Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/vJ2EX6pztDEj_dZkvV66hInA1-E.roa
File: vJ2EX6pztDEj_dZkvV66hInA1-E.roa (raw, json)
Hash identifier: lsG4HcHr1Tu0xUXcq/IDvopCuRxjj4vx8jqf2aziV9Y=
Subject key identifier: BC:9D:84:5F:AA:73:B4:31:23:FD:D6:64:BD:5E:BA:84:89:C0:D7:E1
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 040280CA
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/vJ2EX6pztDEj_dZkvV66hInA1-E.roa
Signing time: Sat 01 Jan 2022 15:01:15 +0000
ROA not before: Sat 01 Jan 2022 15:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9890
IP address blocks: 155.45.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67272906 (0x40280ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 15:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc9d845faa73b43123fdd664bd5eba8489c0d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:b2:61:23:fb:7a:14:bb:ea:99:e7:d2:75:
d2:13:e7:a5:70:41:5d:4a:c3:e6:bd:0d:fc:aa:4c:
8f:40:33:47:e7:90:4d:0b:cb:64:c3:41:c6:b7:ac:
34:93:6b:f3:31:74:11:30:2f:e5:40:0c:78:23:4f:
e1:f3:2a:37:d5:34:fd:5b:78:94:d8:f7:e9:01:89:
b9:cc:69:59:ed:9c:67:e7:4f:d9:c6:d9:2f:90:53:
23:a2:54:c1:cc:62:19:25:05:ab:dc:c5:1c:c1:05:
b0:da:5a:78:18:b1:74:34:2d:6e:0a:e9:7f:97:33:
ad:d2:4f:14:2f:88:3a:12:59:c6:11:3f:17:4d:f7:
6f:8a:fd:ac:f5:f4:8a:10:13:61:ec:2b:66:62:ca:
53:73:22:ec:2c:ac:79:d2:e8:ed:8e:c2:76:7b:d7:
10:71:19:65:cf:a7:a7:3a:c4:30:5a:0d:8b:0b:d5:
71:e9:1d:89:9c:fe:92:30:b3:49:19:60:8b:4e:53:
bc:26:6c:4f:01:ae:7f:94:e6:8d:33:a2:0f:9c:af:
73:a6:fe:4f:01:e5:c9:c8:50:b0:f6:97:40:28:53:
23:59:d7:a5:84:80:96:fb:ca:5d:78:b1:e6:ca:06:
5d:6f:af:04:c0:d6:c5:0d:98:78:6c:15:f6:f6:3e:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:84:5F:AA:73:B4:31:23:FD:D6:64:BD:5E:BA:84:89:C0:D7:E1
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/vJ2EX6pztDEj_dZkvV66hInA1-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:67:1a:13:94:e6:88:20:c0:f0:eb:56:e1:24:0c:d3:a2:4a:
bd:b5:52:7f:a7:7d:d3:6f:0e:30:57:a8:d6:3a:3f:ef:8c:22:
44:e7:c1:ec:8d:90:bf:94:3e:79:83:aa:61:43:bb:0d:2b:9d:
a7:06:ff:59:30:10:26:25:0e:88:82:99:8e:8e:45:dd:f7:d2:
a7:b8:18:29:4d:18:41:14:e3:75:24:43:80:1a:7e:dd:68:27:
ca:da:31:5f:3f:72:95:c6:89:55:73:4b:83:02:11:97:99:c8:
92:83:6b:4d:c3:bc:80:23:f2:94:08:90:c2:8c:3f:87:6a:39:
14:7d:d2:25:3a:de:13:fe:6e:9a:80:6b:a0:ee:74:da:a0:a0:
bf:38:8f:6f:8a:c4:67:57:c2:48:54:61:97:02:6b:72:f2:88:
0c:db:c0:02:3e:c6:41:15:5b:62:57:f0:e9:59:74:80:2b:2e:
56:a8:45:74:70:db:2d:2b:1e:b9:95:f3:c1:14:d9:88:49:06:
48:d2:00:04:0c:da:65:61:70:c5:88:2c:9d:3a:7b:9c:2e:74:
cc:55:32:b2:35:b8:f8:3c:ee:c0:3e:80:60:3f:7f:98:11:40:
62:73:71:ec:a9:0d:49:0a:96:34:49:05:af:46:57:c0:0b:f0:
27:05:b0:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAKAyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NmNkZTEzOWFlMDU3M2IwYTRkZGE5M2U3N2I1N2ZmMjdmOWJlYmExMB4XDTIyMDEw
MTE1MDExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmM5ZDg0NWZhYTcz
YjQzMTIzZmRkNjY0YmQ1ZWJhODQ4OWMwZDdlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjmsmEj+3oUu+qZ59J10hPnpXBBXUrD5r0N/KpMj0AzR+eQ
TQvLZMNBxresNJNr8zF0ETAv5UAMeCNP4fMqN9U0/Vt4lNj36QGJucxpWe2cZ+dP
2cbZL5BTI6JUwcxiGSUFq9zFHMEFsNpaeBixdDQtbgrpf5czrdJPFC+IOhJZxhE/
F033b4r9rPX0ihATYewrZmLKU3Mi7CysedLo7Y7CdnvXEHEZZc+npzrEMFoNiwvV
cekdiZz+kjCzSRlgi05TvCZsTwGuf5TmjTOiD5yvc6b+TwHlychQsPaXQChTI1nX
pYSAlvvKXXix5soGXW+vBMDWxQ2YeGwV9vY+ZhkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS8nYRfqnO0MSP91mS9XrqEicDX4TAfBgNVHSMEGDAWgBQWzeE5rgVzsKTd
qT53tX/yf5vroTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZzM2hPYTRGYzdDazNhay1kN1ZfOG4tYjY2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvM2MwMmY2LTdjNDEtNDliYi1iOWRlLWI2OWRjZTc1NDdhMS8x
L3ZKMkVYNnB6dERFal9kWmt2VjY2aEluQTEtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
M2MwMmY2LTdjNDEtNDliYi1iOWRlLWI2OWRjZTc1NDdhMS8xL0ZzM2hPYTRGYzdD
azNhay1kN1ZfOG4tYjY2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJstgjANBgkqhkiG9w0BAQsFAAOC
AQEAT2caE5TmiCDA8OtW4SQM06JKvbVSf6d9028OMFeo1jo/74wiROfB7I2Qv5Q+
eYOqYUO7DSudpwb/WTAQJiUOiIKZjo5F3ffSp7gYKU0YQRTjdSRDgBp+3Wgnytox
Xz9ylcaJVXNLgwIRl5nIkoNrTcO8gCPylAiQwow/h2o5FH3SJTreE/5umoBroO50
2qCgvziPb4rEZ1fCSFRhlwJrcvKIDNvAAj7GQRVbYlfw6Vl0gCsuVqhFdHDbLSse
uZXzwRTZiEkGSNIABAzaZWFwxYgsnTp7nC50zFUysjW4+DzuwD6AYD9/mBFAYnNx
7KkNSQqWNEkFr0ZXwAvwJwWwkw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:07:11 2025 by rpki-client