Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/w2AUZ9jMGm3P_kjmIvI-pEAuNLE.roa
File: w2AUZ9jMGm3P_kjmIvI-pEAuNLE.roa (raw, json)
Hash identifier: yf9+ZX/xAu6HYAQSXcWUVKmTzwZgp1IzH5fQxjCFGb4=
Subject key identifier: C3:60:14:67:D8:CC:1A:6D:CF:FE:48:E6:22:F2:3E:A4:40:2E:34:B1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 07B04A75
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/w2AUZ9jMGm3P_kjmIvI-pEAuNLE.roa
Signing time: Sat 01 Jan 2022 08:01:52 +0000
ROA not before: Sat 01 Jan 2022 08:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210937
IP address blocks: 45.143.0.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
2a09:4::/48 maxlen: 48
2a09:2::/48 maxlen: 48
2a09:3::/48 maxlen: 48
2a09:5::/48 maxlen: 48
2a09:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128993909 (0x7b04a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3601467d8cc1a6dcffe48e622f23ea4402e34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:33:65:4a:b0:ea:33:fa:66:e9:02:59:1e:
87:e8:7c:03:0a:d0:51:94:00:d1:69:4c:24:fe:60:
2d:f9:1c:ff:45:9f:36:94:e7:28:61:81:e3:69:8d:
c8:ad:ec:f7:3c:cd:a8:8f:08:02:d6:98:cf:62:0e:
9f:0d:24:84:95:d4:bb:e5:c6:a4:1a:dd:ea:b3:44:
ab:0f:3c:c0:f4:7e:34:44:5a:df:42:d8:8f:93:88:
66:1b:4c:c7:a8:d8:4d:db:50:b7:e5:3e:93:7e:21:
d4:6c:06:de:45:bd:92:9b:91:64:c1:4d:a1:7f:53:
7b:72:76:b3:25:2a:44:2a:7d:13:5d:52:00:76:94:
1d:68:d7:16:3f:af:bf:4f:ca:02:9d:03:a4:1d:3a:
89:a1:7c:0c:bd:4c:cc:76:84:15:64:c6:63:77:66:
04:a2:7e:3b:6b:eb:d6:64:6e:2d:1b:54:2f:13:ee:
ed:d6:de:1f:32:19:77:a4:01:a1:ad:61:f1:07:2e:
b0:92:79:0c:41:53:bd:03:02:93:6c:91:1d:b7:0d:
69:67:6e:9a:02:05:7b:60:af:80:e2:55:c1:d5:ca:
4f:10:19:f3:fa:6d:45:88:21:fb:8d:08:01:f5:78:
9e:e2:7e:b1:e6:7e:21:36:9e:1c:8e:1b:c7:61:13:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:14:67:D8:CC:1A:6D:CF:FE:48:E6:22:F2:3E:A4:40:2E:34:B1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/w2AUZ9jMGm3P_kjmIvI-pEAuNLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.0.0/22
45.153.244.0/22
IPv6:
2a09:1::/48
2a09:2::/48
2a09:3::/48
2a09:4::/48
2a09:5::/48
Signature Algorithm: sha256WithRSAEncryption
6e:32:97:e5:36:51:70:69:d0:ca:06:1a:c6:03:c6:3a:f6:73:
ad:63:87:60:e4:71:9c:3b:70:7a:41:24:30:2c:5c:3a:4f:90:
a7:4d:94:46:ce:d9:0e:f5:bb:ac:b0:f0:ee:4e:8a:f4:5b:68:
6a:69:a7:fa:5e:08:7c:d2:12:47:d6:e5:7c:df:9b:ce:75:f8:
52:01:ba:65:eb:69:eb:a7:99:cb:86:e6:80:06:c3:94:68:90:
02:d3:18:25:2f:ac:dc:b6:f3:41:4a:48:88:32:03:5a:ff:79:
4f:e8:e7:7e:0b:9b:82:f7:1f:47:ff:a6:06:ae:36:12:d5:fa:
98:f7:fd:75:35:59:cc:3a:c5:bf:00:c8:30:ac:1a:2f:ba:e1:
81:5d:4f:06:13:50:fa:f3:fb:c7:9e:f2:99:d1:63:53:14:4b:
30:8c:29:9b:30:d7:7e:4d:1c:84:cd:7f:81:b7:28:b2:8c:df:
15:47:1e:a1:9a:e2:7d:52:12:3a:7c:5c:50:a6:fb:39:65:cc:
64:10:41:9c:c6:f9:55:5f:b1:70:c1:89:b8:70:f5:3d:d9:82:
ce:4c:9d:cf:15:d7:fc:5a:6c:61:aa:63:69:0e:c9:fa:71:6d:
dd:fb:8f:a9:67:5a:f7:1c:0e:ea:90:49:24:66:7b:f5:cd:a9:
03:46:17:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIEB7BKdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM2MDE0NjdkOGNj
MWE2ZGNmZmU0OGU2MjJmMjNlYTQ0MDJlMzRiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI8eM2VKsOoz+mbpAlkeh+h8AwrQUZQA0WlMJP5gLfkc/0Wf
NpTnKGGB42mNyK3s9zzNqI8IAtaYz2IOnw0khJXUu+XGpBrd6rNEqw88wPR+NERa
30LYj5OIZhtMx6jYTdtQt+U+k34h1GwG3kW9kpuRZMFNoX9Te3J2syUqRCp9E11S
AHaUHWjXFj+vv0/KAp0DpB06iaF8DL1MzHaEFWTGY3dmBKJ+O2vr1mRuLRtULxPu
7dbeHzIZd6QBoa1h8QcusJJ5DEFTvQMCk2yRHbcNaWdumgIFe2CvgOJVwdXKTxAZ
8/ptRYgh+40IAfV4nuJ+seZ+ITaeHI4bx2ET2KkCAwEAAaOCAkQwggJAMB0GA1Ud
DgQWBBTDYBRn2Mwabc/+SOYi8j6kQC40sTAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L3cyQVVaOWpNR20zUF9ram1JdkktcEVBdU5MRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBa
BggrBgEFBQcBBwEB/wRLMEkwEgQCAAEwDAMEAi2PAAMEAi2Z9DAzBAIAAjAtAwcA
KgkAAQAAAwcAKgkAAgAAAwcAKgkAAwAAAwcAKgkABAAAAwcAKgkABQAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBuMpflNlFwadDKBhrGA8Y69nOtY4dg5HGcO3B6QSQwLFw6
T5CnTZRGztkO9bussPDuTor0W2hqaaf6Xgh80hJH1uV835vOdfhSAbpl62nrp5nL
huaABsOUaJAC0xglL6zctvNBSkiIMgNa/3lP6Od+C5uC9x9H/6YGrjYS1fqY9/11
NVnMOsW/AMgwrBovuuGBXU8GE1D68/vHnvKZ0WNTFEswjCmbMNd+TRyEzX+Btyiy
jN8VRx6hmuJ9UhI6fFxQpvs5ZcxkEEGcxvlVX7FwwYm4cPU92YLOTJ3PFdf8Wmxh
qmNpDsn6cW3d+4+pZ1r3HA7qkEkkZnv1zakDRheg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org