Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eV6V7IcJocyiEeuGkHcgwBLvm10.roa
File: eV6V7IcJocyiEeuGkHcgwBLvm10.roa (raw, json)
Hash identifier: Em1ddeTw20MGrh1MFLCO+Y9LEMWZFYScOy/hdcV+J2c=
Subject key identifier: 79:5E:95:EC:87:09:A1:CC:A2:11:EB:86:90:77:20:C0:12:EF:9B:5D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C4CBF5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eV6V7IcJocyiEeuGkHcgwBLvm10.roa
Signing time: Sat 01 Jan 2022 04:54:22 +0000
ROA not before: Sat 01 Jan 2022 04:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59598
IP address blocks: 45.136.2.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.0.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398773237 (0x17c4cbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=795e95ec8709a1cca211eb86907720c012ef9b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:0e:e8:f7:36:cd:1e:22:d2:f5:36:7b:bf:
08:6e:20:3d:68:a6:a3:f2:c3:5e:aa:09:a6:6d:8e:
cb:2f:29:1d:44:92:18:5f:14:69:53:d4:5e:aa:08:
d3:4c:42:89:16:ec:18:5a:97:84:9e:7d:b0:da:46:
15:a8:f6:bf:f0:31:b8:b7:6c:74:a5:44:43:f3:f4:
2b:5e:a4:f7:9d:ca:70:ec:ec:36:4d:ef:df:8f:a3:
a6:ab:3e:24:69:b2:72:54:83:55:23:05:01:e9:21:
df:57:51:39:1d:3f:50:76:d5:7a:20:c6:bc:37:70:
d1:27:80:d9:20:c4:02:12:96:68:82:98:42:d8:ae:
e7:de:2c:6e:42:ad:5a:66:74:bc:b8:0c:f9:91:6b:
05:bd:b1:88:04:1f:00:20:09:93:54:e2:4b:1b:6f:
95:51:ab:70:a2:44:23:9a:84:7e:4f:e3:2a:2c:ea:
7c:b1:9b:82:64:fe:aa:66:09:fd:17:b5:70:44:b2:
08:5d:ee:b8:ec:8a:d6:6c:40:02:c6:1a:6f:af:3a:
2d:5e:81:47:20:63:12:5a:ca:d9:33:c5:3c:b7:ab:
3c:85:e8:21:8d:7f:14:19:8b:48:32:de:f4:c0:21:
16:0c:4a:b8:27:24:ff:d3:28:44:da:ec:c4:79:7f:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:95:EC:87:09:A1:CC:A2:11:EB:86:90:77:20:C0:12:EF:9B:5D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eV6V7IcJocyiEeuGkHcgwBLvm10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:a1:c8:a8:1c:7d:39:c4:c3:f4:04:41:6c:3a:9e:8e:84:58:
27:c3:c1:e5:e1:01:99:e5:94:9c:38:00:c4:46:3a:4b:a1:52:
51:da:28:36:02:56:77:ec:24:46:4a:84:6f:51:14:7b:39:27:
bc:47:77:e6:d8:18:c1:92:aa:a7:bd:5e:22:a1:e3:c6:77:a6:
f9:11:ee:cf:cc:7b:a3:d6:ea:20:fc:7a:6d:31:5e:7c:ea:94:
24:8b:ea:fc:48:95:b7:52:9a:be:15:bf:48:b3:53:c0:03:64:
c9:7e:6e:07:d3:7d:84:a4:5a:94:34:a1:50:be:24:bf:02:74:
5b:4e:e7:eb:b6:4c:ab:66:5e:b9:e0:58:d4:22:81:ae:dc:98:
ba:b0:c7:43:a1:02:49:db:5a:dd:61:c4:7e:eb:fd:35:26:4b:
c5:59:20:12:30:8a:ae:eb:36:54:d1:fd:80:d4:38:b2:17:c6:
fb:04:fc:4e:56:b6:18:af:26:e8:8f:aa:c4:a1:1f:62:b7:0a:
bf:9d:ef:72:24:3d:db:d1:bd:23:04:f1:25:fd:a3:00:ee:be:
c2:77:72:d1:ae:b8:26:b7:0a:0f:57:c0:0e:11:31:bf:6e:8e:
ee:ff:1c:5a:e8:12:c4:db:a6:75:90:2a:b1:d3:1a:60:48:9a:
e5:b7:32:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF8TL9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzk1ZTk1ZWM4NzA5
YTFjY2EyMTFlYjg2OTA3NzIwYzAxMmVmOWI1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALW4Duj3Ns0eItL1Nnu/CG4gPWimo/LDXqoJpm2Oyy8pHUSS
GF8UaVPUXqoI00xCiRbsGFqXhJ59sNpGFaj2v/AxuLdsdKVEQ/P0K16k953KcOzs
Nk3v34+jpqs+JGmyclSDVSMFAekh31dROR0/UHbVeiDGvDdw0SeA2SDEAhKWaIKY
Qtiu594sbkKtWmZ0vLgM+ZFrBb2xiAQfACAJk1TiSxtvlVGrcKJEI5qEfk/jKizq
fLGbgmT+qmYJ/Re1cESyCF3uuOyK1mxAAsYab686LV6BRyBjElrK2TPFPLerPIXo
IY1/FBmLSDLe9MAhFgxKuCck/9MoRNrsxHl/aG8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5XpXshwmhzKIR64aQdyDAEu+bXTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2VWNlY3SWNKb2N5aUVldUdrSGNnd0JMdm0xMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2IADANBgkqhkiG9w0BAQsFAAOC
AQEAtqHIqBx9OcTD9ARBbDqejoRYJ8PB5eEBmeWUnDgAxEY6S6FSUdooNgJWd+wk
RkqEb1EUezknvEd35tgYwZKqp71eIqHjxnem+RHuz8x7o9bqIPx6bTFefOqUJIvq
/EiVt1KavhW/SLNTwANkyX5uB9N9hKRalDShUL4kvwJ0W07n67ZMq2ZeueBY1CKB
rtyYurDHQ6ECSdta3WHEfuv9NSZLxVkgEjCKrus2VNH9gNQ4shfG+wT8Tla2GK8m
6I+qxKEfYrcKv53vciQ929G9IwTxJf2jAO6+wndy0a64JrcKD1fADhExv26O7v8c
WugSxNumdZAqsdMaYEia5bcydw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org