Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/ByVsgZICTWbSIv_edthAab_ywKM.roa
File: ByVsgZICTWbSIv_edthAab_ywKM.roa (raw, json)
Hash identifier: dwsZfZTgsVdReVBfISoCQIH/wj9dscmZLMrey/d8z1Q=
Subject key identifier: 07:25:6C:81:92:02:4D:66:D2:22:FF:DE:76:D8:40:69:BF:F2:C0:A3
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018A8DB60242C5335780B17ADAA09FE22095
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/ByVsgZICTWbSIv_edthAab_ywKM.roa
Signing time: Wed 13 Sep 2023 08:43:50 +0000
ROA not before: Wed 13 Sep 2023 08:43:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.134.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:b6:02:42:c5:33:57:80:b1:7a:da:a0:9f:e2:20:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Sep 13 08:43:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07256c8192024d66d222ffde76d84069bff2c0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:f7:51:52:f2:3b:77:30:1f:0a:71:d8:55:
ea:b1:5b:6f:52:85:74:ff:f5:71:c3:8e:df:e8:cb:
9d:9e:f7:98:e4:2f:ac:04:76:79:7f:c7:8a:07:15:
c1:70:1b:8a:0a:a2:b1:0e:98:34:7a:23:91:55:30:
1f:01:84:97:8a:7d:f1:b0:f5:56:f4:ea:a7:56:88:
8a:90:1f:47:25:cc:38:0a:e3:01:71:58:47:13:fb:
d4:85:b6:5d:34:5c:ef:03:8b:2f:5a:cc:09:fe:98:
a4:0d:74:f2:a2:0a:7c:6b:0e:e3:b8:67:0e:89:c9:
fd:b6:cf:c3:f6:42:f7:9e:05:0a:40:42:f7:ae:20:
06:7a:85:ee:22:af:d1:2c:28:9d:7a:95:fe:09:61:
3b:fb:00:6a:d6:f5:e5:06:c1:91:b5:ed:ec:88:0d:
4c:ca:61:7f:e1:8b:70:1e:03:38:70:05:f0:23:54:
5a:42:b5:de:98:d8:27:44:f1:72:db:1f:77:4c:cb:
6c:fc:3e:22:67:57:44:fe:11:55:4b:bb:a1:87:cb:
3e:d1:3d:f6:2e:a5:cc:29:a6:18:d0:5e:99:e6:31:
c4:eb:0f:02:7c:d2:df:53:da:33:28:fc:2d:13:95:
a6:8b:ce:13:aa:55:3b:94:ef:36:fa:9f:13:49:51:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:25:6C:81:92:02:4D:66:D2:22:FF:DE:76:D8:40:69:BF:F2:C0:A3
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/ByVsgZICTWbSIv_edthAab_ywKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:14:01:95:5d:d0:dd:78:32:51:1d:5f:ab:ec:96:94:a1:82:
73:6a:bc:30:90:f7:51:61:89:7c:41:93:d9:0d:ea:f7:22:93:
3e:be:c3:42:4f:28:7d:0c:09:cf:f0:9b:50:46:0b:dc:ee:01:
d5:77:bb:63:1f:b2:51:21:4b:1b:97:1d:17:03:1a:33:98:22:
73:13:94:c4:c0:e7:6a:44:9f:ab:88:34:26:f4:66:66:0a:4d:
13:2e:29:3d:92:e9:0a:5c:5b:ef:b0:b5:ad:6b:e6:28:b7:e8:
f6:1d:40:c9:45:da:f2:42:c5:fb:08:78:93:f8:ba:a4:71:23:
04:d5:ca:ef:1d:4d:63:98:e9:45:6f:04:6b:80:da:e0:ad:42:
81:42:f6:b6:bb:c7:36:7d:16:11:e1:05:31:c5:2c:1d:bc:a3:
fc:13:24:1b:2e:48:0f:38:83:41:a0:56:1c:a2:43:13:99:f1:
73:fb:5d:e6:a4:79:82:1d:31:cb:73:f2:7f:be:ba:99:5e:c5:
16:c4:bb:c9:2a:7a:5e:db:f4:29:ae:c9:c5:b8:8b:60:88:53:
79:fe:a8:fd:f9:51:a4:10:a1:1e:6d:4b:e6:13:6a:48:43:d7:
a9:74:11:22:c1:03:e2:a6:47:f0:cd:da:1d:43:fd:32:cf:4d:
50:c2:28:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqNtgJCxTNXgLF62qCf4iCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjMwOTEzMDg0MzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzI1NmM4MTkyMDI0ZDY2ZDIyMmZmZGU3NmQ4NDA2OWJmZjJjMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPT3UVLyO3cwHwpx2FXqsVtvUoV0
//Vxw47f6MudnveY5C+sBHZ5f8eKBxXBcBuKCqKxDpg0eiORVTAfAYSXin3xsPVW
9OqnVoiKkB9HJcw4CuMBcVhHE/vUhbZdNFzvA4svWswJ/pikDXTyogp8aw7juGcO
icn9ts/D9kL3ngUKQEL3riAGeoXuIq/RLCidepX+CWE7+wBq1vXlBsGRte3siA1M
ymF/4YtwHgM4cAXwI1RaQrXemNgnRPFy2x93TMts/D4iZ1dE/hFVS7uhh8s+0T32
LqXMKaYY0F6Z5jHE6w8CfNLfU9ozKPwtE5Wmi84TqlU7lO82+p8TSVEeowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAclbIGSAk1m0iL/3nbYQGm/8sCjMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvQnlWc2daSUNUV2JTSXZfZWR0aEFhYl95d0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYJMA0G
CSqGSIb3DQEBCwUAA4IBAQBaFAGVXdDdeDJRHV+r7JaUoYJzarwwkPdRYYl8QZPZ
Der3IpM+vsNCTyh9DAnP8JtQRgvc7gHVd7tjH7JRIUsblx0XAxozmCJzE5TEwOdq
RJ+riDQm9GZmCk0TLik9kukKXFvvsLWta+Yot+j2HUDJRdryQsX7CHiT+LqkcSME
1crvHU1jmOlFbwRrgNrgrUKBQva2u8c2fRYR4QUxxSwdvKP8EyQbLkgPOINBoFYc
okMTmfFz+13mpHmCHTHLc/J/vrqZXsUWxLvJKnpe2/QprsnFuItgiFN5/qj9+VGk
EKEebUvmE2pIQ9epdBEiwQPipkfwzdodQ/0yz01Qwigv
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:58 2025 by rpki-client