Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/yeS4Vr7RP3W9_WcK-o5Qic5gUI4.roa
File: yeS4Vr7RP3W9_WcK-o5Qic5gUI4.roa (raw, json)
Hash identifier: h7hVkHkVEcAoTOGMyve4uNurr53I+8zGb6OBwzvzPFk=
Subject key identifier: C9:E4:B8:56:BE:D1:3F:75:BD:FD:67:0A:FA:8E:50:89:CE:60:50:8E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018480D61A8C16C7F028E7F2BC4C18D828F2
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/yeS4Vr7RP3W9_WcK-o5Qic5gUI4.roa
Signing time: Wed 16 Nov 2022 14:27:05 +0000
ROA not before: Wed 16 Nov 2022 14:27:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57814
IP address blocks: 45.138.44.0/24 maxlen: 32
45.138.44.0/22 maxlen: 32
185.110.93.0/24 maxlen: 32
45.138.45.0/24 maxlen: 32
45.138.47.0/24 maxlen: 32
195.69.140.0/22 maxlen: 32
45.138.46.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:d6:1a:8c:16:c7:f0:28:e7:f2:bc:4c:18:d8:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Nov 16 14:27:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9e4b856bed13f75bdfd670afa8e5089ce60508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:9d:bc:37:54:0d:c1:ec:ce:a4:4b:8b:d8:
97:34:12:4d:ad:e0:90:e4:cc:61:a0:50:b3:e8:76:
53:94:87:8b:3a:3d:c8:07:ae:13:19:05:d2:46:ab:
9e:41:df:29:58:d9:d9:50:0b:f6:3e:a3:d4:7f:5c:
cd:54:ac:2b:06:79:af:fc:48:f3:d2:a4:05:fd:99:
93:4a:12:07:e3:a0:b7:8d:df:92:26:60:28:00:2a:
22:89:df:7f:c0:5e:ea:02:52:72:70:e8:80:d3:bf:
7b:78:1d:00:4b:fe:81:99:60:06:b9:83:f3:3b:50:
99:f8:97:17:35:57:4b:87:06:08:ae:3c:74:c5:e4:
b2:40:65:9b:13:6f:28:94:71:ad:5a:70:37:92:e7:
83:51:3c:3e:b1:8c:2b:8a:56:7b:90:5d:8e:b4:5a:
83:ef:e2:b8:1f:14:91:70:cd:c4:e1:36:d1:fe:8a:
b3:14:14:f0:54:3a:c5:7e:af:27:e4:e9:36:13:bb:
a7:a2:1b:0d:05:de:71:3c:2f:e4:fc:a6:b9:71:aa:
e4:79:8c:34:74:ae:53:7e:d9:28:33:9f:93:66:94:
6a:62:8f:96:df:19:ab:af:21:c3:79:0a:4d:90:2e:
d6:7a:6a:67:ee:55:a0:6d:8d:5f:5f:60:64:6e:c2:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E4:B8:56:BE:D1:3F:75:BD:FD:67:0A:FA:8E:50:89:CE:60:50:8E
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/yeS4Vr7RP3W9_WcK-o5Qic5gUI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.44.0/22
185.110.93.0/24
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
96:d9:80:09:ea:58:5e:71:c5:8d:bf:2d:31:9f:cf:35:ce:4d:
e5:f6:0a:90:63:9c:46:20:02:d0:a5:0c:10:a9:80:43:e3:2a:
e6:9e:66:94:3a:5d:22:d4:04:d1:6d:68:e3:ed:a1:68:ef:3d:
2a:ee:a6:d8:19:fe:c7:3b:47:c4:c5:b6:fc:7e:97:86:5d:48:
d8:37:4b:ca:9d:3b:2c:ee:d8:15:d2:9d:99:8c:21:de:30:2a:
35:c1:7e:fd:50:3b:47:66:16:04:b0:8d:df:6e:e9:21:af:b9:
15:83:94:fe:e8:be:e4:87:c2:d7:37:a1:19:65:d0:1e:8f:6b:
7e:91:b8:c6:6c:35:9d:32:78:af:0a:46:a2:00:b6:a3:48:99:
43:57:65:0c:84:92:df:a7:43:5d:b1:79:d6:21:7f:28:49:3f:
5e:98:9b:0a:7a:c9:26:61:71:b5:77:88:50:dd:03:93:8e:7b:
fb:3f:c9:ef:0e:d4:6b:e1:83:b6:9b:5a:69:ea:64:1d:bc:54:
99:f3:73:af:71:05:7c:97:9f:44:de:bb:a5:f2:a3:ea:e4:d3:
a6:63:43:48:68:9c:a5:c0:36:f8:d6:ae:e8:55:16:46:5e:b9:
82:1a:97:38:6c:53:f9:5d:92:70:16:50:30:6f:38:a4:4a:a8:
c2:54:68:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYSA1hqMFsfwKOfyvEwY2CjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi
NDFhNGUwHhcNMjIxMTE2MTQyNzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWU0Yjg1NmJlZDEzZjc1YmRmZDY3MGFmYThlNTA4OWNlNjA1MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5udvDdUDcHszqRLi9iXNBJNreCQ
5MxhoFCz6HZTlIeLOj3IB64TGQXSRqueQd8pWNnZUAv2PqPUf1zNVKwrBnmv/Ejz
0qQF/ZmTShIH46C3jd+SJmAoACoiid9/wF7qAlJycOiA0797eB0AS/6BmWAGuYPz
O1CZ+JcXNVdLhwYIrjx0xeSyQGWbE28olHGtWnA3kueDUTw+sYwrilZ7kF2OtFqD
7+K4HxSRcM3E4TbR/oqzFBTwVDrFfq8n5Ok2E7unohsNBd5xPC/k/Ka5carkeYw0
dK5TftkoM5+TZpRqYo+W3xmrryHDeQpNkC7Wempn7lWgbY1fX2BkbsK8RQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMnkuFa+0T91vf1nCvqOUInOYFCOMB8GA1UdIwQY
MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt
NDRmZGU5NmI4YWVjLzEveWVTNFZyN1JQM1c5X1djSy1vNVFpYzVnVUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj
LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYosAwQA
uW5dAwQCw0WMMA0GCSqGSIb3DQEBCwUAA4IBAQCW2YAJ6lheccWNvy0xn881zk3l
9gqQY5xGIALQpQwQqYBD4yrmnmaUOl0i1ATRbWjj7aFo7z0q7qbYGf7HO0fExbb8
fpeGXUjYN0vKnTss7tgV0p2ZjCHeMCo1wX79UDtHZhYEsI3fbukhr7kVg5T+6L7k
h8LXN6EZZdAej2t+kbjGbDWdMnivCkaiALajSJlDV2UMhJLfp0NdsXnWIX8oST9e
mJsKeskmYXG1d4hQ3QOTjnv7P8nvDtRr4YO2m1pp6mQdvFSZ83OvcQV8l59E3rul
8qPq5NOmY0NIaJylwDb41q7oVRZGXrmCGpc4bFP5XZJwFlAwbzikSqjCVGj8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-fra.rpki-client.org