Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3KH8Xw2uBNc3bJzPKgWJgYITel4.roa
File: 3KH8Xw2uBNc3bJzPKgWJgYITel4.roa (raw, json)
Hash identifier: GPDzznVpybrRheWEejad27+4bZsESEjx7+mJu1Rp0GI=
Subject key identifier: DC:A1:FC:5F:0D:AE:04:D7:37:6C:9C:CF:2A:05:89:81:82:13:7A:5E
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018333420CD61FAC9C9B6BE2D44D80AB13F9
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3KH8Xw2uBNc3bJzPKgWJgYITel4.roa
Signing time: Mon 12 Sep 2022 19:51:50 +0000
ROA not before: Mon 12 Sep 2022 19:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.151.0/24 maxlen: 24
45.92.28.0/24 maxlen: 24
45.92.28.0/23 maxlen: 23
45.92.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:33:42:0c:d6:1f:ac:9c:9b:6b:e2:d4:4d:80:ab:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Sep 12 19:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dca1fc5f0dae04d7376c9ccf2a05898182137a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:3a:de:11:7a:3b:61:16:1e:b3:5f:76:da:
cc:20:6f:89:22:4d:b3:c2:00:19:40:87:98:00:6f:
6b:79:a7:c6:1d:3f:5e:91:aa:75:fd:f1:03:b6:72:
54:34:74:96:52:0c:36:cb:a4:1a:d5:da:e4:f7:d2:
6e:2b:67:ed:9c:cf:a9:7c:aa:6a:f4:f8:89:0e:db:
7d:fc:4d:74:cf:d4:01:cf:c8:be:99:a9:bd:a1:48:
f4:50:0b:e2:9d:b1:9f:0f:90:67:48:07:57:1b:6e:
9a:c1:a3:b4:25:d1:2e:71:64:6a:28:e2:9f:3e:c8:
8a:5b:2a:a0:0a:ba:10:48:69:53:62:54:3a:00:8d:
9c:6d:65:36:72:d2:2a:a7:da:57:66:83:df:c7:25:
8c:45:0f:a2:3a:e3:83:33:7a:fd:34:cd:45:4d:4f:
34:f3:d5:19:2d:1d:5c:4b:6e:55:b9:58:6f:3a:9a:
1b:c0:97:b3:32:39:21:2e:32:1b:87:2b:13:3a:46:
8b:57:8d:41:bc:34:ae:80:9e:30:0e:b1:f6:5c:bd:
c8:8f:81:3d:2e:51:68:81:45:0c:35:17:99:a1:b0:
8e:f2:02:0a:4c:50:5d:f7:f7:46:42:4a:af:1a:5d:
4e:fb:52:4b:35:dc:89:10:4a:e0:c0:c8:04:b3:be:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:FC:5F:0D:AE:04:D7:37:6C:9C:CF:2A:05:89:81:82:13:7A:5E
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3KH8Xw2uBNc3bJzPKgWJgYITel4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
45.92.28.0/23
Signature Algorithm: sha256WithRSAEncryption
61:65:21:2e:0d:5a:4d:35:44:50:bb:9a:10:7b:d0:f0:75:b7:
5b:de:93:44:7b:d3:8c:38:75:04:10:93:3e:d3:63:85:4b:22:
7a:77:ca:5f:a8:1f:7d:74:46:7e:37:24:e6:0e:ff:b4:ed:c5:
d7:bb:44:fa:9d:e6:d7:a7:c0:85:02:66:a8:3f:4b:28:eb:f9:
30:3a:e4:0d:0c:5c:a8:3c:88:17:70:1f:50:78:b4:f0:79:a9:
a4:a1:ef:c5:40:53:99:07:9f:90:98:5e:24:43:b1:9a:5b:5c:
35:d9:f6:9f:6f:6e:9a:23:7a:72:a0:8c:4d:f8:52:b5:53:01:
47:9e:78:6c:c2:4e:23:1a:b7:df:ab:a8:c3:ff:9d:ab:28:5e:
e1:d7:1a:3c:9c:3c:7c:39:d6:1a:0f:02:2f:05:47:7a:95:ce:
94:ef:fc:4e:24:30:76:3f:32:ba:bb:83:57:35:8e:65:0f:48:
0b:f1:a7:82:19:7b:8c:64:95:35:2f:6b:7d:f7:61:f7:72:61:
a6:0e:93:dc:d9:2e:6f:79:c1:73:0f:10:e8:3e:3f:14:87:74:
e4:67:58:8d:fa:24:32:8d:04:c9:6d:18:32:d9:b9:93:5f:dc:
52:a0:ab:78:d6:4a:ac:fb:99:0d:f5:62:fb:65:ba:1a:14:56:
d4:e1:2d:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMzQgzWH6ycm2vi1E2AqxP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjIwOTEyMTk1MTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ExZmM1ZjBkYWUwNGQ3Mzc2YzljY2YyYTA1ODk4MTgyMTM3YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJY63hF6O2EWHrNfdtrMIG+JIk2z
wgAZQIeYAG9reafGHT9ekap1/fEDtnJUNHSWUgw2y6Qa1drk99JuK2ftnM+pfKpq
9PiJDtt9/E10z9QBz8i+mam9oUj0UAvinbGfD5BnSAdXG26awaO0JdEucWRqKOKf
PsiKWyqgCroQSGlTYlQ6AI2cbWU2ctIqp9pXZoPfxyWMRQ+iOuODM3r9NM1FTU80
89UZLR1cS25VuVhvOpobwJezMjkhLjIbhysTOkaLV41BvDSugJ4wDrH2XL3Ij4E9
LlFogUUMNReZobCO8gIKTFBd9/dGQkqvGl1O+1JLNdyJEErgwMgEs760HQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNyh/F8NrgTXN2yczyoFiYGCE3peMB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvM0tIOFh3MnVCTmMzYkp6UEtnV0pnWUlUZWw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGXAwQB
LVwcMA0GCSqGSIb3DQEBCwUAA4IBAQBhZSEuDVpNNURQu5oQe9Dwdbdb3pNEe9OM
OHUEEJM+02OFSyJ6d8pfqB99dEZ+NyTmDv+07cXXu0T6nebXp8CFAmaoP0so6/kw
OuQNDFyoPIgXcB9QeLTweamkoe/FQFOZB5+QmF4kQ7GaW1w12fafb26aI3pyoIxN
+FK1UwFHnnhswk4jGrffq6jD/52rKF7h1xo8nDx8OdYaDwIvBUd6lc6U7/xOJDB2
PzK6u4NXNY5lD0gL8aeCGXuMZJU1L2t992H3cmGmDpPc2S5vecFzDxDoPj8Uh3Tk
Z1iN+iQyjQTJbRgy2bmTX9xSoKt41kqs+5kN9WL7ZboaFFbU4S0Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org