Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/D9Y0zMVayOURBXk31RPe4GLfCy8.roa
File: D9Y0zMVayOURBXk31RPe4GLfCy8.roa (raw, json)
Hash identifier: 5eXSxzteQq8ls9IDscvY0jhygFs2Q1rwY0+R17bh5NU=
Subject key identifier: 0F:D6:34:CC:C5:5A:C8:E5:11:05:79:37:D5:13:DE:E0:62:DF:0B:2F
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 018538DB8CA3B5333D147A31505B08B96A79
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/D9Y0zMVayOURBXk31RPe4GLfCy8.roa
Signing time: Thu 22 Dec 2022 08:03:10 +0000
ROA not before: Thu 22 Dec 2022 08:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 45.82.201.0/24 maxlen: 24
185.208.139.0/24 maxlen: 24
185.208.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:db:8c:a3:b5:33:3d:14:7a:31:50:5b:08:b9:6a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Dec 22 08:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fd634ccc55ac8e511057937d513dee062df0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:e1:1e:55:3f:16:d3:d0:8a:ae:70:2b:10:
f7:8e:92:25:b4:7d:20:b5:24:3a:1f:46:f3:a5:8f:
63:fc:43:9b:e3:f4:b6:d0:b3:04:d1:8a:d3:5d:11:
e5:3a:0e:7c:b3:1a:7c:f8:80:68:20:15:8d:10:f1:
a5:43:9b:f8:da:e1:cf:ae:aa:f3:c1:00:8a:15:1c:
af:4c:15:64:1f:e9:8d:31:dd:41:3c:5e:93:ac:58:
52:21:85:dd:9d:7a:f7:9b:5b:6f:e9:b8:64:92:6f:
62:57:7b:61:5f:34:ff:4c:d9:5b:ac:5d:d5:6b:1f:
eb:39:74:96:fb:d4:4f:ac:74:80:39:22:5a:29:ca:
5d:59:90:e2:81:40:8d:6c:0b:3b:03:42:cc:05:bd:
3a:af:2a:af:eb:7d:52:75:13:4d:39:8e:c2:b7:0f:
25:fc:0a:51:b5:bc:9f:28:3c:c4:7e:87:04:7d:40:
75:f9:fb:49:a4:a6:eb:27:82:47:82:8c:e6:a9:59:
4d:fa:ad:4e:12:57:08:a0:b6:01:5f:be:e1:a4:1e:
24:ba:84:20:3e:4f:4f:9b:40:bd:b2:c3:0d:2d:fa:
71:73:26:36:47:6b:5d:89:89:19:f6:8a:5a:ed:88:
eb:0a:55:fd:40:69:8b:3a:d2:b5:cb:55:2d:f9:e8:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:34:CC:C5:5A:C8:E5:11:05:79:37:D5:13:DE:E0:62:DF:0B:2F
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/D9Y0zMVayOURBXk31RPe4GLfCy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.201.0/24
185.208.136.0/23
185.208.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0c:42:5a:96:ac:2a:9a:8f:75:a1:e5:36:7d:5a:7e:18:d8:
d2:93:24:7f:14:79:5c:a0:f0:25:75:23:3e:7a:c8:79:f4:f4:
9e:19:0f:17:8b:81:80:34:f8:bf:8d:fa:85:19:29:ec:bf:a2:
10:b4:6a:8d:8f:26:01:1c:ac:ef:5c:2d:ea:4e:6b:40:8e:f5:
fe:f8:19:09:6c:3d:e1:8a:06:0c:e5:96:a9:4c:da:95:67:11:
c9:4f:8f:fc:24:ea:0c:40:56:bc:0f:29:5e:7d:8e:6f:63:c2:
90:e9:78:2f:14:33:d9:8d:aa:de:9b:a3:93:a2:b8:d0:5d:30:
be:2e:a9:8f:75:57:64:43:64:f7:58:84:a1:bf:82:83:7d:9f:
df:76:1b:22:25:69:89:93:56:3a:a5:f8:c9:2b:18:21:bd:3e:
12:49:93:a8:08:fb:39:bd:d9:88:d3:19:69:8f:82:24:6d:d7:
85:d8:8c:6d:07:5a:5a:71:98:fd:5c:95:36:40:4a:9f:41:9c:
21:7f:4c:52:6b:b0:e6:ee:eb:71:39:01:3b:8c:cd:00:4a:b0:
11:f8:70:d3:2b:02:bf:af:ff:bd:60:a4:05:55:78:82:e8:07:
36:d7:14:71:d0:16:f5:2e:ee:14:37:7c:4f:fd:7c:81:58:83:
43:1d:22:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYU424yjtTM9FHoxUFsIuWp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjIxMjIyMDgwMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmQ2MzRjY2M1NWFjOGU1MTEwNTc5MzdkNTEzZGVlMDYyZGYwYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum/hHlU/FtPQiq5wKxD3jpIltH0g
tSQ6H0bzpY9j/EOb4/S20LME0YrTXRHlOg58sxp8+IBoIBWNEPGlQ5v42uHPrqrz
wQCKFRyvTBVkH+mNMd1BPF6TrFhSIYXdnXr3m1tv6bhkkm9iV3thXzT/TNlbrF3V
ax/rOXSW+9RPrHSAOSJaKcpdWZDigUCNbAs7A0LMBb06ryqv631SdRNNOY7Ctw8l
/ApRtbyfKDzEfocEfUB1+ftJpKbrJ4JHgozmqVlN+q1OElcIoLYBX77hpB4kuoQg
Pk9Pm0C9ssMNLfpxcyY2R2tdiYkZ9opa7YjrClX9QGmLOtK1y1Ut+eiN/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA/WNMzFWsjlEQV5N9UT3uBi3wsvMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvRDlZMHpNVmF5T1VSQlhrMzFSUGU0R0xmQ3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVLJAwQB
udCIAwQAudCLMA0GCSqGSIb3DQEBCwUAA4IBAQBNDEJalqwqmo91oeU2fVp+GNjS
kyR/FHlcoPAldSM+esh59PSeGQ8Xi4GANPi/jfqFGSnsv6IQtGqNjyYBHKzvXC3q
TmtAjvX++BkJbD3higYM5ZapTNqVZxHJT4/8JOoMQFa8DylefY5vY8KQ6XgvFDPZ
jarem6OTorjQXTC+LqmPdVdkQ2T3WIShv4KDfZ/fdhsiJWmJk1Y6pfjJKxghvT4S
SZOoCPs5vdmI0xlpj4IkbdeF2IxtB1pacZj9XJU2QEqfQZwhf0xSa7Dm7utxOQE7
jM0ASrAR+HDTKwK/r/+9YKQFVXiC6Ac21xRx0Bb1Lu4UN3xP/XyBWINDHSKY
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net