Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/q9J0HLtM8UaZi2d_22HbIFqSWCs.roa
File: q9J0HLtM8UaZi2d_22HbIFqSWCs.roa (raw, json)
Hash identifier: 3yfA9hKTtKp8/whoIeE6o4NY4ZWlDRhOO3jDbIgYQcA=
Subject key identifier: AB:D2:74:1C:BB:4C:F1:46:99:8B:67:7F:DB:61:DB:20:5A:92:58:2B
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0182C95659C8D191CFF4005EC1290A33324F
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/q9J0HLtM8UaZi2d_22HbIFqSWCs.roa
Signing time: Tue 23 Aug 2022 06:14:15 +0000
ROA not before: Tue 23 Aug 2022 06:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2830
IP address blocks: 145.46.144.0/20 maxlen: 20
145.46.192.0/19 maxlen: 19
145.46.224.0/20 maxlen: 20
145.46.128.0/20 maxlen: 20
2a10:3000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:56:59:c8:d1:91:cf:f4:00:5e:c1:29:0a:33:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Aug 23 06:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abd2741cbb4cf146998b677fdb61db205a92582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:09:89:a5:61:7e:ba:b6:a3:8c:12:9c:b8:
ec:6d:1c:96:db:92:76:c3:ed:a9:1a:4b:15:8b:90:
b3:8e:66:eb:63:c6:7f:3a:de:c6:b8:7d:05:84:3b:
6a:9a:2b:11:92:9d:b4:c7:9d:b3:40:bc:00:93:74:
b4:eb:66:7a:a2:af:bf:fe:3f:64:dd:33:d5:6b:a6:
92:ca:d9:c2:9b:2b:cb:a8:73:a1:95:53:48:bf:d1:
3e:3e:f0:cc:96:9f:ba:d1:a8:23:58:15:7e:08:ed:
e7:d5:3f:a7:cb:82:4a:91:53:f7:4f:c0:49:66:e2:
a6:40:bb:c3:22:99:a7:55:18:de:23:b0:5c:f2:bf:
7c:f7:8e:b9:89:02:4e:96:33:8a:e6:04:07:9b:4d:
7c:ff:43:b0:b2:68:f5:4b:e6:22:c0:fc:4e:d3:ce:
e7:97:59:7f:20:a0:14:30:4c:6a:12:7a:f1:49:bd:
47:ce:c6:6b:18:d4:f3:05:b7:8f:ba:81:98:9f:b6:
5d:e7:06:c5:b9:e8:81:bf:cf:64:d9:d8:16:d7:21:
38:0a:84:ea:6f:30:c8:7a:4e:f8:b2:df:ba:da:74:
0b:fd:ae:ee:a6:f4:24:31:78:92:da:a1:c2:fe:39:
f5:f4:ca:78:5f:51:84:c7:03:c5:74:fa:7c:ac:e7:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:74:1C:BB:4C:F1:46:99:8B:67:7F:DB:61:DB:20:5A:92:58:2B
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/q9J0HLtM8UaZi2d_22HbIFqSWCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.128.0/19
145.46.192.0-145.46.239.255
IPv6:
2a10:3000::/29
Signature Algorithm: sha256WithRSAEncryption
51:6e:06:37:13:b8:37:93:f6:a4:47:98:9e:01:59:b5:e9:75:
f7:1e:98:73:4e:b0:47:28:18:1a:44:b0:df:65:cb:8d:be:f1:
02:2d:a1:6b:98:1d:69:5f:6e:dd:ab:a6:92:f0:af:36:2a:6c:
46:32:f2:0e:fe:62:a5:f4:06:d4:05:22:0a:aa:96:1f:53:d3:
7a:a3:97:f9:85:c6:b0:e7:ed:61:1b:b2:39:cd:e9:8b:bf:b4:
d1:20:1d:12:40:7d:91:47:4b:3d:8c:32:8c:0a:57:e6:4b:b6:
ee:ff:a5:14:e2:cb:84:c2:3d:9b:d5:9f:9e:f1:6f:1b:3a:b8:
44:0e:be:74:74:f7:e0:63:ea:1b:f0:ba:91:b2:09:fa:73:51:
e3:d3:5e:96:92:02:03:42:82:86:10:c3:33:06:8a:cb:e0:34:
a8:da:bb:29:6e:8b:58:1e:a9:b9:41:5d:d6:d1:c1:8c:91:14:
4a:98:a1:55:03:bb:39:88:d0:ba:ea:ea:ce:a7:7f:7e:8a:b7:
ec:b2:01:fb:2a:a7:05:e2:d4:59:0c:bc:1b:fc:a6:8b:22:ca:
a7:af:0c:de:41:48:12:7c:69:dc:83:e1:a7:9e:4a:4f:f4:58:
b0:f9:b4:57:33:46:fd:88:68:e4:ce:21:cd:08:f3:5b:64:f7:
88:e2:59:1c
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYLJVlnI0ZHP9ABewSkKMzJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh
ZWZjZDAwHhcNMjIwODIzMDYxNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQyNzQxY2JiNGNmMTQ2OTk4YjY3N2ZkYjYxZGIyMDVhOTI1ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcoJiaVhfrq2o4wSnLjsbRyW25J2
w+2pGksVi5CzjmbrY8Z/Ot7GuH0FhDtqmisRkp20x52zQLwAk3S062Z6oq+//j9k
3TPVa6aSytnCmyvLqHOhlVNIv9E+PvDMlp+60agjWBV+CO3n1T+ny4JKkVP3T8BJ
ZuKmQLvDIpmnVRjeI7Bc8r989465iQJOljOK5gQHm018/0Owsmj1S+YiwPxO087n
l1l/IKAUMExqEnrxSb1HzsZrGNTzBbePuoGYn7Zd5wbFueiBv89k2dgW1yE4CoTq
bzDIek74st+62nQL/a7upvQkMXiS2qHC/jn19Mp4X1GExwPFdPp8rOczRQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFKvSdBy7TPFGmYtnf9th2yBaklgrMB8GA1UdIwQY
MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt
NzcwZjhlYWIyYWU3LzEvcTlKMEhMdE04VWFaaTJkXzIySGJJRnFTV0NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3
LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQFkS6AMAwD
BAaRLsADBASRLuAwDQQCAAIwBwMFAyoQMAAwDQYJKoZIhvcNAQELBQADggEBAFFu
BjcTuDeT9qRHmJ4BWbXpdfcemHNOsEcoGBpEsN9ly42+8QItoWuYHWlfbt2rppLw
rzYqbEYy8g7+YqX0BtQFIgqqlh9T03qjl/mFxrDn7WEbsjnN6Yu/tNEgHRJAfZFH
Sz2MMowKV+ZLtu7/pRTiy4TCPZvVn57xbxs6uEQOvnR09+Bj6hvwupGyCfpzUePT
XpaSAgNCgoYQwzMGisvgNKjauylui1geqblBXdbRwYyRFEqYoVUDuzmI0Lrq6s6n
f36Kt+yyAfsqpwXi1FkMvBv8posiyqevDN5BSBJ8adyD4aeeSk/0WLD5tFczRv2I
aOTOIc0I81tk94jiWRw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:31 2023 by rpki-client on console-fra.rpki-client.org