Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/45s_V1vplhF9d8t1Mmd9iA0jmuA.roa
File: 45s_V1vplhF9d8t1Mmd9iA0jmuA.roa (raw, json)
Hash identifier: pj0bRxJ4Zrj8bqz4oYHygzBkLUy1GmkNP5TVoTV6Po0=
Subject key identifier: E3:9B:3F:57:5B:E9:96:11:7D:77:CB:75:32:67:7D:88:0D:23:9A:E0
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 0182F52694F6BD91A335BAEC509B5D5842B5
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/45s_V1vplhF9d8t1Mmd9iA0jmuA.roa
Signing time: Wed 31 Aug 2022 18:25:22 +0000
ROA not before: Wed 31 Aug 2022 18:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 185.156.185.0/24 maxlen: 24
185.156.184.0/24 maxlen: 24
185.156.186.0/24 maxlen: 24
185.156.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:26:94:f6:bd:91:a3:35:ba:ec:50:9b:5d:58:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Aug 31 18:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e39b3f575be996117d77cb7532677d880d239ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:75:20:11:33:51:cb:1b:6b:e8:3e:1f:ec:
a2:20:29:7e:e3:b2:47:2c:ce:60:e2:06:0b:67:77:
ce:ee:3a:80:37:d8:8e:51:df:35:17:be:1f:5c:f4:
d7:07:cd:f2:0b:2f:e9:25:6e:eb:5b:da:7b:ac:92:
39:24:72:ce:44:e4:61:1f:85:50:25:5f:81:c3:a3:
f9:f6:eb:69:d0:18:46:f9:05:7c:4b:8d:e8:11:bd:
b3:f8:11:86:2b:57:67:2a:e9:3e:60:ec:e6:e0:07:
b0:7a:72:4b:38:3f:f3:bc:43:d8:76:6d:3d:8a:c1:
75:9c:33:53:ec:12:34:bf:1f:0a:8a:c4:39:df:8f:
aa:5a:62:c5:02:86:75:78:a2:12:83:a8:0c:d5:67:
fa:82:df:bb:d5:90:55:9f:aa:1b:c0:ee:87:5a:23:
2e:37:30:64:8a:a5:bc:39:ad:cb:06:95:dd:b8:a8:
cb:c8:8d:c8:a8:78:9a:7d:68:6f:7f:d5:c1:ad:39:
ba:0a:59:52:fa:b0:d2:73:39:0d:14:28:34:15:54:
f3:5c:b5:60:74:4f:bd:2f:af:75:95:53:98:ae:fb:
23:85:f4:fa:48:17:00:36:3b:7a:70:af:9d:78:0b:
fe:1f:34:5f:3c:7b:24:13:81:a4:89:91:ea:20:9a:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:3F:57:5B:E9:96:11:7D:77:CB:75:32:67:7D:88:0D:23:9A:E0
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/45s_V1vplhF9d8t1Mmd9iA0jmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
16:d1:57:57:04:6d:d5:cf:3a:3b:0a:de:9e:66:33:d9:50:a8:
35:04:9e:37:bc:65:10:26:4f:87:ab:a7:6e:8b:86:a9:fd:bb:
78:c0:35:f6:72:a2:1a:45:1b:55:86:18:22:d4:40:97:38:a3:
b9:5b:84:07:e0:1c:01:b8:79:d0:ab:7d:35:4a:8a:ab:7e:5c:
15:eb:53:83:10:c3:af:e7:d1:e8:8c:8e:98:50:ee:10:2b:1e:
5d:fd:54:a8:71:23:d2:71:4d:08:e7:ff:a3:50:e2:b2:79:c2:
e1:51:08:99:d8:ff:3b:34:05:a3:5f:2f:41:f3:84:38:05:14:
1c:83:92:8a:28:fe:9f:95:1d:7d:f7:0d:37:51:67:10:58:d0:
30:07:c6:cf:97:7e:e9:6d:15:14:18:60:26:61:44:e7:d1:3e:
45:55:83:72:1d:ad:90:11:dd:9f:7d:66:66:e2:79:1d:bc:41:
8e:a6:a5:86:05:18:97:01:72:d2:2f:bb:8a:77:24:a4:27:1d:
7d:ff:56:a3:a7:39:27:ed:4b:1d:61:35:06:01:b2:b7:df:5e:
f1:72:51:4e:4d:96:41:cf:90:49:15:20:11:e6:38:b4:8e:0b:
96:b3:4e:19:fd:d4:a6:99:72:1b:d6:b2:fb:ee:a1:90:c2:04:
f4:f4:b7:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL1JpT2vZGjNbrsUJtdWEK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx
ZGQ2ZTAwHhcNMjIwODMxMTgyNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzliM2Y1NzViZTk5NjExN2Q3N2NiNzUzMjY3N2Q4ODBkMjM5YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ip1IBEzUcsba+g+H+yiICl+47JH
LM5g4gYLZ3fO7jqAN9iOUd81F74fXPTXB83yCy/pJW7rW9p7rJI5JHLORORhH4VQ
JV+Bw6P59utp0BhG+QV8S43oEb2z+BGGK1dnKuk+YOzm4AewenJLOD/zvEPYdm09
isF1nDNT7BI0vx8KisQ534+qWmLFAoZ1eKISg6gM1Wf6gt+71ZBVn6obwO6HWiMu
NzBkiqW8Oa3LBpXduKjLyI3IqHiafWhvf9XBrTm6CllS+rDSczkNFCg0FVTzXLVg
dE+9L691lVOYrvsjhfT6SBcANjt6cK+deAv+HzRfPHskE4GkiZHqIJqG7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOObP1db6ZYRfXfLdTJnfYgNI5rgMB8GA1UdIwQY
MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt
ZDdjNjcwODQxNGZhLzEvNDVzX1YxdnBsaEY5ZDh0MU1tZDlpQTBqbXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh
LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G
CSqGSIb3DQEBCwUAA4IBAQAW0VdXBG3Vzzo7Ct6eZjPZUKg1BJ43vGUQJk+Hq6du
i4ap/bt4wDX2cqIaRRtVhhgi1ECXOKO5W4QH4BwBuHnQq301SoqrflwV61ODEMOv
59HojI6YUO4QKx5d/VSocSPScU0I5/+jUOKyecLhUQiZ2P87NAWjXy9B84Q4BRQc
g5KKKP6flR199w03UWcQWNAwB8bPl37pbRUUGGAmYUTn0T5FVYNyHa2QEd2ffWZm
4nkdvEGOpqWGBRiXAXLSL7uKdySkJx19/1ajpzkn7UsdYTUGAbK3317xclFOTZZB
z5BJFSAR5ji0jguWs04Z/dSmmXIb1rL77qGQwgT09LeQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org