bc:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQaR01Ijp0WX/CZKTYOhw4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjIxMDI3MTYyOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2ZjOWYyMjU2NTBhODBmOWYyYWNjMmRlZjQyYjUyZTc0MjdhYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOx61FL1yWQu9GjZyEJZLb3/pQpf
N4dK6mhACPO33nra2ULGQHm9gPpTkpJwGyrH8lCR0jwN+i48Yvz9ULVsPtU0emUz
KEVpslvjv+opppjhNJf4sEdqqS7S1q6MmBi1nR8BpVsAzZ94jPhYS4CnE2TnnPld
Iq5naxXYH8oc0FEOBfHlVBup54SQ+KzW0Pp8/l1Q2QC9rXCcbBsY5RoM0UrZoQBA
NmDofyAbyNE3geMmEXT7NmIBV4uBLpwLcydrUbCq8PB/ABbWAvTZ7KlchPV6vnN9
yvgz0X3jruPAJb1qHwky5vjIcWh7tBDqPM7+8HW6XBr6diYhtEyQ0Kmn5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGf8nyJWUKgPnyrMLe9CtS50J6xqMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvWl95ZklsWlFxQS1mS3N3dDcwSzFMblFuckdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPXMA0G
CSqGSIb3DQEBCwUAA4IBAQBGOyYcpI/1XePwFcSmz9dW21YAbNYlfq1/A83JzOkp
PtDDc7h+s0UXh9i605t3ibjI+L41NBNsyHir06URxT+CswqxnPcu50LqEHTt1gXV
TW9Dd/XemMJ+WIxtfYoxdOpqh5pb4AbIRkHblmBpUtLeO33/8LbXWVbOtKGJjjnz
prDBYf0ZwGQfj5psRGi+ktWypgWkprfcmW1nXZtJKZ2hM++iscLUE/02az6gO9UE
zOutO1QaylZe9WgZjxjssxHBXWXOsjVmFaIMyx4j4ya8PQ02tAOUg+bFEHo7PA1M
Dr6F+epyV22OUZOUoeMqcGdVChpNWh4tWCOmTCV+lryT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org