Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/AUsjDIgiq5C6pLfMYiID5UPoIoY.roa
File: AUsjDIgiq5C6pLfMYiID5UPoIoY.roa (raw, json)
Hash identifier: qiib4kGa1FG5IB3tI5CxPFfSPVV3t++HOzcM7s6UEQ0=
Subject key identifier: 01:4B:23:0C:88:22:AB:90:BA:A4:B7:CC:62:22:03:E5:43:E8:22:86
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 0550C1CF
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/AUsjDIgiq5C6pLfMYiID5UPoIoY.roa
Signing time: Sat 01 Jan 2022 06:56:03 +0000
ROA not before: Sat 01 Jan 2022 06:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21859
IP address blocks: 45.81.129.0/24 maxlen: 24
45.81.130.0/23 maxlen: 23
45.133.237.0/24 maxlen: 24
45.133.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89178575 (0x550c1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 06:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=014b230c8822ab90baa4b7cc622203e543e82286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:5a:61:34:4b:cd:3e:94:fe:7d:c9:d4:9d:
2f:cb:fa:14:41:a1:4f:9e:ac:84:81:e9:14:86:e3:
f8:86:a9:cd:e2:70:bc:e0:02:0d:71:1a:91:45:77:
e7:98:57:1d:31:ab:17:7e:96:a1:42:36:8b:47:84:
73:07:20:78:b6:e2:43:65:48:8a:8a:2a:2d:32:d5:
76:45:6f:a5:88:bf:ab:5d:c2:1f:bd:4c:17:da:ff:
79:fc:a1:f5:55:e6:93:4c:3e:7e:3b:e3:cd:9d:bb:
f0:fc:1a:05:92:2b:1c:e5:e0:6f:dc:d6:34:e9:73:
58:bd:fc:58:5b:a3:46:1a:16:34:e4:d9:08:b4:de:
11:6a:30:63:d6:54:55:4a:79:d4:06:7e:3d:96:a0:
44:9d:43:7d:a4:e4:0b:5f:75:3b:df:20:4f:24:35:
d5:cf:ce:dc:5a:fe:de:91:d4:6b:21:e8:95:de:55:
30:1d:9c:52:ea:a4:f6:3d:d6:bc:77:f9:03:8f:63:
d3:3b:3c:99:1f:d6:b1:b0:fd:3a:b2:47:91:a1:fe:
1c:f9:7f:1b:be:29:f7:1d:4d:b0:77:ea:52:27:b5:
13:a1:c2:02:de:c4:c1:7c:b4:b5:ac:53:23:dd:30:
7e:ee:38:72:86:71:b7:e3:b9:d6:ae:7d:1c:25:fb:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:23:0C:88:22:AB:90:BA:A4:B7:CC:62:22:03:E5:43:E8:22:86
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/AUsjDIgiq5C6pLfMYiID5UPoIoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.129.0-45.81.131.255
45.133.236.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f9:75:e1:89:45:89:37:db:bc:a5:5b:25:1f:73:be:33:3f:
9e:79:2d:2a:1e:19:d3:c8:1f:32:75:e1:22:45:a9:d8:7a:4e:
1f:33:b6:2d:cb:2e:a7:51:a1:a8:ee:b7:fe:88:a2:5c:fd:a8:
f0:bb:8c:ac:6a:fd:04:3c:80:d6:2a:fb:0b:30:4e:0c:bc:af:
68:50:8a:4e:51:ab:a3:e5:b2:41:4f:b6:45:7e:77:be:78:9f:
ab:dc:62:ce:2e:4f:70:0c:e7:ec:99:e7:07:27:80:c6:0f:b9:
48:a2:23:09:f6:2d:79:b9:92:61:26:fe:cb:2b:5b:12:c4:32:
1f:ba:fa:7d:49:73:e7:31:72:e2:c4:a0:92:3a:ae:f5:d1:b8:
19:cf:8a:5b:fa:0e:be:90:16:11:5a:55:ab:92:4f:34:2c:0f:
55:5b:dd:55:c5:33:e6:da:6f:48:1d:3e:a2:0b:45:7c:b3:9a:
58:be:c9:8a:f0:65:df:e5:0b:82:cd:cf:7d:1d:b4:75:3b:78:
86:ea:3c:a4:43:54:72:a2:77:08:f5:a3:b9:c1:78:86:56:01:
cd:68:4f:69:9b:6e:cd:17:30:7b:c7:96:f0:3b:c0:bc:a6:b2:
be:00:4d:31:16:8e:8a:a2:45:ff:ea:f3:fa:2a:1f:c0:73:62:
cb:55:c0:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBVDBzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjJkZDlmZTYyOGI2YmMxMDE0MWRlMDI0MTc2NmExYjdhNjMxOTNmMB4XDTIyMDEw
MTA2NTYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDE0YjIzMGM4ODIy
YWI5MGJhYTRiN2NjNjIyMjAzZTU0M2U4MjI4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRAWmE0S80+lP59ydSdL8v6FEGhT56shIHpFIbj+IapzeJw
vOACDXEakUV355hXHTGrF36WoUI2i0eEcwcgeLbiQ2VIiooqLTLVdkVvpYi/q13C
H71MF9r/efyh9VXmk0w+fjvjzZ278PwaBZIrHOXgb9zWNOlzWL38WFujRhoWNOTZ
CLTeEWowY9ZUVUp51AZ+PZagRJ1DfaTkC191O98gTyQ11c/O3Fr+3pHUayHold5V
MB2cUuqk9j3WvHf5A49j0zs8mR/WsbD9OrJHkaH+HPl/G74p9x1NsHfqUie1E6HC
At7EwXy0taxTI90wfu44coZxt+O51q59HCX70nkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQBSyMMiCKrkLqkt8xiIgPlQ+gihjAfBgNVHSMEGDAWgBRbLdn+YotrwQFB
3gJBdmobemMZPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d5M1pfbUtMYThFQlFkNENRWFpxRzNwakdUOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvNGRlODg5LWRjOWQtNDFlNS1iM2FhLTBkN2I1NTFmODI4Yy8x
L0FVc2pESWdpcTVDNnBMZk1ZaUlENVVQb0lvWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
NGRlODg5LWRjOWQtNDFlNS1iM2FhLTBkN2I1NTFmODI4Yy8xL1d5M1pfbUtMYThF
QlFkNENRWFpxRzNwakdUOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQALVGBAwQCLVGAAwQBLYXsMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ+XXhiUWJN9u8pVslH3O+Mz+eeS0qHhnTyB8ydeEi
RanYek4fM7Ytyy6nUaGo7rf+iKJc/ajwu4ysav0EPIDWKvsLME4MvK9oUIpOUauj
5bJBT7ZFfne+eJ+r3GLOLk9wDOfsmecHJ4DGD7lIoiMJ9i15uZJhJv7LK1sSxDIf
uvp9SXPnMXLixKCSOq710bgZz4pb+g6+kBYRWlWrkk80LA9VW91VxTPm2m9IHT6i
C0V8s5pYvsmK8GXf5QuCzc99HbR1O3iG6jykQ1RyoncI9aO5wXiGVgHNaE9pm27N
FzB7x5bwO8C8prK+AE0xFo6KokX/6vP6Kh/Ac2LLVcCM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org