Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7b_sNl23jn5gv7GUDh_jrPi7zKU.roa
File: 7b_sNl23jn5gv7GUDh_jrPi7zKU.roa (raw, json)
Hash identifier: KYXbVXt2B+PovefdELvFggY1DAxVJp9hALA9XLMVGQM=
Subject key identifier: ED:BF:EC:36:5D:B7:8E:7E:60:BF:B1:94:0E:1F:E3:AC:F8:BB:CC:A5
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 05846598
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7b_sNl23jn5gv7GUDh_jrPi7zKU.roa
Signing time: Sat 01 Jan 2022 06:04:26 +0000
ROA not before: Sat 01 Jan 2022 06:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.81.148.0/24 maxlen: 24
185.229.243.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
5.181.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92562840 (0x5846598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edbfec365db78e7e60bfb1940e1fe3acf8bbcca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:8e:5e:b3:20:0c:e6:9a:8a:2e:94:f1:c9:
c2:7f:af:b3:ce:76:88:b5:50:e1:05:3b:0a:3d:18:
38:ba:17:ca:97:7e:7f:94:5c:3e:72:6f:e4:0c:b9:
f6:86:4b:68:85:b9:5e:ed:1b:ad:4a:05:d0:eb:ef:
15:3e:f4:90:be:28:5f:93:e5:f6:b9:20:8f:64:0c:
5c:58:63:65:1f:10:a1:82:ba:14:66:3c:59:02:6e:
9a:4f:fc:68:53:6b:ef:08:f1:24:79:1c:d9:f3:cb:
53:7d:c2:98:b8:fa:ba:70:a4:c8:0d:07:3a:f5:81:
86:66:50:7d:e2:ba:bd:bf:e0:9a:aa:11:9e:9a:2d:
c0:d6:1d:cd:c1:20:23:9c:16:e3:21:43:fe:70:04:
22:9e:87:28:90:94:b6:93:33:57:a1:06:ba:2e:8f:
7d:e0:05:d7:6a:c5:e5:80:c1:e2:d6:56:43:d1:ff:
ff:66:ff:b7:59:05:e2:10:37:04:b3:f8:b6:93:b1:
7d:72:f5:82:7a:f4:34:a3:ac:3c:18:7a:d2:47:a7:
a3:aa:6f:cf:60:e2:b4:cf:80:0f:fe:7e:cc:89:1a:
3a:b0:5d:fc:c8:a3:6c:02:cb:60:0c:2c:96:07:e4:
fb:ef:03:d5:25:5e:6e:c1:88:7b:58:dd:d0:9e:b0:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:EC:36:5D:B7:8E:7E:60:BF:B1:94:0E:1F:E3:AC:F8:BB:CC:A5
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7b_sNl23jn5gv7GUDh_jrPi7zKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.166.0/24
45.81.148.0/24
185.229.243.0/24
193.39.187.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fe:53:2a:08:8a:6f:53:1d:a4:33:16:d1:16:2a:03:bd:38:
c7:68:08:22:86:c3:1d:94:0a:e3:91:6a:e1:03:4a:13:76:13:
57:34:e0:8b:80:f4:a2:af:c6:98:42:a7:d5:88:08:53:af:79:
a9:ba:2c:48:3f:12:b2:ce:cd:c4:23:54:16:cd:ee:3a:04:05:
f7:e3:21:23:3c:d7:60:fb:9d:4b:db:aa:25:1e:e9:dd:51:34:
a0:59:d3:a4:4c:15:f4:87:6a:f9:68:8d:ad:fe:ef:3b:28:c2:
92:1e:c1:f8:9d:96:b6:68:27:e6:79:6d:7c:78:a7:2b:b9:d5:
da:45:b1:89:92:29:8b:bb:2b:79:31:6b:3e:f1:24:92:14:51:
d7:dd:76:4f:d5:26:f2:38:4b:9a:f0:5b:ff:10:f4:e0:67:0a:
93:a1:c9:9c:48:77:fe:f3:c2:5a:37:1b:bc:4c:2e:a4:a5:8e:
61:cd:aa:5c:5f:d4:12:31:39:6a:b0:63:6e:29:4b:b9:84:2b:
48:3f:64:e4:b8:ca:39:31:3e:65:50:c6:2c:16:06:e9:15:84:
3e:4d:02:34:09:da:32:7d:51:a5:00:38:c8:5f:12:f3:ce:6f:
30:f9:88:b8:06:64:0d:30:87:87:2f:2f:2a:5b:1f:7e:1c:b3:
e0:94:1b:de
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBYRlmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWM4YjczYWI3YmRlYjc2ZmY0OGIyY2EwOTk2MTZlZGJlNzFjNDI2MB4XDTIyMDEw
MTA2MDQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRiZmVjMzY1ZGI3
OGU3ZTYwYmZiMTk0MGUxZmUzYWNmOGJiY2NhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXZjl6zIAzmmooulPHJwn+vs852iLVQ4QU7Cj0YOLoXypd+
f5RcPnJv5Ay59oZLaIW5Xu0brUoF0OvvFT70kL4oX5Pl9rkgj2QMXFhjZR8QoYK6
FGY8WQJumk/8aFNr7wjxJHkc2fPLU33CmLj6unCkyA0HOvWBhmZQfeK6vb/gmqoR
npotwNYdzcEgI5wW4yFD/nAEIp6HKJCUtpMzV6EGui6PfeAF12rF5YDB4tZWQ9H/
/2b/t1kF4hA3BLP4tpOxfXL1gnr0NKOsPBh60keno6pvz2DitM+AD/5+zIkaOrBd
/MijbALLYAwslgfk++8D1SVebsGIe1jd0J6w5l0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTtv+w2XbeOfmC/sZQOH+Os+LvMpTAfBgNVHSMEGDAWgBSByLc6t73rdv9I
ssoJlhbtvnHEJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djaTNPcmU5NjNiX1NMTEtDWllXN2I1eHhDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvMjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8x
LzdiX3NObDIzam41Z3Y3R1VEaF9qclBpN3pLVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
MjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8xL2djaTNPcmU5NjNi
X1NMTEtDWllXN2I1eHhDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAAW1pgMEAC1RlAMEALnl8wMEAMEn
uzANBgkqhkiG9w0BAQsFAAOCAQEAWf5TKgiKb1MdpDMW0RYqA704x2gIIobDHZQK
45Fq4QNKE3YTVzTgi4D0oq/GmEKn1YgIU695qbosSD8Sss7NxCNUFs3uOgQF9+Mh
IzzXYPudS9uqJR7p3VE0oFnTpEwV9Idq+WiNrf7vOyjCkh7B+J2Wtmgn5nltfHin
K7nV2kWxiZIpi7sreTFrPvEkkhRR1912T9Um8jhLmvBb/xD04GcKk6HJnEh3/vPC
WjcbvEwupKWOYc2qXF/UEjE5arBjbilLuYQrSD9k5LjKOTE+ZVDGLBYG6RWEPk0C
NAnaMn1RpQA4yF8S885vMPmIuAZkDTCHhy8vKlsffhyz4JQb3g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-ams.rpki-client.org