Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/JsOO3CD3ztdUfW1-0kqB-UTHgWY.roa
File: JsOO3CD3ztdUfW1-0kqB-UTHgWY.roa (raw, json)
Hash identifier: Tb0N1KaJ2mNHXf3lZgHS/TwMxZdu0knKflII+YHRvPE=
Subject key identifier: 26:C3:8E:DC:20:F7:CE:D7:54:7D:6D:7E:D2:4A:81:F9:44:C7:81:66
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0779E421
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/JsOO3CD3ztdUfW1-0kqB-UTHgWY.roa
Signing time: Sat 01 Jan 2022 14:01:29 +0000
ROA not before: Sat 01 Jan 2022 14:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45009
IP address blocks: 45.150.43.0/24 maxlen: 24
45.150.40.0/24 maxlen: 24
45.150.41.0/24 maxlen: 24
45.150.40.0/22 maxlen: 22
45.150.42.0/24 maxlen: 24
2a0f:9201::/48 maxlen: 48
2a0f:9207::/32 maxlen: 32
2a0f:9200::/29 maxlen: 29
2a0f:9207::/48 maxlen: 48
2a0f:9200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125428769 (0x779e421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jan 1 14:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c38edc20f7ced7547d6d7ed24a81f944c78166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:22:cd:2b:5f:b5:1d:5d:23:dd:a8:94:6d:
f7:73:23:74:c8:af:81:63:37:0d:fd:37:44:b7:21:
a4:10:6a:fe:4d:59:fb:b0:bd:27:0b:bf:a0:72:53:
a6:38:d3:ad:03:29:6a:8f:3e:2f:be:e2:53:75:db:
e2:24:74:af:d9:97:6f:11:5c:d9:c1:f7:74:93:46:
f2:4e:d3:01:16:84:c7:44:fb:82:a7:e0:b1:af:38:
49:35:70:b9:11:d8:b7:1f:bf:54:67:c7:09:b1:65:
9e:89:c0:ef:56:b1:1f:5d:42:26:3d:2f:2e:ef:5c:
95:71:25:ae:25:d1:25:b1:27:c2:46:4f:da:2c:13:
df:a8:00:dc:a9:c4:1c:ff:76:a4:4c:77:ff:d0:c6:
4d:91:0c:9b:4c:51:02:54:6f:30:9b:07:a2:0a:a5:
c3:cc:f3:03:4a:6e:df:04:71:96:ff:0e:96:18:dd:
37:3d:94:34:e1:9f:5b:2b:3a:5f:f9:0a:68:ef:32:
f8:37:0c:f1:58:bc:24:51:0a:87:f0:85:6a:6a:65:
dc:94:89:9a:be:9a:9f:f2:38:4e:dd:f0:12:c7:74:
b4:1a:5f:d4:c6:c3:8d:e5:90:f7:96:26:a4:01:36:
b6:96:7b:e1:af:c1:ad:02:e2:02:0e:a8:e0:fd:19:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:8E:DC:20:F7:CE:D7:54:7D:6D:7E:D2:4A:81:F9:44:C7:81:66
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/JsOO3CD3ztdUfW1-0kqB-UTHgWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.40.0/22
IPv6:
2a0f:9200::/29
Signature Algorithm: sha256WithRSAEncryption
8d:39:eb:c7:a0:ff:6e:81:c7:47:02:64:fa:fb:2a:a7:ac:be:
67:51:e5:84:62:85:21:c8:0f:c2:c4:1e:be:45:d5:6a:ef:da:
