Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa
File: YSyt_4-HapTay7A_jQUwcjQOag4.roa (raw, json)
Hash identifier: btXrl22GLqUmZfUYxO2SRaqF4IOQw/dKbxK5xLKF91U=
Subject key identifier: 61:2C:AD:FF:8F:87:6A:94:DA:CB:B0:3F:8D:05:30:72:34:0E:6A:0E
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 083B516C
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa
Signing time: Mon 31 Jan 2022 17:32:47 +0000
ROA not before: Mon 31 Jan 2022 17:32:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208621
IP address blocks: 45.92.36.0/24 maxlen: 24
45.92.38.0/24 maxlen: 24
45.92.37.0/24 maxlen: 24
45.92.39.0/24 maxlen: 24
2a0e:1bc7::/35 maxlen: 35
2a0e:1bc0:2000::/35 maxlen: 35
2a0e:1bc0:4000::/35 maxlen: 35
2a0e:1bc0:6000::/35 maxlen: 35
2a0e:1bc0::/35 maxlen: 35
2a0e:1bc1::/35 maxlen: 35
2a0e:1bc1:2000::/35 maxlen: 35
2a0e:1bc5::/35 maxlen: 35
2a0e:1bc4::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138105196 (0x83b516c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jan 31 17:32:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=612cadff8f876a94dacbb03f8d053072340e6a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:fa:be:93:4e:4f:1d:8f:85:1a:4f:bf:7a:
35:a8:dc:db:a8:e0:d3:56:5c:6e:7c:86:03:1c:ca:
31:98:f8:ff:0e:3d:35:58:97:3f:1e:27:57:37:dc:
b2:2d:1f:a7:64:1d:d9:ed:20:30:89:fd:cf:2a:b3:
e3:00:41:ad:15:43:de:83:1b:74:93:34:81:be:b6:
7b:e9:dc:1b:ae:e6:4e:9f:df:af:cd:bf:ac:a1:eb:
0e:41:68:d5:75:c2:e3:2f:4e:7e:b6:de:d9:76:50:
eb:b8:fc:3b:70:69:e0:cd:19:a2:89:0d:56:32:9b:
f0:41:e4:ee:aa:be:eb:f1:c1:c3:29:58:51:a3:b1:
76:fe:7b:68:6c:25:39:c5:62:7f:23:4a:03:72:18:
ad:45:20:02:ce:1d:6a:e2:c2:fe:f6:f1:e8:7e:cc:
d4:e5:9c:ef:87:de:1d:22:73:cb:38:fa:7f:6e:cf:
58:04:dc:10:ee:fd:b2:8b:4d:8f:40:95:01:26:11:
02:07:ff:2d:65:a9:80:b4:50:eb:c1:f4:6f:f5:92:
b9:8d:64:58:43:a7:18:90:96:cc:00:bd:76:36:cc:
f8:40:4e:e1:38:20:7e:03:e1:60:9f:82:97:19:dd:
86:a9:9d:51:87:34:0b:b0:a0:8c:ce:a5:29:3a:36:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:AD:FF:8F:87:6A:94:DA:CB:B0:3F:8D:05:30:72:34:0E:6A:0E
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.36.0/22
IPv6:
2a0e:1bc0::/33
2a0e:1bc1::/34
2a0e:1bc4::/35
2a0e:1bc5::/35
2a0e:1bc7::/35
Signature Algorithm: sha256WithRSAEncryption
51:88:28:29:0f:92:12:ab:cc:46:cc:98:62:8d:5b:6e:1b:cd:
80:99:10:ac:87:97:9b:7d:94:33:27:cc:4d:18:6d:a6:11:dd:
d2:11:27:f3:59:cf:60:10:f4:2d:08:12:89:72:9a:97:f6:f6:
