Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/4gwWPJnTUMpwImWq1kNHKdqwtSc.roa
File: 4gwWPJnTUMpwImWq1kNHKdqwtSc.roa (raw, json)
Hash identifier: hU1GgiNFswplj3/XH/xeJLHI8XpuE7aTaizNJxnajWY=
Subject key identifier: E2:0C:16:3C:99:D3:50:CA:70:22:65:AA:D6:43:47:29:DA:B0:B5:27
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01847EFCCE78A51E32C492F172457CCA422D
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/4gwWPJnTUMpwImWq1kNHKdqwtSc.roa
Signing time: Wed 16 Nov 2022 05:50:07 +0000
ROA not before: Wed 16 Nov 2022 05:50:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.129.89.0/24 maxlen: 24
45.129.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:ce:78:a5:1e:32:c4:92:f1:72:45:7c:ca:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Nov 16 05:50:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e20c163c99d350ca702265aad6434729dab0b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:e7:90:d9:0d:53:c5:a7:1c:47:d5:3e:e2:
b1:6f:2c:a3:dc:af:90:6e:2e:60:36:2f:f4:01:b0:
c1:31:e4:02:5e:02:50:ea:22:f4:6f:c7:89:4f:b8:
d7:96:55:3e:36:26:4a:f6:f9:58:90:77:c0:6c:3a:
03:04:f3:33:f8:3c:9f:93:93:df:ce:01:8b:84:67:
ae:0c:7d:77:9f:88:a3:3b:27:99:1c:14:d2:af:eb:
a9:7c:1f:23:86:48:09:72:0d:99:5e:8c:8f:15:55:
62:9c:ad:0d:c8:89:a1:18:ca:08:b2:90:72:97:7a:
46:b7:7f:1b:25:59:9d:1d:a4:cf:ee:63:fe:f7:8f:
c1:86:1e:18:a3:18:70:97:ce:4f:8f:48:56:e1:6c:
e8:25:12:c8:96:90:52:6f:2d:c7:54:1a:92:22:f5:
d8:5e:34:d0:ac:69:5e:3b:d0:3c:a2:b0:28:38:3b:
04:45:9c:d9:26:43:da:44:ae:bb:b5:07:67:c6:23:
b3:b5:d4:ad:9c:a9:39:d1:2e:13:23:70:c3:b8:6e:
48:05:fd:e6:26:6e:fd:f6:a6:12:27:a2:47:c7:74:
12:f7:35:83:07:b0:c3:47:cd:7f:43:94:6c:2a:37:
d8:39:3c:56:3d:60:9e:c1:70:32:17:80:80:09:86:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:16:3C:99:D3:50:CA:70:22:65:AA:D6:43:47:29:DA:B0:B5:27
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/4gwWPJnTUMpwImWq1kNHKdqwtSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.89.0/24
45.129.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:de:1d:e4:b5:1b:89:c0:2c:31:e6:82:37:e7:84:96:15:05:
c6:e0:82:3c:d6:4e:f3:80:45:d3:58:e8:68:df:10:0a:8b:06:
d7:cc:a1:30:41:83:88:6d:80:ea:17:2d:7a:15:7e:7b:e6:01:
3c:e6:62:2b:34:90:82:09:68:94:30:ff:21:6c:19:ef:fe:06:
8a:3a:ab:34:10:9c:d5:1b:9e:1b:94:7a:d5:c4:73:7e:51:70:
5a:e8:66:70:2e:8d:64:99:cc:d8:75:10:25:67:78:fb:be:35:
a4:19:61:d8:97:e8:c6:9c:60:3d:96:31:30:d1:22:40:75:ac:
6a:e5:49:6b:25:13:32:fd:7a:a0:af:c9:8a:35:8d:fe:79:e8:
e3:59:04:76:8c:92:38:fd:b8:8c:a5:0b:67:44:23:54:e6:02:
71:50:cd:2a:37:56:ba:21:01:d4:f8:54:3b:e7:1d:48:de:93:
d1:22:33:3c:c5:b2:7c:d5:4c:8f:3b:fb:af:34:dc:63:dc:99:
78:25:ca:02:cc:09:d9:a6:65:c0:05:3a:f6:59:ab:b8:70:99:
63:2a:7a:57:9c:e4:21:3c:0a:12:69:8c:12:2f:c6:28:37:68:
9a:cb:08:37:1d:e3:23:83:a7:a4:7e:99:17:76:03:1f:cb:cf:
2d:ca:28:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYR+/M54pR4yxJLxckV8ykItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm
OWYwN2UwHhcNMjIxMTE2MDU1MDA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjBjMTYzYzk5ZDM1MGNhNzAyMjY1YWFkNjQzNDcyOWRhYjBiNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhffnkNkNU8WnHEfVPuKxbyyj3K+Q
bi5gNi/0AbDBMeQCXgJQ6iL0b8eJT7jXllU+NiZK9vlYkHfAbDoDBPMz+Dyfk5Pf
zgGLhGeuDH13n4ijOyeZHBTSr+upfB8jhkgJcg2ZXoyPFVVinK0NyImhGMoIspBy
l3pGt38bJVmdHaTP7mP+94/Bhh4Yoxhwl85Pj0hW4WzoJRLIlpBSby3HVBqSIvXY
XjTQrGleO9A8orAoODsERZzZJkPaRK67tQdnxiOztdStnKk50S4TI3DDuG5IBf3m
Jm799qYSJ6JHx3QS9zWDB7DDR81/Q5RsKjfYOTxWPWCewXAyF4CACYbRTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOIMFjyZ01DKcCJlqtZDRynasLUnMB8GA1UdIwQY
MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt
ZTY4ZjZjZjJjMGQyLzEvNGd3V1BKblRVTXB3SW1XcTFrTkhLZHF3dFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy
LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYFZAwQA
LYFbMA0GCSqGSIb3DQEBCwUAA4IBAQB73h3ktRuJwCwx5oI354SWFQXG4II81k7z
gEXTWOho3xAKiwbXzKEwQYOIbYDqFy16FX575gE85mIrNJCCCWiUMP8hbBnv/gaK
Oqs0EJzVG54blHrVxHN+UXBa6GZwLo1kmczYdRAlZ3j7vjWkGWHYl+jGnGA9ljEw
0SJAdaxq5UlrJRMy/Xqgr8mKNY3+eejjWQR2jJI4/biMpQtnRCNU5gJxUM0qN1a6
IQHU+FQ75x1I3pPRIjM8xbJ81UyPO/uvNNxj3Jl4JcoCzAnZpmXABTr2Wau4cJlj
KnpXnOQhPAoSaYwSL8YoN2iaywg3HeMjg6ekfpkXdgMfy88tyiiN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:23 2025 by rpki-client