Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/y_F-sxPZn_0F4sw4wr3mT2mw5Y0.roa
File: y_F-sxPZn_0F4sw4wr3mT2mw5Y0.roa (raw, json)
Hash identifier: nAPM+smdoei9i/Rha1Pl4Ly5sH3pY/DxX/dzZBfU2hw=
Subject key identifier: CB:F1:7E:B3:13:D9:9F:FD:05:E2:CC:38:C2:BD:E6:4F:69:B0:E5:8D
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 018418C271B34628B0053B61512E966AABF2
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/y_F-sxPZn_0F4sw4wr3mT2mw5Y0.roa
Signing time: Thu 27 Oct 2022 09:25:07 +0000
ROA not before: Thu 27 Oct 2022 09:25:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208821
IP address blocks: 45.83.33.0/24 maxlen: 24
45.83.35.0/24 maxlen: 24
45.83.32.0/24 maxlen: 24
45.83.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c2:71:b3:46:28:b0:05:3b:61:51:2e:96:6a:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Oct 27 09:25:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbf17eb313d99ffd05e2cc38c2bde64f69b0e58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:02:cf:12:6d:dd:c1:05:d2:e6:fa:7f:3b:
72:11:ad:0c:aa:69:41:32:45:30:f1:5f:b4:32:01:
6d:f5:d3:04:ee:cd:22:89:0e:c1:79:25:0b:f4:94:
18:4a:9c:34:43:b2:1f:91:66:c7:5e:ce:8b:a4:44:
ab:7f:c7:cd:e1:43:99:9a:c9:a5:bb:f8:6e:13:65:
fb:8b:63:07:ab:f6:5f:94:52:3d:5c:c1:89:50:60:
05:39:a0:7f:d2:7a:27:03:56:fd:7d:29:97:a0:02:
16:ea:2b:60:43:98:59:6f:34:12:a0:05:75:a9:41:
62:1f:4e:2a:15:08:9a:2f:17:18:a3:fc:08:9f:1a:
55:92:11:64:20:f3:3e:b6:19:0d:2f:11:85:0c:eb:
89:e7:43:db:37:4c:ab:5b:11:11:12:f2:53:34:2e:
61:dd:18:33:5a:a0:40:23:36:e9:50:9c:2f:2b:8b:
c2:fe:a1:b3:98:99:38:71:83:d9:01:61:69:48:b6:
34:0d:68:e2:52:47:ca:4e:a6:20:b4:ff:30:92:c0:
96:1a:2e:52:87:81:d6:1d:9a:67:a2:55:85:61:8e:
ea:80:df:32:16:5b:be:83:25:1d:c0:62:ef:c3:35:
2b:e8:06:67:2d:e0:66:57:03:cc:06:34:cf:b4:fb:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:7E:B3:13:D9:9F:FD:05:E2:CC:38:C2:BD:E6:4F:69:B0:E5:8D
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/y_F-sxPZn_0F4sw4wr3mT2mw5Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
49:7a:fd:41:82:68:8a:e7:a7:3b:08:be:8d:a4:48:be:ab:44:
1f:e4:f3:7a:98:6f:a2:0e:64:22:1c:34:09:d3:fc:5e:bb:84:
ed:da:d5:b0:59:36:6d:dc:2e:c5:6a:d7:d9:ae:6b:82:4b:5f:
de:e0:57:e0:4d:64:66:cb:22:df:16:d7:dc:3c:72:c4:43:b9:
be:8d:a4:cb:f6:f2:17:3a:18:b4:8c:e7:cf:ef:ce:1a:49:08:
11:5e:cc:73:57:80:39:7d:47:64:50:e0:53:25:c1:ff:49:6b:
be:7f:3b:7a:4f:59:a8:8e:11:54:f7:25:7d:78:33:1e:6c:32:
8d:79:db:f2:61:c5:ee:60:4f:1d:85:77:77:a6:ee:e5:3f:42:
73:b1:73:c5:b2:b7:61:47:8b:83:21:4d:a4:cf:43:95:c1:bb:
bb:a9:09:fc:6e:a8:2c:8f:d4:67:a3:db:d3:94:ed:99:5d:12:
a4:3f:7c:5a:07:0d:c9:27:42:81:56:69:c3:b9:1f:ea:af:79:
48:45:c0:c0:54:c2:55:34:44:60:19:e4:a2:25:2d:01:e7:5f:
da:0f:70:37:ec:e2:35:cf:0a:6c:d6:e7:51:f4:64:d6:f2:78:
5a:5a:80:f6:a5:7d:64:76:b2:e7:a8:20:d2:08:dd:67:0c:b0:
1c:64:33:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQYwnGzRiiwBTthUS6WaqvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjIxMDI3MDkyNTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmYxN2ViMzEzZDk5ZmZkMDVlMmNjMzhjMmJkZTY0ZjY5YjBlNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZgCzxJt3cEF0ub6fztyEa0MqmlB
MkUw8V+0MgFt9dME7s0iiQ7BeSUL9JQYSpw0Q7IfkWbHXs6LpESrf8fN4UOZmsml
u/huE2X7i2MHq/ZflFI9XMGJUGAFOaB/0nonA1b9fSmXoAIW6itgQ5hZbzQSoAV1
qUFiH04qFQiaLxcYo/wInxpVkhFkIPM+thkNLxGFDOuJ50PbN0yrWxEREvJTNC5h
3RgzWqBAIzbpUJwvK4vC/qGzmJk4cYPZAWFpSLY0DWjiUkfKTqYgtP8wksCWGi5S
h4HWHZpnolWFYY7qgN8yFlu+gyUdwGLvwzUr6AZnLeBmVwPMBjTPtPufCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvxfrMT2Z/9BeLMOMK95k9psOWNMB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEveV9GLXN4UFpuXzBGNHN3NHdyM21UMm13NVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVMgMA0G
CSqGSIb3DQEBCwUAA4IBAQBJev1BgmiK56c7CL6NpEi+q0Qf5PN6mG+iDmQiHDQJ
0/xeu4Tt2tWwWTZt3C7FatfZrmuCS1/e4FfgTWRmyyLfFtfcPHLEQ7m+jaTL9vIX
Ohi0jOfP784aSQgRXsxzV4A5fUdkUOBTJcH/SWu+fzt6T1mojhFU9yV9eDMebDKN
edvyYcXuYE8dhXd3pu7lP0JzsXPFsrdhR4uDIU2kz0OVwbu7qQn8bqgsj9Rno9vT
lO2ZXRKkP3xaBw3JJ0KBVmnDuR/qr3lIRcDAVMJVNERgGeSiJS0B51/aD3A37OI1
zwps1udR9GTW8nhaWoD2pX1kdrLnqCDSCN1nDLAcZDNN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org