Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/yRImrRe6apL4kzMYVcd3LhGb-jw.roa
File: yRImrRe6apL4kzMYVcd3LhGb-jw.roa (raw, json)
Hash identifier: zXHvj5vuXpTy/Uv/bmWn/t7ndIb4RtuYeTrly6j8CIY=
Subject key identifier: C9:12:26:AD:17:BA:6A:92:F8:93:33:18:55:C7:77:2E:11:9B:FA:3C
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0510612A
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/yRImrRe6apL4kzMYVcd3LhGb-jw.roa
Signing time: Wed 18 May 2022 11:08:16 +0000
ROA not before: Wed 18 May 2022 11:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
91.222.172.0/22 maxlen: 22
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84959530 (0x510612a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: May 18 11:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c91226ad17ba6a92f893331855c7772e119bfa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:58:20:15:f5:17:e0:e6:00:73:cf:c5:3a:
2e:34:9a:ef:90:cc:39:41:58:42:3d:8b:2e:96:16:
3d:24:3b:a8:3e:e1:45:60:18:48:34:83:29:0c:b1:
3a:02:95:96:5f:9d:bc:08:d8:17:2e:14:02:83:44:
c3:e2:d8:de:c7:0b:68:9c:c0:72:10:32:5c:3d:65:
e1:7b:bd:a6:aa:e1:07:42:5a:8f:46:b8:dd:70:5a:
fd:3a:d2:bc:90:51:2f:c4:eb:36:d3:bc:eb:4d:68:
34:8a:c4:b0:4a:27:83:7b:be:02:04:9d:c8:42:b1:
7d:67:59:55:91:71:f9:07:f4:8b:5b:95:2f:bf:05:
d0:8f:10:dc:bd:36:ae:cd:0a:f0:18:9e:7e:fb:6e:
ba:8e:3f:40:af:04:98:7e:21:f5:52:16:59:2b:99:
e9:f3:95:46:cd:2a:10:dc:8a:9d:5b:cc:66:d0:23:
6b:11:d8:8e:10:5c:5b:7d:63:0c:1d:1d:51:c4:0b:
e0:b0:d0:0d:ae:8e:58:60:11:d0:ae:c2:80:53:8e:
c4:d5:77:01:e4:cf:c4:0e:78:bb:cb:58:fc:0f:a2:
d6:fa:84:92:f9:9c:fa:06:25:15:ac:8d:a4:55:ca:
fc:4f:6b:24:98:32:6c:90:83:53:d6:ee:bb:8a:e9:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:26:AD:17:BA:6A:92:F8:93:33:18:55:C7:77:2E:11:9B:FA:3C
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/yRImrRe6apL4kzMYVcd3LhGb-jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.134.174.0/23
91.222.172.0/22
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
73:7e:c4:57:b4:ab:96:31:79:3e:2e:ed:f1:33:b6:b8:d0:97:
72:86:60:de:a2:42:3e:01:3f:78:fb:4f:ab:b3:43:2d:95:b0:
a4:f5:cd:3f:5a:91:90:25:e0:a3:72:a7:80:a6:56:a3:c4:db:
61:89:70:34:ba:b8:e5:1a:c9:63:22:43:c9:c8:2a:b9:27:3f:
cd:0c:fc:9c:f7:09:2d:f8:f6:40:0d:70:76:4f:87:e3:29:87:
d6:4c:f1:f5:6b:a0:0b:0a:e7:9d:d6:37:9a:a7:27:63:1a:42:
70:6d:b4:a3:22:a1:51:be:9e:74:b5:14:7f:56:97:9d:0a:5e:
d7:9b:24:4c:3c:93:9b:b4:70:92:7e:2e:45:f7:18:a7:ef:99:
94:07:ea:ee:73:cf:fd:5d:26:47:44:14:ae:b1:27:a9:b7:96:
6d:42:7e:53:c1:56:ed:2a:36:86:5f:1e:92:62:92:6b:3f:dd:
c4:c3:55:2d:83:04:7a:8a:96:82:09:92:51:7c:30:49:91:05:
10:7c:13:30:c9:7a:75:c3:f6:f4:f6:e0:a5:e1:89:f7:9e:12:
de:b7:bf:a1:d9:c3:32:c2:c5:fe:bb:4f:f3:f8:b0:0c:68:1c:
e7:ab:1e:4f:8e:e8:a9:a9:db:30:97:58:6e:e6:8f:29:25:aa:
d3:81:17:d7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBRBhKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MzJjOWMyNmRmN2NjZDhhZDM4ZDg5YmQ1ZDQ5MzgwYjkzYjFlMDA5MB4XDTIyMDUx
ODExMDgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzkxMjI2YWQxN2Jh
NmE5MmY4OTMzMzE4NTVjNzc3MmUxMTliZmEzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPVkWCAV9Rfg5gBzz8U6LjSa75DMOUFYQj2LLpYWPSQ7qD7h
RWAYSDSDKQyxOgKVll+dvAjYFy4UAoNEw+LY3scLaJzAchAyXD1l4Xu9pqrhB0Ja
j0a43XBa/TrSvJBRL8TrNtO8601oNIrEsEong3u+AgSdyEKxfWdZVZFx+Qf0i1uV
L78F0I8Q3L02rs0K8Biefvtuuo4/QK8EmH4h9VIWWSuZ6fOVRs0qENyKnVvMZtAj
axHYjhBcW31jDB0dUcQL4LDQDa6OWGAR0K7CgFOOxNV3AeTPxA54u8tY/A+i1vqE
kvmc+gYlFayNpFXK/E9rJJgybJCDU9buu4rpZisCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTJEiatF7pqkviTMxhVx3cuEZv6PDAfBgNVHSMEGDAWgBSzLJwm33zNitON
ib1dSTgLk7HgCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N5eWNKdDk4ellyVGpZbTlYVWs0QzVPeDRBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvZDVkYTBjLTljZjMtNGY4Yi1hNTYyLWNiMTFiYzViMmYxYi8x
L3lSSW1yUmU2YXBMNGt6TVlWY2QzTGhHYi1qdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
ZDVkYTBjLTljZjMtNGY4Yi1hNTYyLWNiMTFiYzViMmYxYi8xL3N5eWNKdDk4elly
VGpZbTlYVWs0QzVPeDRBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAC0LOAMEAS2GrgMEAlverDANBAIA
AjAHAwUAKgktwTANBgkqhkiG9w0BAQsFAAOCAQEAc37EV7SrljF5Pi7t8TO2uNCX
coZg3qJCPgE/ePtPq7NDLZWwpPXNP1qRkCXgo3KngKZWo8TbYYlwNLq45RrJYyJD
ycgquSc/zQz8nPcJLfj2QA1wdk+H4ymH1kzx9WugCwrnndY3mqcnYxpCcG20oyKh
Ub6edLUUf1aXnQpe15skTDyTm7Rwkn4uRfcYp++ZlAfq7nPP/V0mR0QUrrEnqbeW
bUJ+U8FW7So2hl8ekmKSaz/dxMNVLYMEeoqWggmSUXwwSZEFEHwTMMl6dcP29Pbg
peGJ954S3re/odnDMsLF/rtP8/iwDGgc56seT47oqanbMJdYbuaPKSWq04EX1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:21 2024 by rpki-client on console-fra.rpki-client.org