Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/ZGrU8mjqdQ366egyRKLMTmUVUK0.roa
File: ZGrU8mjqdQ366egyRKLMTmUVUK0.roa (raw, json)
Hash identifier: JnIQMtcMl63eZc2qZbjb52c9TeR/FbmwYaAfSZPthTw=
Subject key identifier: 64:6A:D4:F2:68:EA:75:0D:FA:E9:E8:32:44:A2:CC:4E:65:15:50:AD
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 03EC3976
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/ZGrU8mjqdQ366egyRKLMTmUVUK0.roa
Signing time: Sat 01 Jan 2022 15:56:30 +0000
ROA not before: Sat 01 Jan 2022 15:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49103
IP address blocks: 45.15.248.0/22 maxlen: 24
45.86.196.0/24 maxlen: 24
45.86.196.0/22 maxlen: 24
45.86.199.0/24 maxlen: 24
45.132.168.0/22 maxlen: 24
45.86.198.0/24 maxlen: 24
45.86.197.0/24 maxlen: 24
45.156.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65812854 (0x3ec3976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 1 15:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=646ad4f268ea750dfae9e83244a2cc4e651550ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:04:2e:83:55:8d:91:e4:cb:89:14:f3:53:
d8:4e:1d:4c:04:61:5f:b4:61:8c:e1:e9:48:68:ad:
42:fe:c5:25:89:6d:a6:a1:1d:64:c1:05:fb:ba:df:
a9:d1:a0:a4:d5:a4:bd:08:68:10:96:c1:3f:0b:e6:
6d:77:24:b5:eb:ab:01:82:b1:54:f8:e1:73:34:69:
da:ce:63:1d:55:2e:5c:e8:5d:f5:a2:c5:52:44:ac:
d1:76:85:b5:f3:d4:ce:b7:40:03:9e:82:9c:6f:4b:
80:db:4f:da:91:9e:58:e2:ac:df:0e:f1:0f:bb:e6:
44:49:c6:1e:98:59:33:6d:0c:20:06:26:bf:ed:4c:
8a:7d:b4:f7:95:68:e6:46:49:43:73:ca:f5:3d:ad:
83:22:5f:50:05:3e:f5:68:56:1d:40:d5:ee:20:3e:
d2:2e:de:ad:b5:63:02:5f:91:78:bb:47:46:3b:e5:
0c:e8:2d:b4:6c:c4:31:01:74:fe:d0:fc:d7:a6:7a:
11:da:1b:b0:f0:09:a5:40:e2:44:e3:c0:d8:68:87:
73:b2:c4:9a:36:cb:3c:21:c7:4d:5d:7a:02:c0:d5:
9e:9e:67:88:67:ab:a8:7e:4c:08:8a:8d:5a:24:e2:
b3:21:07:02:5a:ab:54:0a:94:70:89:b6:61:91:bf:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:D4:F2:68:EA:75:0D:FA:E9:E8:32:44:A2:CC:4E:65:15:50:AD
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/ZGrU8mjqdQ366egyRKLMTmUVUK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:a9:95:32:ca:56:74:12:94:8c:7b:d3:d7:88:24:4f:c3:
94:e6:26:b8:ce:52:4c:da:60:88:5f:69:15:c4:8c:7c:1c:0b:
95:c4:f9:7b:04:84:2d:43:0d:27:be:c3:1d:f9:6c:f7:4a:9c:
0d:cd:05:04:4f:58:4e:56:0f:ce:ee:bb:81:25:ee:1d:2c:f8:
8d:d7:dd:5f:6c:0f:46:7c:bb:b9:5a:81:0e:19:d5:17:df:a2:
14:c4:e7:09:3d:77:c1:93:a3:fd:98:20:59:ea:fb:75:09:08:
f6:d7:4c:cd:c6:dc:95:3d:3b:5f:96:78:4e:93:e1:73:30:42:
96:07:36:c5:6d:c9:7d:f4:ab:07:94:41:bf:38:e0:19:61:fb:
b1:10:be:98:9a:3a:2a:e3:42:0a:2f:81:f0:d7:bf:ba:f9:69:
5b:40:8e:b6:f1:62:1e:8c:cb:2e:e4:5c:61:40:3a:bf:68:58:
f8:cd:8f:72:06:97:8d:fb:2d:9c:93:85:fc:79:16:3e:96:2c:
7c:5d:e1:48:46:26:33:7c:ac:b5:af:7b:6a:b4:23:94:6e:ea:
b1:90:88:03:33:70:33:13:40:2d:e2:05:38:52:06:cc:fa:52:
ba:8e:43:ae:a9:70:12:be:3d:b1:ad:ae:f9:74:df:50:ca:ee:
a7:2b:bd:4b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEA+w5djANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTZiZDNkNTQ1ZWViMGJlNDBmMjgzODk5ZDIxOGNmNDg2OGU5NDkwMB4XDTIyMDEw
MTE1NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjQ2YWQ0ZjI2OGVh
NzUwZGZhZTllODMyNDRhMmNjNGU2NTE1NTBhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALt0BC6DVY2R5MuJFPNT2E4dTARhX7RhjOHpSGitQv7FJYlt
pqEdZMEF+7rfqdGgpNWkvQhoEJbBPwvmbXckteurAYKxVPjhczRp2s5jHVUuXOhd
9aLFUkSs0XaFtfPUzrdAA56CnG9LgNtP2pGeWOKs3w7xD7vmREnGHphZM20MIAYm
v+1Min2095Vo5kZJQ3PK9T2tgyJfUAU+9WhWHUDV7iA+0i7erbVjAl+ReLtHRjvl
DOgttGzEMQF0/tD816Z6EdobsPAJpUDiROPA2GiHc7LEmjbLPCHHTV16AsDVnp5n
iGerqH5MCIqNWiTisyEHAlqrVAqUcIm2YZG/B3kCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRkatTyaOp1Dfrp6DJEosxOZRVQrTAfBgNVHSMEGDAWgBSOa9PVRe6wvkDy
g4mdIYz0ho6UkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ptdlQxVVh1c0w1QThvT0puU0dNOUlhT2xKQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjQvMWQ3MDQ2LWRjZjUtNDUyZS04ODQ5LWIxMGEyMmQwYTQ3Ni8x
L1pHclU4bWpxZFEzNjZlZ3lSS0xNVG1VVlVLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQv
MWQ3MDQ2LWRjZjUtNDUyZS04ODQ5LWIxMGEyMmQwYTQ3Ni8xL2ptdlQxVVh1c0w1
QThvT0puU0dNOUlhT2xKQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAi0P+AMEAi1WxAMEAi2EqAMEAC2c
xDANBgkqhkiG9w0BAQsFAAOCAQEAQmqplTLKVnQSlIx709eIJE/DlOYmuM5STNpg
iF9pFcSMfBwLlcT5ewSELUMNJ77DHfls90qcDc0FBE9YTlYPzu67gSXuHSz4jdfd
X2wPRny7uVqBDhnVF9+iFMTnCT13wZOj/ZggWer7dQkI9tdMzcbclT07X5Z4TpPh
czBClgc2xW3JffSrB5RBvzjgGWH7sRC+mJo6KuNCCi+B8Ne/uvlpW0COtvFiHozL
LuRcYUA6v2hY+M2PcgaXjfstnJOF/HkWPpYsfF3hSEYmM3ysta97arQjlG7qsZCI
AzNwMxNALeIFOFIGzPpSuo5DrqlwEr49sa2u+XTfUMrupyu9Sw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:19 2023 by rpki-client on console-ams.rpki-client.org