Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/PYfpYeFlQ6qWBU70e1ttoGUhj9A.roa
File: PYfpYeFlQ6qWBU70e1ttoGUhj9A.roa (raw, json)
Hash identifier: 1qFu4Hnk040narNH3balwihuvlaHrWTKlFwxWLkJILk=
Subject key identifier: 3D:87:E9:61:E1:65:43:AA:96:05:4E:F4:7B:5B:6D:A0:65:21:8F:D0
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 01836408B9A8632D52565EC93B35A9790ADC
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/PYfpYeFlQ6qWBU70e1ttoGUhj9A.roa
Signing time: Thu 22 Sep 2022 07:10:36 +0000
ROA not before: Thu 22 Sep 2022 07:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:08:b9:a8:63:2d:52:56:5e:c9:3b:35:a9:79:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Sep 22 07:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d87e961e16543aa96054ef47b5b6da065218fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:b0:5e:c0:e7:bb:21:81:fa:96:0a:d0:47:
d2:93:ab:ad:1c:be:77:2b:9e:3d:24:9f:1a:78:cf:
74:a9:d0:ea:17:d4:08:66:dc:57:82:96:e5:8c:c5:
f2:92:09:07:42:ec:4d:8d:79:51:2c:ff:07:1f:9e:
88:0c:3f:5e:de:92:66:1e:f6:20:d9:3e:05:1d:dc:
e2:31:77:30:f5:f0:c8:fe:1e:3a:83:5d:d2:d6:66:
0e:c2:60:de:c2:34:e4:cf:43:95:3e:e5:f4:2b:64:
f8:54:b5:a9:c7:8a:3b:aa:cf:30:c8:a7:41:2f:15:
83:4a:e5:b2:0f:1e:e4:4e:7c:aa:21:86:20:54:df:
9d:02:18:d7:ab:71:1a:a6:ee:be:d3:d2:22:40:14:
53:9b:87:3d:eb:97:04:58:a7:04:8a:6c:68:64:38:
6c:53:ed:45:92:94:33:45:63:a2:e5:fa:c0:87:01:
00:21:e8:5c:e1:90:11:a3:32:5c:15:42:4d:ba:01:
fa:61:33:9d:dc:42:4e:74:40:01:a6:53:09:07:8a:
f9:bf:83:f4:9a:14:1f:ba:42:d5:40:14:28:2c:8e:
ca:e8:52:a9:1d:e3:41:02:3a:48:1e:e2:9b:6d:f2:
d6:d0:f3:d5:e1:f3:1c:71:55:80:f4:40:6a:37:ce:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:87:E9:61:E1:65:43:AA:96:05:4E:F4:7B:5B:6D:A0:65:21:8F:D0
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/PYfpYeFlQ6qWBU70e1ttoGUhj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d2:2b:0c:a1:a2:fe:6c:ea:49:72:b2:b5:41:1b:f9:9e:ee:
18:09:fd:18:54:d9:32:2a:4e:39:aa:2c:6f:0f:0a:0a:83:26:
01:49:7d:ff:52:9d:04:82:b7:48:40:8c:71:c7:14:cf:6d:40:
5b:4f:37:0b:b9:e2:34:30:69:54:22:2e:58:e7:a6:f4:d2:89:
a3:12:da:53:73:df:af:2b:33:37:01:bd:5d:e2:1a:1c:12:72:
2d:9c:d1:95:37:d1:80:15:e7:e8:4f:f1:77:a6:85:a1:99:5a:
df:08:70:51:d8:38:f0:e8:2e:0a:85:11:b9:1e:c3:f5:e7:97:
1b:a1:b4:22:4b:98:09:63:4e:29:0c:a3:d0:ee:70:94:38:38:
66:b2:8f:9a:6f:74:bf:6b:5c:73:ff:cc:f2:ac:74:50:e1:8d:
ed:c8:28:09:06:5b:85:90:29:f5:bc:34:cc:6b:c4:1b:44:82:
bf:7a:2a:17:06:66:aa:d3:91:07:4b:0a:76:be:ea:5e:34:b9:
ff:ba:d2:cc:f3:5f:cf:ac:64:cc:6c:4d:c5:e7:42:35:f7:65:
dd:0d:a4:e0:ea:4c:82:bf:1d:aa:35:74:e7:0e:13:e6:fe:c5:
fa:4f:9a:a8:7c:ad:8c:69:7e:73:bd:5f:42:f9:c0:bf:41:c5:
b5:e5:74:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNkCLmoYy1SVl7JOzWpeQrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjIwOTIyMDcxMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDg3ZTk2MWUxNjU0M2FhOTYwNTRlZjQ3YjViNmRhMDY1MjE4ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyuwXsDnuyGB+pYK0EfSk6utHL53
K549JJ8aeM90qdDqF9QIZtxXgpbljMXykgkHQuxNjXlRLP8HH56IDD9e3pJmHvYg
2T4FHdziMXcw9fDI/h46g13S1mYOwmDewjTkz0OVPuX0K2T4VLWpx4o7qs8wyKdB
LxWDSuWyDx7kTnyqIYYgVN+dAhjXq3Eapu6+09IiQBRTm4c965cEWKcEimxoZDhs
U+1FkpQzRWOi5frAhwEAIehc4ZARozJcFUJNugH6YTOd3EJOdEABplMJB4r5v4P0
mhQfukLVQBQoLI7K6FKpHeNBAjpIHuKbbfLW0PPV4fMccVWA9EBqN85o3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD2H6WHhZUOqlgVO9HtbbaBlIY/QMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEvUFlmcFllRmxRNnFXQlU3MGUxdHRvR1VoajlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTjgAwQB
LTjsMA0GCSqGSIb3DQEBCwUAA4IBAQAe0isMoaL+bOpJcrK1QRv5nu4YCf0YVNky
Kk45qixvDwoKgyYBSX3/Up0EgrdIQIxxxxTPbUBbTzcLueI0MGlUIi5Y56b00omj
EtpTc9+vKzM3Ab1d4hocEnItnNGVN9GAFefoT/F3poWhmVrfCHBR2Djw6C4KhRG5
HsP155cbobQiS5gJY04pDKPQ7nCUODhmso+ab3S/a1xz/8zyrHRQ4Y3tyCgJBluF
kCn1vDTMa8QbRIK/eioXBmaq05EHSwp2vupeNLn/utLM81/PrGTMbE3F50I192Xd
DaTg6kyCvx2qNXTnDhPm/sX6T5qofK2MaX5zvV9C+cC/QcW15XQK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:56 2024 by rpki-client on console-ams.rpki-client.org