Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/VatVb1NeToH0Zj5ixa1-9GeBeho.roa
File: VatVb1NeToH0Zj5ixa1-9GeBeho.roa (raw, json)
Hash identifier: LvmYIOe7dk4ur8/OOIWlk6oN/WZawL9QJbEQj0qxPts=
Subject key identifier: 55:AB:55:6F:53:5E:4E:81:F4:66:3E:62:C5:AD:7E:F4:67:81:7A:1A
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01828466214FF7498EF7E6A4EE6FEFEDDDB8
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/VatVb1NeToH0Zj5ixa1-9GeBeho.roa
Signing time: Tue 09 Aug 2022 20:57:41 +0000
ROA not before: Tue 09 Aug 2022 20:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62304
IP address blocks: 45.95.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:66:21:4f:f7:49:8e:f7:e6:a4:ee:6f:ef:ed:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Aug 9 20:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55ab556f535e4e81f4663e62c5ad7ef467817a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:3a:6f:40:3b:1a:cd:76:dc:c8:d2:02:0d:
6c:38:80:5f:b6:1a:5d:5a:6e:6c:9e:f5:c9:fc:a5:
9a:d2:75:86:72:7b:46:f1:e0:70:42:c6:c2:af:8d:
b3:9d:6b:a6:9b:a5:93:cf:4a:e8:fc:5e:7a:d0:2e:
c7:75:76:0e:57:1a:86:98:c1:1c:e4:7e:c7:1f:e8:
76:9a:22:71:32:72:d6:d9:72:e7:ee:89:03:f4:38:
06:f9:7d:7f:91:9e:0c:15:49:ee:d0:a2:df:ff:ab:
79:bf:25:f3:2d:92:be:ad:e3:0f:66:8d:cb:42:64:
5f:5a:d6:19:b7:29:2d:d4:9f:56:af:be:ba:c3:ce:
33:24:a6:48:df:50:3e:77:88:4d:15:ba:82:e1:5a:
1f:16:cc:65:27:40:f2:f3:d6:8b:9b:46:66:19:36:
a8:b2:0f:bd:bd:1e:dd:4e:d7:fd:ef:22:7f:64:74:
09:55:73:bd:57:f0:09:e5:a7:64:f1:b4:e3:2a:6e:
b5:81:9b:93:f3:37:c5:4d:39:ab:26:7c:dc:c1:1b:
6d:05:d8:e5:30:31:f5:66:80:0f:6d:6d:95:01:b2:
5b:39:68:32:04:ec:8b:7c:2e:1b:02:c6:a4:f4:c4:
77:26:d2:6c:86:38:7a:85:e3:8d:48:f9:56:39:04:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:55:6F:53:5E:4E:81:F4:66:3E:62:C5:AD:7E:F4:67:81:7A:1A
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/VatVb1NeToH0Zj5ixa1-9GeBeho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.144.0/24
Signature Algorithm: sha256WithRSAEncryption
70:43:26:b7:8a:ff:26:81:ec:e8:f8:52:50:f0:53:17:e8:e7:
3d:b4:6a:0b:ca:a0:ca:b6:82:a6:ec:85:2c:ac:63:f2:78:46:
7c:4b:a6:93:8b:f1:29:9f:db:71:72:1e:d6:a5:dc:7d:5e:01:
e2:3e:9d:1a:7a:0a:60:95:1d:e6:5d:72:b6:f2:3d:9d:a5:e9:
bc:90:25:79:df:c3:11:09:28:a0:fc:76:38:67:ad:5d:95:4f:
da:e7:f4:eb:b2:44:d8:5e:9b:2e:bc:34:1f:08:d9:33:d7:e0:
b1:40:b1:99:d1:e4:99:e2:41:8d:44:ff:9e:4a:26:d8:47:12:
18:db:04:a7:d9:35:2d:91:18:70:00:3e:8a:72:bc:b5:24:06:
3a:e7:26:3c:b2:82:7e:cc:b0:35:50:13:94:d3:30:91:53:7e:
70:f1:d1:31:63:05:f6:67:05:fe:b5:2f:34:b1:a7:a4:02:a8:
bc:76:75:4a:6b:6f:24:9a:11:6e:27:1c:96:3c:58:30:f2:53:
91:ae:6a:73:b1:d4:46:da:32:e0:5c:ba:ce:ef:9c:f8:bb:02:
ef:9b:ec:cc:e5:b9:34:20:18:20:b5:da:42:e6:75:28:12:29:
09:15:6e:2a:a0:ff:e3:5d:06:03:96:1d:17:d3:54:f9:c6:a9:
b4:86:49:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKEZiFP90mO9+ak7m/v7d24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2
Y2QxYTMwHhcNMjIwODA5MjA1NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWFiNTU2ZjUzNWU0ZTgxZjQ2NjNlNjJjNWFkN2VmNDY3ODE3YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4M6b0A7Gs123MjSAg1sOIBfthpd
Wm5snvXJ/KWa0nWGcntG8eBwQsbCr42znWumm6WTz0ro/F560C7HdXYOVxqGmMEc
5H7HH+h2miJxMnLW2XLn7okD9DgG+X1/kZ4MFUnu0KLf/6t5vyXzLZK+reMPZo3L
QmRfWtYZtykt1J9Wr766w84zJKZI31A+d4hNFbqC4VofFsxlJ0Dy89aLm0ZmGTao
sg+9vR7dTtf97yJ/ZHQJVXO9V/AJ5adk8bTjKm61gZuT8zfFTTmrJnzcwRttBdjl
MDH1ZoAPbW2VAbJbOWgyBOyLfC4bAsak9MR3JtJshjh6heONSPlWOQSybQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWrVW9TXk6B9GY+YsWtfvRngXoaMB8GA1UdIwQY
MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt
MmVjZGExMWRlMTUzLzEvVmF0VmIxTmVUb0gwWmo1aXhhMS05R2VCZWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz
LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV+QMA0G
CSqGSIb3DQEBCwUAA4IBAQBwQya3iv8mgezo+FJQ8FMX6Oc9tGoLyqDKtoKm7IUs
rGPyeEZ8S6aTi/Epn9txch7Wpdx9XgHiPp0aegpglR3mXXK28j2dpem8kCV538MR
CSig/HY4Z61dlU/a5/TrskTYXpsuvDQfCNkz1+CxQLGZ0eSZ4kGNRP+eSibYRxIY
2wSn2TUtkRhwAD6Kcry1JAY65yY8soJ+zLA1UBOU0zCRU35w8dExYwX2ZwX+tS80
saekAqi8dnVKa28kmhFuJxyWPFgw8lORrmpzsdRG2jLgXLrO75z4uwLvm+zM5bk0
IBggtdpC5nUoEikJFW4qoP/jXQYDlh0X01T5xqm0hklV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org