Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X9LwLsf3geveztAC40nBLFFqLxI.roa
File: X9LwLsf3geveztAC40nBLFFqLxI.roa (raw, json)
Hash identifier: uHQRJ/0NuVbt10YMezZ4lWwzZqf1mojdBHQqbaReh6c=
Subject key identifier: 5F:D2:F0:2E:C7:F7:81:EB:DE:CE:D0:02:E3:49:C1:2C:51:6A:2F:12
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182A66D44E20EC91C2B6009DC74E765A7AA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X9LwLsf3geveztAC40nBLFFqLxI.roa
Signing time: Tue 16 Aug 2022 11:32:35 +0000
ROA not before: Tue 16 Aug 2022 11:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.8.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:6d:44:e2:0e:c9:1c:2b:60:09:dc:74:e7:65:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 16 11:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd2f02ec7f781ebdeced002e349c12c516a2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:c0:5f:4b:60:3e:26:90:d5:fd:77:89:c1:
35:e0:02:53:5e:68:a6:5e:51:3b:d8:fd:e5:ff:96:
20:56:3a:eb:eb:23:87:8b:f4:c6:61:81:25:02:95:
d5:3e:fd:a9:64:c9:c7:62:82:6e:4e:4d:86:05:1f:
92:30:ca:da:c2:6e:91:f3:dd:3e:ec:21:92:ba:2e:
be:3b:ef:1d:fa:9f:70:88:bb:cb:08:8d:fb:30:d3:
98:d1:4d:58:36:39:60:64:4e:01:c3:0c:c1:26:57:
e5:2d:d6:9f:d0:b7:3b:43:f1:9a:4c:a1:86:cc:cd:
d2:9e:71:ec:d9:5c:38:23:d6:8d:a2:45:02:da:f4:
dd:67:99:ef:2f:70:bb:9e:1f:88:ef:62:1b:1b:1c:
83:ab:45:0c:46:83:05:68:51:f4:9c:85:e8:94:c5:
08:7c:6b:44:80:45:16:9d:9d:aa:a1:6f:aa:bc:7f:
82:c7:e2:a6:9f:20:65:44:8d:1b:c7:fe:3b:a3:72:
8c:14:54:47:a6:dc:8a:81:47:4b:84:41:6e:e9:9c:
30:bf:e7:2f:10:4c:e4:da:96:ec:40:96:7f:ae:e3:
0f:b9:64:2c:06:d4:4e:47:8c:c8:7c:1f:85:6f:bd:
02:3e:07:55:2b:6c:51:74:39:bf:eb:03:00:86:39:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:F0:2E:C7:F7:81:EB:DE:CE:D0:02:E3:49:C1:2C:51:6A:2F:12
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X9LwLsf3geveztAC40nBLFFqLxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.204.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:cf:06:de:57:38:1b:b9:ee:cf:8f:35:b0:72:06:fc:80:
bf:4a:e5:f3:7c:e6:fb:c5:b3:2f:e9:e9:c0:c8:61:a9:ab:e9:
51:2b:b0:7f:01:f1:35:02:a8:b9:65:24:43:48:34:06:0f:6c:
00:93:18:73:31:b9:6e:4a:d3:d5:9a:45:95:ac:b3:5f:3a:77:
2c:f4:29:da:7a:08:d4:05:05:0d:57:5f:8f:31:c5:8e:33:68:
7c:67:09:38:3f:43:ff:0a:f5:78:1e:48:ea:3d:77:8a:79:7f:
cc:26:4d:3c:f7:d1:c5:3b:8f:29:2f:4b:c0:ca:8e:59:eb:60:
fa:f0:e0:8b:d7:47:13:be:ea:80:7e:16:e9:b0:8a:9e:0d:cb:
71:cb:5b:3a:ba:3c:f4:38:19:b7:92:3d:99:1d:d2:c9:aa:42:
14:ad:f2:69:16:53:77:26:a7:03:e3:1a:52:e2:08:a0:3f:ab:
45:d6:03:18:9d:88:ac:93:7f:ea:e6:43:8d:f2:06:92:ce:8f:
f5:9f:05:a4:e7:8a:b8:fe:18:50:c5:5b:b5:ce:95:14:f9:ac:
80:88:a6:bd:b7:1b:08:97:ad:f0:a2:40:11:08:cb:a9:6a:a5:
0a:7c:08:40:10:ca:e3:51:f7:d7:11:ce:22:40:a3:86:86:88:
5c:11:e3:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKmbUTiDskcK2AJ3HTnZaeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIwODE2MTEzMjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQyZjAyZWM3Zjc4MWViZGVjZWQwMDJlMzQ5YzEyYzUxNmEyZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEvAX0tgPiaQ1f13icE14AJTXmim
XlE72P3l/5YgVjrr6yOHi/TGYYElApXVPv2pZMnHYoJuTk2GBR+SMMrawm6R890+
7CGSui6+O+8d+p9wiLvLCI37MNOY0U1YNjlgZE4BwwzBJlflLdaf0Lc7Q/GaTKGG
zM3SnnHs2Vw4I9aNokUC2vTdZ5nvL3C7nh+I72IbGxyDq0UMRoMFaFH0nIXolMUI
fGtEgEUWnZ2qoW+qvH+Cx+KmnyBlRI0bx/47o3KMFFRHptyKgUdLhEFu6Zwwv+cv
EEzk2pbsQJZ/ruMPuWQsBtROR4zIfB+Fb70CPgdVK2xRdDm/6wMAhjmIYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/S8C7H94Hr3s7QAuNJwSxRai8SMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvWDlMd0xzZjNnZXZlenRBQzQwbkJMRkZxTHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjMMA0G
CSqGSIb3DQEBCwUAA4IBAQCJRc8G3lc4G7nuz481sHIG/IC/SuXzfOb7xbMv6enA
yGGpq+lRK7B/AfE1Aqi5ZSRDSDQGD2wAkxhzMbluStPVmkWVrLNfOncs9CnaegjU
BQUNV1+PMcWOM2h8Zwk4P0P/CvV4HkjqPXeKeX/MJk0899HFO48pL0vAyo5Z62D6
8OCL10cTvuqAfhbpsIqeDctxy1s6ujz0OBm3kj2ZHdLJqkIUrfJpFlN3JqcD4xpS
4gigP6tF1gMYnYisk3/q5kON8gaSzo/1nwWk54q4/hhQxVu1zpUU+ayAiKa9txsI
l63wokARCMupaqUKfAhAEMrjUffXEc4iQKOGhohcEeOL
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org