Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/fw10kqRe-cSlkwzVLSGEPBdjFV0.roa
File: fw10kqRe-cSlkwzVLSGEPBdjFV0.roa (raw, json)
Hash identifier: qqnwf/jjHydsvQ9QalMh0gA0oT5y4yJtM5mLiHzxT5w=
Subject key identifier: 7F:0D:74:92:A4:5E:F9:C4:A5:93:0C:D5:2D:21:84:3C:17:63:15:5D
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0182126BD2F7570EB4CDE0B2127D276F9736
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/fw10kqRe-cSlkwzVLSGEPBdjFV0.roa
Signing time: Mon 18 Jul 2022 17:47:12 +0000
ROA not before: Mon 18 Jul 2022 17:47:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204457
IP address blocks: 45.156.29.0/24 maxlen: 24
45.156.31.0/24 maxlen: 24
45.156.30.0/24 maxlen: 24
45.94.7.0/24 maxlen: 24
45.94.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:6b:d2:f7:57:0e:b4:cd:e0:b2:12:7d:27:6f:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 18 17:47:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f0d7492a45ef9c4a5930cd52d21843c1763155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:e7:7f:a9:be:d4:36:b2:64:21:6d:be:a0:
ba:dd:2e:b6:86:3e:8f:eb:63:54:f4:ad:75:4a:dc:
08:78:7d:b1:5c:f5:b0:89:09:b0:28:5d:2a:f5:d8:
cc:92:42:db:75:6a:28:71:5e:ac:90:ad:9b:25:28:
ac:16:4b:df:35:d5:e4:5e:8f:62:95:80:8f:55:40:
11:40:9a:94:9a:ee:73:78:0c:29:d6:1f:45:26:68:
0b:87:d7:a3:33:44:c6:f2:ff:4a:c3:ad:74:bc:bd:
ed:79:7d:88:e3:1c:d5:4b:17:dc:69:a0:63:ab:e3:
37:a5:85:e4:1f:27:1e:aa:b4:25:c0:26:95:c6:a9:
54:33:00:90:55:46:f6:e2:ca:4e:9f:a9:6a:aa:ee:
03:84:96:bc:27:a8:0f:a6:2d:1b:4a:fc:94:21:20:
7f:b7:fd:10:46:66:06:1a:ed:5a:29:a2:6f:d7:32:
36:38:9a:b2:8e:15:83:13:cb:80:23:4f:fa:35:ad:
78:66:10:d1:86:87:36:fe:3d:7a:fa:a7:10:c8:56:
5d:ac:5f:e8:25:81:d1:56:4c:8a:d6:22:86:2c:7e:
95:06:f5:1e:76:1a:95:df:c8:d2:7f:45:10:a9:d4:
3d:30:82:1b:9d:30:20:00:25:f2:d7:c9:b9:7e:a8:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:74:92:A4:5E:F9:C4:A5:93:0C:D5:2D:21:84:3C:17:63:15:5D
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/fw10kqRe-cSlkwzVLSGEPBdjFV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.5.0/24
45.94.7.0/24
45.156.29.0-45.156.31.255
Signature Algorithm: sha256WithRSAEncryption
8c:f3:b4:ef:04:ac:5c:43:f9:b5:a3:29:a6:c1:18:b9:0c:68:
87:dc:5c:3d:cf:75:b2:79:d1:e6:a9:c8:bd:3a:01:42:6c:c0:
7e:8f:1e:b5:59:51:8c:f1:46:cd:9e:75:c4:2f:4b:a4:2e:ad:
6f:ae:78:09:f6:5d:f9:f7:4f:2e:92:b8:60:91:45:c6:bf:cf:
7f:b7:d6:2b:9b:ed:60:be:f1:4b:5c:77:05:45:a4:7e:1f:c1:
76:72:0a:12:99:bb:fa:dd:6a:3b:6f:25:36:1a:a7:dc:1d:97:
38:dc:72:44:44:19:8a:82:a3:ba:cd:f9:4c:81:bb:25:20:ec:
1e:6f:9d:ae:c3:42:4d:2e:9f:e8:97:69:b1:db:42:ee:9b:50:
b0:40:1a:ff:58:3a:b8:a4:70:37:c5:95:dc:a7:7f:2b:fa:4e:
6c:a1:44:37:52:a7:88:e6:eb:e5:22:41:de:36:22:65:0e:0c:
6c:0a:e8:d3:16:0a:62:39:2d:bf:fd:df:98:f2:16:b7:bf:e4:
d5:e9:10:a9:dc:d8:1c:5e:dd:0d:f5:09:e2:0c:d2:17:4f:09:
6f:96:b3:3c:04:95:67:dd:24:fe:99:b5:52:eb:3b:d9:97:8b:
18:20:06:90:50:28:54:8b:3c:7d:2e:1d:70:67:a2:4e:ec:c6:
20:68:0a:40
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYISa9L3Vw60zeCyEn0nb5c2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjIwNzE4MTc0NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjBkNzQ5MmE0NWVmOWM0YTU5MzBjZDUyZDIxODQzYzE3NjMxNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCjnf6m+1DayZCFtvqC63S62hj6P
62NU9K11StwIeH2xXPWwiQmwKF0q9djMkkLbdWoocV6skK2bJSisFkvfNdXkXo9i
lYCPVUARQJqUmu5zeAwp1h9FJmgLh9ejM0TG8v9Kw610vL3teX2I4xzVSxfcaaBj
q+M3pYXkHyceqrQlwCaVxqlUMwCQVUb24spOn6lqqu4DhJa8J6gPpi0bSvyUISB/
t/0QRmYGGu1aKaJv1zI2OJqyjhWDE8uAI0/6Na14ZhDRhoc2/j16+qcQyFZdrF/o
JYHRVkyK1iKGLH6VBvUedhqV38jSf0UQqdQ9MIIbnTAgACXy18m5fqhw1wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFH8NdJKkXvnEpZMM1S0hhDwXYxVdMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvZncxMGtxUmUtY1Nsa3d6VkxTR0VQQmRqRlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALV4FAwQA
LV4HMAwDBAAtnB0DBAUtnAAwDQYJKoZIhvcNAQELBQADggEBAIzztO8ErFxD+bWj
KabBGLkMaIfcXD3PdbJ50eapyL06AUJswH6PHrVZUYzxRs2edcQvS6QurW+ueAn2
Xfn3Ty6SuGCRRca/z3+31iub7WC+8UtcdwVFpH4fwXZyChKZu/rdajtvJTYap9wd
lzjcckREGYqCo7rN+UyBuyUg7B5vna7DQk0un+iXabHbQu6bULBAGv9YOrikcDfF
ldynfyv6TmyhRDdSp4jm6+UiQd42ImUODGwK6NMWCmI5Lb/935jyFre/5NXpEKnc
2Bxe3Q31CeIM0hdPCW+WszwElWfdJP6ZtVLrO9mXixggBpBQKFSLPH0uHXBnok7s
xiBoCkA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:36 2023 by rpki-client on console.sobornost.net