Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/9K7d1zZGJWIWXiM1JgWDOcmA2CU.roa
File: 9K7d1zZGJWIWXiM1JgWDOcmA2CU.roa (raw, json)
Hash identifier: y7ztPRjtDAFH+T5/fZEm1E0IP861FO1XKyAli/tEflY=
Subject key identifier: F4:AE:DD:D7:36:46:25:62:16:5E:23:35:26:05:83:39:C9:80:D8:25
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 01851CC9F318042075E2F6F7D589D46DBE94
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/9K7d1zZGJWIWXiM1JgWDOcmA2CU.roa
Signing time: Fri 16 Dec 2022 21:14:35 +0000
ROA not before: Fri 16 Dec 2022 21:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39522
IP address blocks: 45.87.211.0/24 maxlen: 24
45.87.208.0/24 maxlen: 24
45.87.209.0/24 maxlen: 24
45.87.210.0/24 maxlen: 24
45.87.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:c9:f3:18:04:20:75:e2:f6:f7:d5:89:d4:6d:be:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Dec 16 21:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4aeddd736462562165e233526058339c980d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:5f:a9:91:8a:16:30:d5:d8:38:97:7a:67:
1d:a5:95:ec:04:e1:1b:e0:ac:d4:0d:13:87:cf:c5:
fb:8a:44:cf:02:39:67:f8:d4:75:bb:f7:80:b6:a3:
5a:38:99:8e:48:27:f4:02:50:e9:f7:20:f5:b5:50:
44:26:2b:8e:16:33:0c:f3:92:b7:a9:e4:d7:2c:d1:
03:19:4b:6d:aa:eb:57:d1:cb:7e:35:09:1d:bc:9e:
26:20:17:5f:b1:13:6d:6f:f6:f6:6c:bd:25:86:a3:
1d:12:1e:f5:6b:2c:62:e2:60:62:2c:4a:73:3d:ba:
1d:ea:84:ad:bc:97:7c:bf:75:ac:dc:6e:1b:ef:c2:
d1:1d:81:10:a1:71:a8:5e:ef:ea:4f:fb:1e:7c:79:
ab:a2:d0:76:b8:67:02:f8:6a:ff:c8:1d:af:81:a6:
88:c9:71:aa:ec:ad:e4:52:6e:e9:1d:c0:3c:25:52:
de:c8:0d:26:8d:36:d2:f7:d9:0d:fd:12:42:5a:37:
db:31:ee:e0:e5:bc:91:a8:48:f0:17:36:e1:69:f0:
0b:fc:91:15:ca:98:10:8b:af:f1:32:b7:12:ad:1b:
7f:98:b6:19:1a:b7:77:3c:b8:e6:a5:0a:b5:39:95:
36:1d:e5:a5:27:66:e1:18:22:37:04:91:47:a2:60:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:DD:D7:36:46:25:62:16:5E:23:35:26:05:83:39:C9:80:D8:25
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/9K7d1zZGJWIWXiM1JgWDOcmA2CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.208.0/22
Signature Algorithm: sha256WithRSAEncryption
98:3b:7b:4f:46:01:7d:bb:87:6b:6e:19:72:5e:35:05:10:82:
8d:4a:ca:55:22:4a:46:d3:8e:e6:58:42:20:03:05:8d:59:4c:
d6:90:dc:2c:bf:ea:e9:59:f6:f7:e3:9b:a0:0e:48:0c:5c:d6:
ca:58:60:7e:a7:e6:00:25:35:8b:c0:bd:18:0f:68:05:e3:13:
a2:b2:50:c6:71:69:73:c5:f0:17:70:ed:d4:21:65:99:a7:df:
86:88:38:e3:21:53:e5:e0:ec:71:85:04:00:cd:af:49:69:30:
19:49:ad:3a:ed:cc:6a:76:ef:b4:02:64:79:8c:bf:cb:14:c8:
7e:c1:45:b9:37:57:e5:bf:f3:3c:a0:e7:7a:d1:c8:c9:8b:1c:
7a:78:0e:dd:6f:55:12:6c:09:ff:fc:53:3f:ad:0b:6c:71:69:
1c:bc:1c:3d:a9:6f:e7:89:60:ec:56:b7:83:ed:20:8b:89:bc:
c8:96:20:be:d6:f2:ef:13:68:54:a8:62:b1:ba:3f:3c:cb:a6:
26:1b:bd:b0:27:74:d7:68:5e:ef:27:47:7b:dd:93:a3:e1:35:
ab:b0:d9:31:58:31:ff:98:b7:8c:85:8b:f2:5e:2e:de:cb:fd:
a1:43:c0:6a:15:67:4d:0c:aa:d3:87:7a:31:18:8b:f0:da:2a:
ac:de:d9:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUcyfMYBCB14vb31YnUbb6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2
YjExZmEwHhcNMjIxMjE2MjExNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGFlZGRkNzM2NDYyNTYyMTY1ZTIzMzUyNjA1ODMzOWM5ODBkODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJfqZGKFjDV2DiXemcdpZXsBOEb
4KzUDROHz8X7ikTPAjln+NR1u/eAtqNaOJmOSCf0AlDp9yD1tVBEJiuOFjMM85K3
qeTXLNEDGUttqutX0ct+NQkdvJ4mIBdfsRNtb/b2bL0lhqMdEh71ayxi4mBiLEpz
Pbod6oStvJd8v3Ws3G4b78LRHYEQoXGoXu/qT/sefHmrotB2uGcC+Gr/yB2vgaaI
yXGq7K3kUm7pHcA8JVLeyA0mjTbS99kN/RJCWjfbMe7g5byRqEjwFzbhafAL/JEV
ypgQi6/xMrcSrRt/mLYZGrd3PLjmpQq1OZU2HeWlJ2bhGCI3BJFHomBILwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSu3dc2RiViFl4jNSYFgznJgNglMB8GA1UdIwQY
MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct
MThmNGY2NmE1MGEwLzEvOUs3ZDF6WkdKV0lXWGlNMUpnV0RPY21BMkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw
LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVfQMA0G
CSqGSIb3DQEBCwUAA4IBAQCYO3tPRgF9u4drbhlyXjUFEIKNSspVIkpG047mWEIg
AwWNWUzWkNwsv+rpWfb345ugDkgMXNbKWGB+p+YAJTWLwL0YD2gF4xOislDGcWlz
xfAXcO3UIWWZp9+GiDjjIVPl4OxxhQQAza9JaTAZSa067cxqdu+0AmR5jL/LFMh+
wUW5N1flv/M8oOd60cjJixx6eA7db1USbAn//FM/rQtscWkcvBw9qW/niWDsVreD
7SCLibzIliC+1vLvE2hUqGKxuj88y6YmG72wJ3TXaF7vJ0d73ZOj4TWrsNkxWDH/
mLeMhYvyXi7ey/2hQ8BqFWdNDKrTh3oxGIvw2iqs3tm2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:31 2023 by rpki-client on console-ams.rpki-client.org