Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Tri1j40eLpFe-XL1ZDZleeN7Onw.roa
File: Tri1j40eLpFe-XL1ZDZleeN7Onw.roa (raw, json)
Hash identifier: hsiVaut5udL9B6aFsrVID9z1qZxBpvP6vn5K0FBIxGA=
Subject key identifier: 4E:B8:B5:8F:8D:1E:2E:91:5E:F9:72:F5:64:36:65:79:E3:7B:3A:7C
Certificate issuer: /CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Certificate serial: 018506781DC2BF3CC6B7FF9569D9C4DC4670
Authority key identifier: 26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Tri1j40eLpFe-XL1ZDZleeN7Onw.roa
Signing time: Mon 12 Dec 2022 13:13:33 +0000
ROA not before: Mon 12 Dec 2022 13:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.66.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:78:1d:c2:bf:3c:c6:b7:ff:95:69:d9:c4:dc:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Validity
Not Before: Dec 12 13:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb8b58f8d1e2e915ef972f564366579e37b3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:00:bf:32:86:b2:1c:cf:87:bb:2a:e1:25:
aa:80:24:3b:69:50:b3:05:c7:be:8e:cf:10:76:f4:
44:0b:cb:48:e7:c2:9a:67:ec:d4:23:6d:0f:00:7f:
15:6f:9d:cf:df:79:ae:ff:eb:8f:cd:75:60:bf:a1:
ee:e6:f9:de:50:d4:15:b6:50:e8:8a:67:9e:b6:8f:
93:66:4e:b8:f2:6f:4a:c1:27:bb:01:94:f3:01:07:
ea:63:65:8e:b0:48:f5:01:78:bd:aa:46:f8:77:78:
9a:8b:44:70:b2:98:b4:83:94:9d:8e:5f:a6:c7:d5:
b6:10:26:5f:ea:36:57:c7:4a:19:5e:4a:81:06:59:
f5:ab:03:a4:d9:c0:ed:ee:4b:70:b9:85:17:b1:ce:
c0:06:1f:2a:0e:8e:c4:08:7f:bd:ad:a8:22:6d:96:
8f:fa:eb:f9:8d:ff:32:1c:01:ce:37:f5:67:67:45:
13:62:bf:5a:77:33:cf:e7:ef:63:9a:fe:28:8e:31:
a5:36:f3:e6:d7:7a:b7:9f:21:24:38:f9:f6:c1:3d:
9d:b1:99:a2:10:12:c5:f3:0d:9d:66:10:33:f6:63:
ea:19:b4:94:e6:63:1b:85:79:f0:ba:33:f3:7a:1f:
a7:70:9d:62:64:5a:cb:e7:66:c4:0c:43:46:c1:82:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:B5:8F:8D:1E:2E:91:5E:F9:72:F5:64:36:65:79:E3:7B:3A:7C
X509v3 Authority Key Identifier:
keyid:26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/Tri1j40eLpFe-XL1ZDZleeN7Onw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.65.0-45.84.67.255
Signature Algorithm: sha256WithRSAEncryption
8c:fc:d7:82:6a:0d:26:b0:5e:6b:88:4b:bc:f9:6b:f9:5b:36:
86:01:ad:2b:92:66:62:a7:f0:3a:a8:83:44:0f:9b:3c:9b:2f:
47:54:22:9c:ee:49:9f:ec:ca:27:49:09:0e:7c:21:b1:b4:f7:
3e:f5:bf:92:ee:79:56:f6:fc:f7:2e:d6:2b:5a:e4:89:4d:53:
e3:a5:3f:ed:45:76:55:93:86:d1:1a:ac:6a:5b:be:9d:a6:1c:
41:90:11:d7:f0:e2:89:01:63:3d:df:2c:28:ef:e6:ed:6b:87:
76:bf:b5:b1:18:3b:55:e1:57:de:55:05:5b:36:f7:f0:68:4d:
4d:87:27:f2:3c:da:87:bc:1b:a8:54:a1:a0:1c:75:c5:ec:6f:
df:7d:f9:8e:f1:23:f1:44:30:d7:e0:e0:f4:39:d2:41:72:aa:
13:f5:34:f8:14:7e:2a:9f:bc:44:7b:32:ec:cb:ab:90:3d:ed:
a4:28:97:71:99:17:ff:55:ef:60:0a:a4:84:4f:6f:dc:9d:f6:
e9:ff:ef:c8:74:37:38:de:3c:02:84:f9:95:d5:89:56:60:cf:
a0:9c:e1:a0:71:7b:8f:b4:53:58:4b:10:be:0d:dd:03:bb:a4:
4e:25:16:0c:91:84:00:3d:0f:ed:d6:ee:29:90:da:6b:cb:8b:
51:06:4c:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYUGeB3CvzzGt/+VadnE3EZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDBiMmEyOTU0YjVlNzU3MTY0NDQ0ZDQyYmJlOGExNGFk
OWI2OWUwHhcNMjIxMjEyMTMxMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI4YjU4ZjhkMWUyZTkxNWVmOTcyZjU2NDM2NjU3OWUzN2IzYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHQAvzKGshzPh7sq4SWqgCQ7aVCz
Bce+js8QdvREC8tI58KaZ+zUI20PAH8Vb53P33mu/+uPzXVgv6Hu5vneUNQVtlDo
imeeto+TZk648m9KwSe7AZTzAQfqY2WOsEj1AXi9qkb4d3iai0Rwspi0g5Sdjl+m
x9W2ECZf6jZXx0oZXkqBBln1qwOk2cDt7ktwuYUXsc7ABh8qDo7ECH+9ragibZaP
+uv5jf8yHAHON/VnZ0UTYr9adzPP5+9jmv4ojjGlNvPm13q3nyEkOPn2wT2dsZmi
EBLF8w2dZhAz9mPqGbSU5mMbhXnwujPzeh+ncJ1iZFrL52bEDENGwYJOCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE64tY+NHi6RXvly9WQ2ZXnjezp8MB8GA1UdIwQY
MBaAFCbQsqKVS151cWRETUK76KFK2baeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRDeW9wVkxYblZ4WkVSTlFydm9vVXJadHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjQ2YjctNWQyMy00NjkyLWIzOWEt
NmZiY2U3ODgzMThkLzEvVHJpMWo0MGVMcEZlLVhMMVpEWmxlZU43T253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYjQ2YjctNWQyMy00NjkyLWIzOWEtNmZiY2U3ODgzMThk
LzEvSnRDeW9wVkxYblZ4WkVSTlFydm9vVXJadHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtVEED
BAItVEAwDQYJKoZIhvcNAQELBQADggEBAIz814JqDSawXmuIS7z5a/lbNoYBrSuS
ZmKn8Dqog0QPmzybL0dUIpzuSZ/syidJCQ58IbG09z71v5LueVb2/Pcu1ita5IlN
U+OlP+1FdlWThtEarGpbvp2mHEGQEdfw4okBYz3fLCjv5u1rh3a/tbEYO1XhV95V
BVs29/BoTU2HJ/I82oe8G6hUoaAcdcXsb999+Y7xI/FEMNfg4PQ50kFyqhP1NPgU
fiqfvER7MuzLq5A97aQol3GZF/9V72AKpIRPb9yd9un/78h0NzjePAKE+ZXViVZg
z6Cc4aBxe4+0U1hLEL4N3QO7pE4lFgyRhAA9D+3W7imQ2mvLi1EGTCk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org