Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/ZocJI-yHzWUDEpZ3-iBgkOEYEOk.roa
File: ZocJI-yHzWUDEpZ3-iBgkOEYEOk.roa (raw, json)
Hash identifier: 0JE5rtjYVIqwh+mLw1fY60RCS7tMSOeMVojWMhKQbj8=
Subject key identifier: 66:87:09:23:EC:87:CD:65:03:12:96:77:FA:20:60:90:E1:18:10:E9
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 01A134A3
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/ZocJI-yHzWUDEpZ3-iBgkOEYEOk.roa
Signing time: Thu 27 Jan 2022 14:41:30 +0000
ROA not before: Thu 27 Jan 2022 14:41:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51317
IP address blocks: 45.84.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27341987 (0x1a134a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 27 14:41:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66870923ec87cd6503129677fa206090e11810e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:a3:0a:c0:ad:51:72:5b:b4:35:7f:d7:e0:
05:6f:9b:7b:db:ce:a5:f4:f8:74:e8:19:12:5b:0f:
b9:8c:36:66:f0:9b:09:63:3e:84:0b:d8:ac:20:89:
33:fc:42:01:1b:a6:97:39:e1:5b:64:db:9a:c9:2c:
51:78:8b:9f:c3:6b:ff:fb:47:e1:20:70:d2:25:c5:
ec:fc:6d:43:74:8e:2c:36:08:4b:64:1a:6c:68:02:
20:eb:f2:bc:5c:ae:08:4d:11:b5:af:b9:57:e8:c7:
99:9a:50:38:12:63:f5:7e:22:35:b3:e9:7c:49:25:
50:13:b8:2a:37:2d:92:ad:68:a3:8b:8d:d3:05:67:
63:12:f5:3c:85:b4:73:b7:af:79:d8:92:ac:b6:61:
74:52:eb:75:ea:59:df:ff:81:dd:9b:be:36:86:ea:
1e:20:ae:23:67:8d:09:9e:06:f1:61:21:56:75:2a:
df:09:4f:f4:8d:aa:e7:24:fd:dd:18:ee:26:a4:dd:
2c:67:f2:2e:6c:e3:1f:88:cd:96:7a:15:4c:b3:e6:
e9:7a:9c:8d:0f:d7:d0:37:dc:78:04:d3:66:49:7d:
78:8d:77:f5:26:51:89:71:7b:dc:8e:8d:da:16:5f:
25:f2:7f:8e:ab:d3:dd:47:f7:77:02:b6:46:34:67:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:09:23:EC:87:CD:65:03:12:96:77:FA:20:60:90:E1:18:10:E9
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/ZocJI-yHzWUDEpZ3-iBgkOEYEOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4e:81:dc:28:da:20:e8:b2:73:02:a8:11:b5:85:8a:6b:83:
fe:88:a8:56:1d:74:7b:6d:6d:06:59:c6:62:1a:29:6b:90:df:
10:f4:c5:27:6b:4c:05:6b:10:13:47:61:5e:ce:2e:af:78:81:
8a:7a:87:4e:b4:eb:96:73:7c:75:4c:ee:9c:90:56:12:a7:15:
7a:c6:62:e9:b5:1d:9d:6a:fc:00:ef:57:e9:1e:6b:85:14:14:
90:1c:e0:0d:08:25:94:61:33:88:c4:e1:59:19:6a:8d:90:63:
1e:36:7c:b8:fb:32:81:2e:cd:46:a8:69:4a:97:a8:94:c1:a8:
bc:25:cf:82:3d:f5:a5:22:68:51:21:58:2a:3b:7b:8f:f7:34:
50:80:98:98:e5:31:2c:a4:d5:62:14:c0:a3:99:3d:a9:d5:02:
48:ad:60:17:78:c4:ba:2c:3b:12:f6:ef:06:cc:a7:c8:0a:7f:
22:01:b8:b8:b7:c8:e8:6f:2b:b1:24:c6:30:10:cc:ee:b9:f2:
d0:b7:6f:ae:0c:df:23:5c:1d:2b:91:96:32:d6:a1:49:09:d8:
4b:84:ad:97:b3:fd:67:b5:bd:fe:0e:11:66:16:11:81:db:0f:
2a:9a:7e:25:71:cc:b4:83:12:dc:f5:16:f0:e8:30:6e:91:57:
79:e8:c3:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaE0ozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGRiOTVmOWQxYjVjM2VjOTM0ZmY4NGQ2ZmY3ZjAxMjQyZGE4NDJhMB4XDTIyMDEy
NzE0NDEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY4NzA5MjNlYzg3
Y2Q2NTAzMTI5Njc3ZmEyMDYwOTBlMTE4MTBlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVbowrArVFyW7Q1f9fgBW+be9vOpfT4dOgZElsPuYw2ZvCb
CWM+hAvYrCCJM/xCARumlznhW2TbmsksUXiLn8Nr//tH4SBw0iXF7PxtQ3SOLDYI
S2QabGgCIOvyvFyuCE0Rta+5V+jHmZpQOBJj9X4iNbPpfEklUBO4Kjctkq1oo4uN
0wVnYxL1PIW0c7evediSrLZhdFLrdepZ3/+B3Zu+NobqHiCuI2eNCZ4G8WEhVnUq
3wlP9I2q5yT93RjuJqTdLGfyLmzjH4jNlnoVTLPm6XqcjQ/X0DfceATTZkl9eI13
9SZRiXF73I6N2hZfJfJ/jqvT3Uf3dwK2RjRnwc0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRmhwkj7IfNZQMSlnf6IGCQ4RgQ6TAfBgNVHSMEGDAWgBT025X50bXD7JNP
+E1v9/ASQtqEKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlOdVYtZEcxdy15VFRfaE5iX2Z3RWtMYWhDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNDZkN2FmLTAyZmItNDVmOS1hOTIyLTE0YjM4YjZlMDBhNy8x
L1pvY0pJLXlIeldVREVwWjMtaUJna09FWUVPay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NDZkN2FmLTAyZmItNDVmOS1hOTIyLTE0YjM4YjZlMDBhNy8xLzlOdVYtZEcxdy15
VFRfaE5iX2Z3RWtMYWhDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1UszANBgkqhkiG9w0BAQsFAAOC
AQEADU6B3CjaIOiycwKoEbWFimuD/oioVh10e21tBlnGYhopa5DfEPTFJ2tMBWsQ
E0dhXs4ur3iBinqHTrTrlnN8dUzunJBWEqcVesZi6bUdnWr8AO9X6R5rhRQUkBzg
DQgllGEziMThWRlqjZBjHjZ8uPsygS7NRqhpSpeolMGovCXPgj31pSJoUSFYKjt7
j/c0UICYmOUxLKTVYhTAo5k9qdUCSK1gF3jEuiw7EvbvBsynyAp/IgG4uLfI6G8r
sSTGMBDM7rny0LdvrgzfI1wdK5GWMtahSQnYS4Stl7P9Z7W9/g4RZhYRgdsPKpp+
JXHMtIMS3PUW8OgwbpFXeejDCA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org