23:d1:94:8e:f8:83:dd:25:3e:23:5b:eb:a7:a8:e0:f2:01:c2:
28:1c:44:30:e3:23:4a:39:3d:ed:b2:6e:60:24:bc:f2:cc:a9:
55:dd:c8:9b:a6:a8:4f:88:40:af:c0:52:9c:34:8d:e1:05:8a:
05:5f:84:c8:e7:79:b3:af:16:94:5b:ed:11:7d:1a:20:1e:53:
7f:8a:65:df:46:a3:09:01:0c:79:28:0b:d9:22:1f:43:57:57:
ed:77:44:75:8e:7c:75:36:41:a3:ab:4f:e7:d4:4f:9e:0c:72:
9c:35:d4:13:9f:2b:9e:e3:54:83:3a:44:83:52:6d:8c:81:6e:
57:d7:4f:a6:ec:cb:9a:7b:0a:01:11:93:62:28:28:36:30:f7:
35:0d:ba:e2:39:a1:1c:c3:d8:16:70:8b:8a:70:59:a3:cc:77:
93:4f:8c:ba:57:67:c3:57:d4:35:08:ba:48:58:de:3f:9f:35:
58:dd:8c:68:2f:f9:7b:a7:cd:a0:00:ce:d9:b6:07:ed:02:cd:
1b:f0:70:f6:70:31:c6:93:ef:bc:32:0d:67:1c:51:1e:50:7f:
37:37:de:41
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB3nkITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YTcyYjYwZjVmYjQ5MzAwMTZjZWI4NjBjYzE3NGE1MzEzNWYxNjE2MB4XDTIyMDEw
MTE0MDEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZjMzhlZGMyMGY3
Y2VkNzU0N2Q2ZDdlZDI0YTgxZjk0NGM3ODE2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJQsIs0rX7UdXSPdqJRt93MjdMivgWM3Df03RLchpBBq/k1Z
+7C9Jwu/oHJTpjjTrQMpao8+L77iU3Xb4iR0r9mXbxFc2cH3dJNG8k7TARaEx0T7
gqfgsa84STVwuRHYtx+/VGfHCbFlnonA71axH11CJj0vLu9clXElriXRJbEnwkZP
2iwT36gA3KnEHP92pEx3/9DGTZEMm0xRAlRvMJsHogqlw8zzA0pu3wRxlv8Olhjd
Nz2UNOGfWys6X/kKaO8y+DcM8Vi8JFEKh/CFampl3JSJmr6an/I4Tt3wEsd0tBpf
1MbDjeWQ95YmpAE2tpZ74a/BrQLiAg6o4P0ZwJkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQmw47cIPfO11R9bX7SSoH5RMeBZjAfBgNVHSMEGDAWgBSKcrYPX7STABbO
uGDMF0pTE18WFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2luSzJEMS0wa3dBV3pyaGd6QmRLVXhOZkZoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvNDFmZTg5LTA4ZDYtNDRmOC1iNzU0LWUwODUwNWM5MTA2Ni8x
L0pzT08zQ0QzenRkVWZXMS0wa3FCLVVUSGdXWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
NDFmZTg5LTA4ZDYtNDRmOC1iNzU0LWUwODUwNWM5MTA2Ni8xL2luSzJEMS0wa3dB
V3pyaGd6QmRLVXhOZkZoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2WKDANBAIAAjAHAwUDKg+SADAN
BgkqhkiG9w0BAQsFAAOCAQEAjTnrx6D/boHHRwJk+vsqp6y+Z1HlhGKFIcgPwsQe
vkXVau/aI9GUjviD3SU+I1vrp6jg8gHCKBxEMOMjSjk97bJuYCS88sypVd3Im6ao
T4hAr8BSnDSN4QWKBV+EyOd5s68WlFvtEX0aIB5Tf4pl30ajCQEMeSgL2SIfQ1dX
7XdEdY58dTZBo6tP59RPngxynDXUE58rnuNUgzpEg1JtjIFuV9dPpuzLmnsKARGT
YigoNjD3NQ264jmhHMPYFnCLinBZo8x3k0+Muldnw1fUNQi6SFjeP581WN2MaC/5
e6fNoADO2bYH7QLNG/Bw9nAxxpPvvDINZxxRHlB/NzfeQQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net