Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1Lt4fH261UPgDSt7Mk9vUizyZSc.roa
File: 1Lt4fH261UPgDSt7Mk9vUizyZSc.roa (raw, json)
Hash identifier: wcVltJFiV6kLoqqnEHZKPKMDrQ0U8F8fbRAlzvmF6NU=
Subject key identifier: D4:BB:78:7C:7D:BA:D5:43:E0:0D:2B:7B:32:4F:6F:52:2C:F2:65:27
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 018316A12747FD42BAFF756B9BABC38A4A74
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1Lt4fH261UPgDSt7Mk9vUizyZSc.roa
Signing time: Wed 07 Sep 2022 06:26:43 +0000
ROA not before: Wed 07 Sep 2022 06:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 45.84.112.0/22 maxlen: 24
91.221.92.0/23 maxlen: 24
91.221.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:a1:27:47:fd:42:ba:ff:75:6b:9b:ab:c3:8a:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 7 06:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4bb787c7dbad543e00d2b7b324f6f522cf26527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:d0:b3:1d:31:a1:60:c7:a1:f9:e0:0f:33:
fd:cc:18:a7:5e:7c:89:e4:c1:1d:c3:7f:86:f5:e5:
ce:94:90:2c:5e:75:ad:93:02:73:d3:60:86:13:d7:
9f:01:6e:ff:9e:4c:c4:78:e2:47:77:e4:69:4a:54:
f8:ce:1c:dd:70:45:ed:21:f2:ec:5f:f0:92:0d:5f:
f6:20:84:39:98:11:bc:36:a0:e7:dc:a5:76:92:6c:
59:23:78:5a:df:5f:28:17:30:a8:da:d8:43:ae:ad:
07:8b:c8:df:47:83:2b:8b:44:68:5b:b1:a5:cd:b3:
0a:69:53:c5:bf:35:8d:53:45:f5:6d:a3:f3:78:4b:
1a:ef:cc:12:28:32:2c:98:b5:14:bc:82:eb:36:71:
34:c7:7b:e9:fc:b6:ba:b4:1c:7a:76:93:da:f5:bd:
16:11:c5:92:04:f6:ef:a5:13:a8:7a:4a:17:f1:7d:
3e:c8:f2:fd:1c:d7:94:45:e7:68:0a:49:40:71:b6:
b0:e4:46:d9:28:e5:a1:6e:9c:68:0a:b0:25:35:80:
e6:20:2d:19:d7:6a:2f:90:ec:ea:c4:0a:34:a5:5c:
4a:3b:33:69:70:36:a9:5f:92:3c:39:34:d6:f8:c8:
d7:d3:63:d7:47:ee:26:32:d8:4b:d1:fd:7a:d2:80:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:78:7C:7D:BA:D5:43:E0:0D:2B:7B:32:4F:6F:52:2C:F2:65:27
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1Lt4fH261UPgDSt7Mk9vUizyZSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
91.221.92.0/23
91.221.106.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a1:f6:de:57:62:98:5f:c1:23:cf:27:70:50:b6:f6:3b:82:
02:2f:fe:f3:81:7e:55:cf:dd:f2:d4:32:23:d3:1a:ba:43:31:
a8:5a:0f:79:a2:1d:ee:44:47:a9:43:ea:92:15:01:06:6b:ab:
d4:5d:72:65:7b:0b:27:e2:a8:cd:bb:f9:45:ec:a6:89:0d:61:
00:a3:0e:72:22:27:ce:e5:e2:c6:e3:cc:ec:70:ed:08:21:e7:
9b:9b:70:72:05:b7:03:28:29:74:e8:bd:cc:47:a0:dc:ec:99:
2d:84:78:a9:05:e1:02:4d:90:33:92:28:db:e7:87:63:08:f1:
24:68:42:e3:a5:16:04:ff:02:73:81:8b:7b:19:1c:ce:77:c8:
bd:b5:97:76:31:a6:f0:a8:9f:f6:e7:e9:d9:88:a7:e0:f4:50:
b2:6f:73:9c:93:7a:6e:2d:50:c2:5e:c8:91:84:fb:8a:89:9e:
e8:05:81:4f:05:16:92:98:0c:ad:07:da:1a:42:44:41:d0:17:
53:4a:39:99:2d:aa:a3:e6:6d:c4:9a:ba:f1:fa:8f:90:11:15:
cf:97:00:64:2c:f3:48:92:15:94:d1:ae:53:3f:8e:7c:a4:a1:
f4:33:c3:54:5e:cc:a8:04:bb:04:16:5d:65:54:a3:d5:7f:b3:
b5:fd:ad:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYMWoSdH/UK6/3Vrm6vDikp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjIwOTA3MDYyNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJiNzg3YzdkYmFkNTQzZTAwZDJiN2IzMjRmNmY1MjJjZjI2NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipPQsx0xoWDHofngDzP9zBinXnyJ
5MEdw3+G9eXOlJAsXnWtkwJz02CGE9efAW7/nkzEeOJHd+RpSlT4zhzdcEXtIfLs
X/CSDV/2IIQ5mBG8NqDn3KV2kmxZI3ha318oFzCo2thDrq0Hi8jfR4Mri0RoW7Gl
zbMKaVPFvzWNU0X1baPzeEsa78wSKDIsmLUUvILrNnE0x3vp/La6tBx6dpPa9b0W
EcWSBPbvpROoekoX8X0+yPL9HNeURedoCklAcbaw5EbZKOWhbpxoCrAlNYDmIC0Z
12ovkOzqxAo0pVxKOzNpcDapX5I8OTTW+MjX02PXR+4mMthL0f160oAePwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNS7eHx9utVD4A0rezJPb1Is8mUnMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvMUx0NGZIMjYxVVBnRFN0N01rOXZVaXp5WlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVRwAwQB
W91cAwQBW91qMA0GCSqGSIb3DQEBCwUAA4IBAQARofbeV2KYX8EjzydwULb2O4IC
L/7zgX5Vz93y1DIj0xq6QzGoWg95oh3uREepQ+qSFQEGa6vUXXJlewsn4qjNu/lF
7KaJDWEAow5yIifO5eLG48zscO0IIeebm3ByBbcDKCl06L3MR6Dc7JkthHipBeEC
TZAzkijb54djCPEkaELjpRYE/wJzgYt7GRzOd8i9tZd2MabwqJ/25+nZiKfg9FCy
b3Ock3puLVDCXsiRhPuKiZ7oBYFPBRaSmAytB9oaQkRB0BdTSjmZLaqj5m3Emrrx
+o+QERXPlwBkLPNIkhWU0a5TP458pKH0M8NUXsyoBLsEFl1lVKPVf7O1/a3f
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org