Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T_8GJhKYape9-y_CtwK4raNCQXQ.roa
File: T_8GJhKYape9-y_CtwK4raNCQXQ.roa (raw, json)
Hash identifier: 8pxU87ReXu+zUvnHMgNoCqnGZeyMcuTCTuaMxbLlGWs=
Subject key identifier: 4F:FF:06:26:12:98:6A:97:BD:FB:2F:C2:B7:02:B8:AD:A3:42:41:74
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 09521968
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T_8GJhKYape9-y_CtwK4raNCQXQ.roa
Signing time: Fri 24 Jun 2022 11:18:59 +0000
ROA not before: Fri 24 Jun 2022 11:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43959
IP address blocks: 45.14.64.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
45.14.65.0/24 maxlen: 24
45.14.66.0/24 maxlen: 24
45.14.67.0/24 maxlen: 24
2a0d:c7c1::/32 maxlen: 48
2a09:7::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156375400 (0x9521968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 24 11:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fff062612986a97bdfb2fc2b702b8ada3424174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:78:8b:05:1a:cb:b1:e7:08:2d:9d:72:1e:
09:32:06:c0:ba:dd:ba:b1:f7:fa:b1:34:69:bd:a7:
bf:da:42:9c:9a:a8:16:43:2a:6a:78:06:dd:5c:fe:
fa:ad:87:bf:1a:5e:72:7d:b8:0d:ac:a9:68:0b:b1:
27:49:4e:d8:b0:c6:b9:c1:fb:24:57:65:34:5c:5e:
62:84:4e:75:16:f1:e4:47:14:ed:cd:4f:e9:52:01:
7f:31:5d:4e:b9:fa:7a:4d:a3:e5:62:c2:a3:cb:f5:
77:53:65:63:7a:2a:92:fa:14:ac:81:14:49:c4:47:
b3:25:fe:2a:7f:49:bf:d0:f1:8b:6d:68:6d:e5:a8:
33:e6:c7:f0:64:2a:4c:a3:6d:22:16:f5:dc:89:b3:
0a:5e:d5:07:9d:f5:7b:f0:83:42:87:e3:0d:16:5e:
60:dc:ff:f9:f3:0d:8b:3f:7e:fa:5f:76:b3:c9:a8:
35:92:55:0e:8f:35:5f:e9:7a:2a:38:17:84:f1:dd:
54:b5:e8:f4:11:74:ea:79:49:f6:15:93:31:03:78:
3f:3a:20:6c:f0:80:ad:19:3c:48:68:05:a2:80:dc:
16:22:02:43:7c:02:e9:20:1c:e1:fe:56:52:81:5a:
eb:86:a0:7b:1f:fe:33:a2:de:65:51:25:f9:b2:62:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:06:26:12:98:6A:97:BD:FB:2F:C2:B7:02:B8:AD:A3:42:41:74
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/T_8GJhKYape9-y_CtwK4raNCQXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
92.60.43.0/24
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1d:33:23:f4:59:03:45:ce:d4:58:b2:91:07:2c:eb:28:f4:
a7:5e:70:c0:c0:d8:63:84:33:f8:9a:20:59:c8:ba:46:64:4c:
ab:7e:c2:1c:a8:73:f0:d3:7c:16:69:2c:72:1b:35:41:ec:58:
ce:af:f1:84:0b:63:94:d5:2f:1f:48:1d:56:d7:d4:8c:5a:32:
94:7b:6f:f9:48:91:89:7c:44:ba:a4:79:be:e8:5f:61:55:ec:
20:5c:88:61:d7:85:2f:db:23:70:10:41:0e:9c:50:79:25:ea:
39:f3:40:44:95:26:08:1a:da:79:dd:25:b5:3f:ab:e9:44:35:
fd:e1:60:e0:68:fc:c4:4f:74:23:0b:ef:41:37:84:09:2e:64:
10:be:ff:b4:44:e4:04:00:b4:57:56:ea:3e:fa:8c:79:02:5c:
75:d5:09:03:f7:64:e3:21:bd:8e:69:26:0e:47:cc:28:9b:b9:
05:a3:34:7e:5c:77:2d:3a:65:fe:e6:74:68:6c:62:b2:b1:bf:
c2:14:94:5b:a1:6d:4e:16:16:fd:ab:3f:9a:1d:71:08:f0:c1:
64:fb:34:5e:cd:0b:f4:df:44:d6:96:3e:e3:5f:f6:df:84:19:
08:2c:8f:d0:3e:a5:a7:05:80:8c:b1:a1:39:95:09:bc:42:b5:
2c:5d:a1:65
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIECVIZaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDYy
NDExMTg1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGZmZjA2MjYxMjk4
NmE5N2JkZmIyZmMyYjcwMmI4YWRhMzQyNDE3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIz6eIsFGsux5wgtnXIeCTIGwLrdurH3+rE0ab2nv9pCnJqo
FkMqangG3Vz++q2Hvxpecn24DaypaAuxJ0lO2LDGucH7JFdlNFxeYoROdRbx5EcU
7c1P6VIBfzFdTrn6ek2j5WLCo8v1d1NlY3oqkvoUrIEUScRHsyX+Kn9Jv9Dxi21o
beWoM+bH8GQqTKNtIhb13ImzCl7VB531e/CDQofjDRZeYNz/+fMNiz9++l92s8mo
NZJVDo81X+l6KjgXhPHdVLXo9BF06nlJ9hWTMQN4PzogbPCArRk8SGgFooDcFiIC
Q3wC6SAc4f5WUoFa64agex/+M6LeZVEl+bJiUVcCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBRP/wYmEphql737L8K3Arito0JBdDAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L1RfOEdKaEtZYXBlOS15X0N0d0s0cmFOQ1FYUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswEgQCAAEwDAMEAi0OQAMEAFw8KzAVBAIAAjAPAwYE
KgkABwADBQAqDcfBMA0GCSqGSIb3DQEBCwUAA4IBAQBcHTMj9FkDRc7UWLKRByzr
KPSnXnDAwNhjhDP4miBZyLpGZEyrfsIcqHPw03wWaSxyGzVB7FjOr/GEC2OU1S8f
SB1W19SMWjKUe2/5SJGJfES6pHm+6F9hVewgXIhh14Uv2yNwEEEOnFB5Jeo580BE
lSYIGtp53SW1P6vpRDX94WDgaPzET3QjC+9BN4QJLmQQvv+0ROQEALRXVuo++ox5
Alx11QkD92TjIb2OaSYOR8wom7kFozR+XHctOmX+5nRobGKysb/CFJRboW1OFhb9
qz+aHXEI8MFk+zRezQv030TWlj7jX/bfhBkILI/QPqWnBYCMsaE5lQm8QrUsXaFl
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org