Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Fvgs3bsVvBMp2Le3_CZ4wE0vvKc.roa
File: Fvgs3bsVvBMp2Le3_CZ4wE0vvKc.roa (raw, json)
Hash identifier: aMid4a1AUlYB8OCIpYWwI2QD52y0zG/u50IttsQY0sg=
Subject key identifier: 16:F8:2C:DD:BB:15:BC:13:29:D8:B7:B7:FC:26:78:C0:4D:2F:BC:A7
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0C07CE52
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Fvgs3bsVvBMp2Le3_CZ4wE0vvKc.roa
Signing time: Sat 01 Jan 2022 10:05:03 +0000
ROA not before: Sat 01 Jan 2022 10:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64484
IP address blocks: 45.151.8.0/24 maxlen: 24
45.151.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201838162 (0xc07ce52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jan 1 10:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16f82cddbb15bc1329d8b7b7fc2678c04d2fbca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:98:75:9b:4f:93:b5:f0:de:3f:36:88:a7:
bb:83:0c:9d:c6:29:30:d4:39:d9:e7:c6:b0:47:4c:
3c:1d:3d:b9:8e:41:75:a2:17:1c:7c:5d:7e:dc:3b:
2d:3e:a0:8e:44:83:ef:d2:cc:d6:da:2f:52:a5:1a:
5e:f3:d5:20:44:e2:07:82:84:a2:f5:3a:22:02:35:
5e:53:03:af:70:a2:27:47:f1:bd:90:fa:45:35:4a:
69:d7:84:c8:95:37:cb:dc:ea:cd:af:12:16:ea:bb:
ef:02:4c:24:f6:ac:a7:ae:f7:2b:36:c2:d3:f1:c2:
32:e2:c5:47:38:1c:3d:4b:10:30:f1:e1:cd:bd:db:
27:ee:d9:e0:7c:01:4a:47:92:9f:e7:18:b1:25:24:
f0:8a:26:5b:93:f7:ce:53:ec:3e:f4:15:3f:5b:a3:
8e:1a:3d:02:7d:c8:8c:6f:de:96:ef:65:63:a1:4d:
71:cb:2e:15:5a:71:c3:24:2c:ff:e1:53:a8:d5:c8:
09:9c:97:9d:20:69:91:b2:ee:35:88:be:8a:0c:40:
ec:b5:a5:8b:d3:4a:dc:cf:ba:22:60:6d:b8:48:68:
71:9b:33:6d:b9:e5:02:85:34:b5:32:07:91:3c:2a:
a7:09:c6:06:0b:1b:1c:25:be:98:84:b2:b4:2d:7b:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:2C:DD:BB:15:BC:13:29:D8:B7:B7:FC:26:78:C0:4D:2F:BC:A7
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Fvgs3bsVvBMp2Le3_CZ4wE0vvKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.8.0/24
45.151.11.0/24
Signature Algorithm: sha256WithRSAEncryption
47:45:c5:96:b3:84:3c:9c:54:c3:24:64:8c:7e:cd:da:e5:d2:
d8:04:b7:c7:14:cf:57:d9:54:83:2e:de:bd:19:8b:be:29:96:
48:31:07:bd:fe:89:40:9d:5b:70:90:26:95:ea:2b:81:e5:50:
01:a5:49:36:41:6f:f0:a2:4b:c9:92:31:22:9d:83:f2:94:6c:
ed:c5:e0:fa:fe:35:eb:91:5e:62:12:73:81:bb:fa:eb:67:d8:
22:d6:be:88:88:31:83:ff:47:de:50:46:e6:77:ee:5c:aa:a0:
94:bb:bf:30:3b:52:ab:f4:3e:d4:6e:5a:17:7e:e5:89:80:d8:
3d:1c:30:57:dc:83:7b:59:4f:38:9f:b1:fd:2d:79:c6:2c:c6:
ff:61:66:32:cc:d2:4a:e7:cf:5f:80:d8:15:7f:df:f2:f5:20:
b5:b9:f9:6b:13:05:77:d2:37:ee:72:7f:1b:0e:40:b0:b4:27:
a2:db:de:ab:a2:f6:9b:af:74:63:88:31:80:91:c7:ea:85:aa:
3a:1f:88:24:e5:f2:63:e3:8a:ad:36:55:e0:28:c5:2c:e7:78:
5a:91:c9:2b:18:25:f0:31:8d:5d:a9:9e:aa:6d:8e:00:b3:a1:
77:4d:59:a1:78:6c:1c:dc:65:58:9e:64:e0:a1:b2:27:61:50:
08:30:09:01
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDAfOUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NDVjZWIyOTIwODllMGRmNzU3MTlkYjNlOTZjNTA5NzU0Zjk0ODM3MB4XDTIyMDEw
MTEwMDUwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZmODJjZGRiYjE1
YmMxMzI5ZDhiN2I3ZmMyNjc4YzA0ZDJmYmNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6DmHWbT5O18N4/Noinu4MMncYpMNQ52efGsEdMPB09uY5B
daIXHHxdftw7LT6gjkSD79LM1tovUqUaXvPVIETiB4KEovU6IgI1XlMDr3CiJ0fx
vZD6RTVKadeEyJU3y9zqza8SFuq77wJMJPasp673KzbC0/HCMuLFRzgcPUsQMPHh
zb3bJ+7Z4HwBSkeSn+cYsSUk8IomW5P3zlPsPvQVP1ujjho9An3IjG/elu9lY6FN
ccsuFVpxwyQs/+FTqNXICZyXnSBpkbLuNYi+igxA7LWli9NK3M+6ImBtuEhocZsz
bbnlAoU0tTIHkTwqpwnGBgsbHCW+mISytC176/UCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQW+CzduxW8EynYt7f8JnjATS+8pzAfBgNVHSMEGDAWgBQUXOspIIng33Vx
nbPpbFCXVPlINzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZGenJLU0NKNE45MWNaMno2V3hRbDFUNVNEYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvYzcxZmRlLTNlZjItNGJmNy04NjQxLTEyNzE5YzI2MWNjMC8x
L0Z2Z3MzYnNWdkJNcDJMZTNfQ1o0d0UwdnZLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
YzcxZmRlLTNlZjItNGJmNy04NjQxLTEyNzE5YzI2MWNjMC8xL0ZGenJLU0NKNE45
MWNaMno2V3hRbDFUNVNEYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2XCAMEAC2XCzANBgkqhkiG9w0B
AQsFAAOCAQEAR0XFlrOEPJxUwyRkjH7N2uXS2AS3xxTPV9lUgy7evRmLvimWSDEH
vf6JQJ1bcJAmleorgeVQAaVJNkFv8KJLyZIxIp2D8pRs7cXg+v4165FeYhJzgbv6
62fYIta+iIgxg/9H3lBG5nfuXKqglLu/MDtSq/Q+1G5aF37liYDYPRwwV9yDe1lP
OJ+x/S15xizG/2FmMszSSufPX4DYFX/f8vUgtbn5axMFd9I37nJ/Gw5AsLQnotve
q6L2m690Y4gxgJHH6oWqOh+IJOXyY+OKrTZV4CjFLOd4WpHJKxgl8DGNXameqm2O
ALOhd01ZoXhsHNxlWJ5k4KGyJ2FQCDAJAQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net