Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/SuyS0BHTbA6tQmYz0LhwUKSHQLU.roa
File: SuyS0BHTbA6tQmYz0LhwUKSHQLU.roa (raw, json)
Hash identifier: rGbP9hhj/gYL9kBFnlr1QLVQxyd+BsmqSRfZzIbTChY=
Subject key identifier: 4A:EC:92:D0:11:D3:6C:0E:AD:42:66:33:D0:B8:70:50:A4:87:40:B5
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1FC52084037FF7E0E641B3ED7A813
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/SuyS0BHTbA6tQmYz0LhwUKSHQLU.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210368
IP address blocks: 94.45.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fc:52:08:40:37:ff:7e:0e:64:1b:3e:d7:a8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aec92d011d36c0ead426633d0b87050a48740b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:8c:e3:73:b9:e3:7a:71:4a:94:c3:e0:92:
88:5d:9c:b2:f3:f3:06:19:ae:a3:76:23:0a:f0:04:
7b:61:21:15:36:92:20:e6:fa:77:19:a4:f3:5f:88:
62:86:df:14:84:35:17:28:cb:73:ae:97:44:ab:18:
d6:06:ba:5b:09:dc:60:6a:90:32:8a:75:e4:67:73:
9f:2f:71:9e:52:73:75:e9:f4:78:33:aa:28:8a:3d:
8f:90:00:8f:68:a3:49:4b:a6:66:82:b4:11:88:87:
a1:63:df:d2:4e:79:da:b1:e3:b3:3c:96:d6:4e:90:
95:a4:14:ab:82:b4:28:44:a7:42:5c:09:b4:59:33:
19:19:24:3d:f1:c0:cf:d2:2a:e0:f9:29:e8:48:90:
55:8d:cd:20:57:b1:e2:01:f3:05:ff:e6:12:b4:64:
57:28:4c:bd:b3:93:97:5a:2c:55:ad:40:67:3e:9f:
c3:60:14:63:c9:05:e3:c6:5f:13:77:04:bb:65:22:
d7:ff:99:fc:e7:7b:66:b9:9b:0e:40:2f:1f:e9:60:
75:08:4a:66:c6:a1:b5:0a:22:58:87:c9:00:bc:e4:
4b:70:c3:57:0c:a9:4d:e2:c5:87:2d:1b:9b:af:16:
c6:35:1f:80:82:f0:60:41:7a:1b:9a:ff:28:bc:1c:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:92:D0:11:D3:6C:0E:AD:42:66:33:D0:B8:70:50:A4:87:40:B5
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/SuyS0BHTbA6tQmYz0LhwUKSHQLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.144.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b5:42:c8:61:80:85:2d:6d:a3:95:90:f2:85:f1:a5:c5:91:
5a:3f:f8:20:24:47:5f:dd:78:22:c1:c1:f5:86:24:ed:7a:70:
7b:d0:47:fd:a4:95:c2:06:40:2a:a2:d6:d1:83:6c:d3:0a:c0:
24:99:91:2a:63:f3:75:04:95:e8:39:92:45:9d:8f:6d:b1:20:
45:87:c3:b9:67:4a:ad:37:18:e6:37:1c:42:09:cb:bf:9e:b1:
17:30:c4:62:43:97:31:d9:a0:58:81:44:af:54:c9:95:1c:70:
ac:db:83:4f:82:35:d1:21:9d:75:49:e2:92:89:22:f4:17:fb:
66:3e:a5:59:c7:f5:7d:cb:4f:4e:a1:6d:c4:a6:c6:1b:15:dc:
5b:3f:3e:11:83:4e:70:88:a1:bc:ad:82:a5:8e:a3:4f:e7:e6:
3f:30:85:55:85:ee:a5:b7:37:ee:bf:f9:66:b2:c5:21:a2:df:
14:88:28:ba:7d:79:e4:aa:02:7d:78:fa:9c:ca:ea:66:10:64:
c3:b3:4f:69:7d:46:d9:1a:f7:b3:a4:c9:f2:a2:15:b4:41:ba:
65:c8:72:7d:75:93:ac:c9:ec:89:ae:b3:72:23:3e:17:2b:30:
e7:2d:cc:98:3b:63:15:43:8e:1b:e8:60:22:55:2e:68:7a:2b:
96:dc:84:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwfxSCEA3/34OZBs+16gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjMwMTAxMTkxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWVjOTJkMDExZDM2YzBlYWQ0MjY2MzNkMGI4NzA1MGE0ODc0MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU6M43O543pxSpTD4JKIXZyy8/MG
Ga6jdiMK8AR7YSEVNpIg5vp3GaTzX4hiht8UhDUXKMtzrpdEqxjWBrpbCdxgapAy
inXkZ3OfL3GeUnN16fR4M6ooij2PkACPaKNJS6ZmgrQRiIehY9/STnnaseOzPJbW
TpCVpBSrgrQoRKdCXAm0WTMZGSQ98cDP0irg+SnoSJBVjc0gV7HiAfMF/+YStGRX
KEy9s5OXWixVrUBnPp/DYBRjyQXjxl8TdwS7ZSLX/5n853tmuZsOQC8f6WB1CEpm
xqG1CiJYh8kAvORLcMNXDKlN4sWHLRubrxbGNR+AgvBgQXobmv8ovBzblwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErsktAR02wOrUJmM9C4cFCkh0C1MB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvU3V5UzBCSFRiQTZ0UW1ZejBMaHdVS1NIUUxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXi2QMA0G
CSqGSIb3DQEBCwUAA4IBAQAwtULIYYCFLW2jlZDyhfGlxZFaP/ggJEdf3XgiwcH1
hiTtenB70Ef9pJXCBkAqotbRg2zTCsAkmZEqY/N1BJXoOZJFnY9tsSBFh8O5Z0qt
NxjmNxxCCcu/nrEXMMRiQ5cx2aBYgUSvVMmVHHCs24NPgjXRIZ11SeKSiSL0F/tm
PqVZx/V9y09OoW3EpsYbFdxbPz4Rg05wiKG8rYKljqNP5+Y/MIVVhe6ltzfuv/lm
ssUhot8UiCi6fXnkqgJ9ePqcyupmEGTDs09pfUbZGvezpMnyohW0QbplyHJ9dZOs
yeyJrrNyIz4XKzDnLcyYO2MVQ44b6GAiVS5oeiuW3IR4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:50 2025 by rpki-client