c3:83:cd:30:49:af:a1:de:47:9a:35:18:84:58:96:70:21:58:
bf:05:13:52:eb:25:f1:88:0a:a4:1d:d9:03:80:b0:0c:9b:1b:
86:ea:d4:66:c1:e1:98:68:37:c3:da:af:9b:09:8c:a8:da:7f:
55:67:bb:3a:09:6f:df:da:12:6d:34:a8:df:7a:b6:3b:8a:88:
d9:c7:9d:30:da:04:08:9b:5a:6b:23:5e:e0:fb:ed:82:0e:44:
f9:20:e9:c3:79:df:8b:65:1f:42:97:95:36:fc:b4:05:51:cf:
18:84:03:7c:44:a8:55:3d:46:f9:70:86:24:f3:23:1f:a9:44:
c8:6a:82:88:fd:bf:0a:01:df:91:ab:72:22:c9:bc:8a:c5:5b:
db:db:a6:f7:19:28:ca:c9:3b:ca:ed:3d:58:be:7f:8e:ad:20:
7d:81:e3:70:7b:62:a2:8c:c6:30:3b:ab:e7:d1:05:b9:2f:39:
9d:26:90:74:10:1d:24:0c:c5:36:5a:88:a8:f3:58:92:60:6f:
18:97:51:55
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIECDtRbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjY4NjU2MTI2MTk4MzczZDA3ODg2YmY0YWI4ZmIwNmI5MDA2NzgwMB4XDTIyMDEz
MTE3MzI0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjEyY2FkZmY4Zjg3
NmE5NGRhY2JiMDNmOGQwNTMwNzIzNDBlNmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL93+r6TTk8dj4UaT796Najc26jg01ZcbnyGAxzKMZj4/w49
NViXPx4nVzfcsi0fp2Qd2e0gMIn9zyqz4wBBrRVD3oMbdJM0gb62e+ncG67mTp/f
r82/rKHrDkFo1XXC4y9Ofrbe2XZQ67j8O3Bp4M0ZookNVjKb8EHk7qq+6/HBwylY
UaOxdv57aGwlOcVifyNKA3IYrUUgAs4dauLC/vbx6H7M1OWc74feHSJzyzj6f27P
WATcEO79sotNj0CVASYRAgf/LWWpgLRQ68H0b/WSuY1kWEOnGJCWzAC9djbM+EBO
4TggfgPhYJ+ClxndhqmdUYc0C7CgjM6lKTo2cFcCAwEAAaOCAjkwggI1MB0GA1Ud
DgQWBBRhLK3/j4dqlNrLsD+NBTByNA5qDjAfBgNVHSMEGDAWgBQbaGVhJhmDc9B4
hr9KuPsGuQBngDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0cyaGxZU1laZzNQUWVJYV9Tcmo3QnJrQVo0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNTMxMDBmLTFiYjMtNDIxOS05YzgyLTIzOTg3MDRhYjUwYy8x
L1lTeXRfNC1IYXBUYXk3QV9qUVV3Y2pRT2FnNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NTMxMDBmLTFiYjMtNDIxOS05YzgyLTIzOTg3MDRhYjUwYy8xL0cyaGxZU1laZzNQ
UWVJYV9Tcmo3QnJrQVo0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBP
BggrBgEFBQcBBwEB/wRAMD4wDAQCAAEwBgMEAi1cJDAuBAIAAjAoAwYHKg4bwAAD
BgYqDhvBAAMGBSoOG8QAAwYFKg4bxQADBgUqDhvHADANBgkqhkiG9w0BAQsFAAOC
AQEAUYgoKQ+SEqvMRsyYYo1bbhvNgJkQrIeXm32UMyfMTRhtphHd0hEn81nPYBD0
LQgSiXKal/b2w4PNMEmvod5HmjUYhFiWcCFYvwUTUusl8YgKpB3ZA4CwDJsbhurU
ZsHhmGg3w9qvmwmMqNp/VWe7Oglv39oSbTSo33q2O4qI2cedMNoECJtaayNe4Pvt
gg5E+SDpw3nfi2UfQpeVNvy0BVHPGIQDfESoVT1G+XCGJPMjH6lEyGqCiP2/CgHf
katyIsm8isVb29um9xkoysk7yu09WL5/jq0gfYHjcHtioozGMDur59EFuS85nSaQ
dBAdJAzFNlqIqPNYkmBvGJdRVQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net