Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4f-w3Fbi8_kBLSXbUVQpC2QJS1U.roa
File: 4f-w3Fbi8_kBLSXbUVQpC2QJS1U.roa (raw, json)
Hash identifier: 2avHZLW1kI92lklHEBMCbDzj0lkIcxCHXcBI7dCeUSA=
Subject key identifier: E1:FF:B0:DC:56:E2:F3:F9:01:2D:25:DB:51:54:29:0B:64:09:4B:55
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1A316407
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4f-w3Fbi8_kBLSXbUVQpC2QJS1U.roa
Signing time: Fri 21 Jan 2022 13:02:18 +0000
ROA not before: Fri 21 Jan 2022 13:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 45.92.248.0/22 maxlen: 24
45.83.206.0/24 maxlen: 24
45.95.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439444487 (0x1a316407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 21 13:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1ffb0dc56e2f3f9012d25db5154290b64094b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:cf:6d:7b:94:49:c3:19:a6:36:54:19:d2:
98:66:be:68:f4:76:22:ab:5f:87:98:5c:07:77:b0:
26:51:0d:a1:de:58:09:93:45:05:22:13:75:f4:d4:
21:c7:9a:b0:36:b6:8a:6f:62:f6:a2:fa:5f:20:a9:
37:4b:02:e2:e7:da:5a:6b:88:e4:16:c0:3f:f4:6b:
76:09:2e:2e:dd:50:d7:b3:d0:8a:42:30:50:a6:e4:
89:a7:47:87:c4:75:a7:db:ea:f3:19:23:c3:d2:91:
d8:88:3a:a4:c3:f9:2a:16:ad:40:48:10:4d:30:e0:
9f:54:f4:59:88:27:8d:09:44:7b:00:1f:20:4b:50:
2d:6d:62:c6:98:a7:f2:e9:8c:db:85:40:2c:3d:15:
80:af:63:32:32:56:a0:97:e0:5d:6a:4a:52:c6:51:
b5:50:7e:16:be:c2:d1:cd:9a:37:e8:e1:97:c7:8b:
eb:d6:3c:fe:1f:88:1c:28:a3:8a:fa:cd:e6:15:da:
e8:55:81:86:ac:2b:e5:03:34:f8:4c:ee:77:36:9c:
4a:a6:2f:3f:06:f4:56:1f:52:c5:09:3e:8e:92:3d:
56:ab:44:c5:8e:8d:13:22:1a:0d:50:5d:fc:ec:80:
b0:f6:35:a8:c0:07:2b:27:44:1e:28:a3:2e:50:f3:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:B0:DC:56:E2:F3:F9:01:2D:25:DB:51:54:29:0B:64:09:4B:55
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4f-w3Fbi8_kBLSXbUVQpC2QJS1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.206.0/24
45.92.248.0/22
45.95.176.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c1:92:e4:e1:14:1a:7f:2e:44:0d:23:2e:3c:3e:b9:fc:04:
92:72:29:00:21:8b:98:a0:95:7f:31:dd:86:b5:a8:d4:14:a2:
18:77:24:cf:30:1a:0b:4c:7f:03:6f:34:8d:f5:c2:ed:63:95:
a9:97:ba:b8:d8:cc:83:e6:3f:fe:ec:4b:60:83:fe:5d:18:91:
8f:bc:b0:86:5c:98:fb:6f:3e:be:48:c0:9c:60:e7:fd:61:a0:
af:33:41:ad:93:d7:5f:8c:7e:2d:90:2c:f3:2e:c7:05:28:ac:
61:58:c9:b3:6c:7f:a2:61:48:5e:9c:23:5d:da:a2:45:3f:c0:
04:0f:33:a3:19:9f:a6:a3:3c:ed:42:dd:ae:15:97:69:23:4c:
46:a5:32:2b:60:aa:ed:3b:7e:53:bb:f2:db:27:87:88:23:68:
43:01:fb:a0:a1:00:ab:6f:07:28:85:f9:cd:1a:ee:16:60:db:
9b:88:37:21:61:30:a6:ae:56:36:19:52:5c:ea:dd:b6:9f:bc:
fe:c6:30:f3:81:28:2f:0a:17:95:2c:cb:6f:23:96:90:da:ec:
da:42:44:f1:46:82:a8:7f:e4:a4:c0:09:95:37:d8:f8:6c:22:
88:97:7b:44:0e:df:e6:5d:68:b1:5a:a5:1a:30:52:6a:82:3f:
5f:b3:ed:ce
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGjFkBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEy
MTEzMDIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTFmZmIwZGM1NmUy
ZjNmOTAxMmQyNWRiNTE1NDI5MGI2NDA5NGI1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjKz217lEnDGaY2VBnSmGa+aPR2Iqtfh5hcB3ewJlENod5Y
CZNFBSITdfTUIceasDa2im9i9qL6XyCpN0sC4ufaWmuI5BbAP/RrdgkuLt1Q17PQ
ikIwUKbkiadHh8R1p9vq8xkjw9KR2Ig6pMP5KhatQEgQTTDgn1T0WYgnjQlEewAf
IEtQLW1ixpin8umM24VALD0VgK9jMjJWoJfgXWpKUsZRtVB+Fr7C0c2aN+jhl8eL
69Y8/h+IHCijivrN5hXa6FWBhqwr5QM0+EzudzacSqYvPwb0Vh9SxQk+jpI9VqtE
xY6NEyIaDVBd/OyAsPY1qMAHKydEHiijLlDzXv0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTh/7DcVuLz+QEtJdtRVCkLZAlLVTAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
LzRmLXczRmJpOF9rQkxTWGJVVlFwQzJRSlMxVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC1TzgMEAi1c+AMEAi1fsDANBgkq
hkiG9w0BAQsFAAOCAQEAZsGS5OEUGn8uRA0jLjw+ufwEknIpACGLmKCVfzHdhrWo
1BSiGHckzzAaC0x/A280jfXC7WOVqZe6uNjMg+Y//uxLYIP+XRiRj7ywhlyY+28+
vkjAnGDn/WGgrzNBrZPXX4x+LZAs8y7HBSisYVjJs2x/omFIXpwjXdqiRT/ABA8z
oxmfpqM87ULdrhWXaSNMRqUyK2Cq7Tt+U7vy2yeHiCNoQwH7oKEAq28HKIX5zRru
FmDbm4g3IWEwpq5WNhlSXOrdtp+8/sYw84EoLwoXlSzLbyOWkNrs2kJE8UaCqH/k
pMAJlTfY+GwiiJd7RA7f5l1osVqlGjBSaoI/X7Ptzg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org