Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/2ImGZ_m3QvPvSiCIf-UoVrcUkwg.roa
File: 2ImGZ_m3QvPvSiCIf-UoVrcUkwg.roa (raw, json)
Hash identifier: nxNMWDOZmH7MvfhtfEd3bqYfj1IvPiX0NYVTtcSz2vA=
Subject key identifier: D8:89:86:67:F9:B7:42:F3:EF:4A:20:88:7F:E5:28:56:B7:14:93:08
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 079407C2
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/2ImGZ_m3QvPvSiCIf-UoVrcUkwg.roa
Signing time: Sat 01 Jan 2022 08:53:06 +0000
ROA not before: Sat 01 Jan 2022 08:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 45.148.17.0/24 maxlen: 24
193.187.91.0/24 maxlen: 24
2a0c:dd41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127141826 (0x79407c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Jan 1 08:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8898667f9b742f3ef4a20887fe52856b7149308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:c6:c1:a9:59:9a:a4:65:3c:d9:08:3b:74:
ae:77:92:07:05:c1:a1:1b:40:3d:b3:68:d5:b4:88:
13:2e:8c:b5:0a:f7:a5:74:12:df:b7:70:bd:bf:23:
4b:d5:2d:3e:c7:69:3f:2c:da:a0:6e:31:8e:f2:98:
4a:bb:81:7a:07:65:a9:58:db:40:4b:97:b3:79:01:
94:f8:6e:71:46:90:69:ef:c5:0f:50:96:e6:7a:74:
2f:44:5e:9e:bb:4a:d4:39:f4:a2:d0:c8:f6:d8:5f:
ca:77:6f:28:b0:50:c2:a9:18:c7:af:54:f6:65:35:
50:77:66:6c:82:b8:bf:6f:f9:96:ac:f3:e0:a1:12:
ce:be:61:26:65:73:e3:3e:f1:4c:3f:eb:8e:2e:8b:
1c:b5:43:5d:3b:47:be:61:27:79:3e:6f:71:e4:65:
b2:9c:52:f5:0e:76:00:64:28:8a:34:2a:99:03:f9:
38:d9:b4:55:a3:5e:70:44:98:b0:82:59:95:67:8b:
e5:4f:51:6c:a6:e8:d4:3b:aa:25:34:0f:9d:4b:92:
aa:a1:75:5e:6b:ef:62:e3:08:2e:7f:51:9b:3c:81:
d7:10:47:08:a4:38:73:33:04:67:0c:63:3d:23:2c:
5d:f8:24:ec:ad:1d:ac:1c:1d:d3:a6:c9:ef:2e:20:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:86:67:F9:B7:42:F3:EF:4A:20:88:7F:E5:28:56:B7:14:93:08
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/2ImGZ_m3QvPvSiCIf-UoVrcUkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.17.0/24
193.187.91.0/24
IPv6:
2a0c:dd41::/32
Signature Algorithm: sha256WithRSAEncryption
9c:1b:15:53:c1:6c:21:75:45:3d:d5:a3:03:70:b2:60:16:c6:
0d:20:a2:a8:14:54:ce:c5:89:c7:30:7f:c3:74:46:24:b1:5d:
65:65:24:b6:1a:95:fb:f0:ec:6e:d8:eb:0c:26:8e:9a:6a:2a:
d6:9f:52:09:12:f0:44:85:50:38:06:0d:27:7b:14:4a:cc:44:
8d:15:fc:5e:fa:c0:e1:07:d6:40:6e:2b:18:14:75:d0:4b:a4:
cb:f9:ff:20:e6:ec:02:3f:93:a7:02:be:73:0b:21:b1:61:80:
13:5d:4b:38:3c:1f:58:87:88:82:3c:fb:99:e8:b2:33:87:b1:
34:70:61:5b:00:b3:32:16:d4:e0:db:ac:c6:20:b2:29:4c:a7:
95:1b:10:b4:de:c5:86:b9:0f:ee:7d:3c:fa:48:ab:1c:bd:77:
10:b6:cf:34:ce:f0:91:24:87:39:1b:ea:db:09:d4:01:28:18:
9f:5b:68:3a:14:5f:20:19:37:32:c0:e0:5d:10:25:2e:9b:13:
7c:0a:a6:25:62:5d:36:72:fc:0a:e5:a7:e4:4c:3f:01:3a:1a:
1b:58:46:04:e5:01:99:3f:f3:2f:99:9c:1d:3c:0f:f6:c6:8d:
f0:1d:b7:87:c1:30:88:83:05:a3:7f:91:d7:43:18:6a:b5:8d:
07:d2:a3:53
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEB5QHwjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTQ2MWRiZDc3NDQ4MzdiOGY5YTNlYWNmNjBlZDc5ZDY2OTgwNDc0MB4XDTIyMDEw
MTA4NTMwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg4OTg2NjdmOWI3
NDJmM2VmNGEyMDg4N2ZlNTI4NTZiNzE0OTMwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+ExsGpWZqkZTzZCDt0rneSBwXBoRtAPbNo1bSIEy6MtQr3
pXQS37dwvb8jS9UtPsdpPyzaoG4xjvKYSruBegdlqVjbQEuXs3kBlPhucUaQae/F
D1CW5np0L0RenrtK1Dn0otDI9thfyndvKLBQwqkYx69U9mU1UHdmbIK4v2/5lqzz
4KESzr5hJmVz4z7xTD/rji6LHLVDXTtHvmEneT5vceRlspxS9Q52AGQoijQqmQP5
ONm0VaNecESYsIJZlWeL5U9RbKbo1DuqJTQPnUuSqqF1XmvvYuMILn9RmzyB1xBH
CKQ4czMEZwxjPSMsXfgk7K0drBwd06bJ7y4g2bUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTYiYZn+bdC8+9KIIh/5ShWtxSTCDAfBgNVHSMEGDAWgBTBRh29d0SDe4+a
Pqz2DtedZpgEdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dVWWR2WGRFZzN1UG1qNnM5ZzdYbldhWUJIUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTVmZGYzLTRkNmEtNDU4Mi1iOWI4LTRmOGNmZWIyMTBkOS8x
LzJJbUdaX20zUXZQdlNpQ0lmLVVvVnJjVWt3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTVmZGYzLTRkNmEtNDU4Mi1iOWI4LTRmOGNmZWIyMTBkOS8xL3dVWWR2WGRFZzN1
UG1qNnM5ZzdYbldhWUJIUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAC2UEQMEAMG7WzANBAIAAjAHAwUA
KgzdQTANBgkqhkiG9w0BAQsFAAOCAQEAnBsVU8FsIXVFPdWjA3CyYBbGDSCiqBRU
zsWJxzB/w3RGJLFdZWUkthqV+/DsbtjrDCaOmmoq1p9SCRLwRIVQOAYNJ3sUSsxE
jRX8XvrA4QfWQG4rGBR10Euky/n/IObsAj+TpwK+cwshsWGAE11LODwfWIeIgjz7
meiyM4exNHBhWwCzMhbU4NusxiCyKUynlRsQtN7FhrkP7n08+kirHL13ELbPNM7w
kSSHORvq2wnUASgYn1toOhRfIBk3MsDgXRAlLpsTfAqmJWJdNnL8CuWn5Ew/AToa
G1hGBOUBmT/zL5mcHTwP9saN8B23h8EwiIMFo3+R10MYarWNB9KjUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org