Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/F2miK-4WsuzfqqD10uvFB77QSeY.roa
File: F2miK-4WsuzfqqD10uvFB77QSeY.roa (raw, json)
Hash identifier: UPE84lvV4yvQAWKGPt+6SxGErXZcn4e7yiptagdvMPQ=
Subject key identifier: 17:69:A2:2B:EE:16:B2:EC:DF:AA:A0:F5:D2:EB:C5:07:BE:D0:49:E6
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 08828826
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/F2miK-4WsuzfqqD10uvFB77QSeY.roa
Signing time: Sat 01 Jan 2022 08:03:44 +0000
ROA not before: Sat 01 Jan 2022 08:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197922
IP address blocks: 45.81.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142772262 (0x8828826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Jan 1 08:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1769a22bee16b2ecdfaaa0f5d2ebc507bed049e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:74:06:fc:9b:48:e3:5d:99:ee:bf:ad:04:
95:69:1f:0a:79:a4:61:6c:8b:e9:32:44:38:ce:3b:
af:01:6d:b6:8a:cb:9f:89:b1:81:72:42:80:9a:e4:
c9:e0:ed:34:30:0b:8f:06:78:59:70:00:a7:2b:15:
2b:c8:72:1d:dd:a2:47:5c:c6:03:03:0d:a4:71:fa:
77:77:b5:d1:4b:26:92:de:97:5a:72:67:21:c6:70:
eb:4f:b8:86:76:6f:9d:4b:c5:b1:aa:18:d4:32:bd:
93:58:4f:ea:d9:b3:eb:d2:8f:44:4d:86:fa:d8:41:
0e:24:8d:f0:b2:50:90:f9:5c:b8:57:eb:f5:ef:69:
73:11:2a:c1:fd:16:2a:14:cd:11:fd:83:65:be:a0:
b4:12:ab:8b:45:49:75:23:3c:23:86:98:a5:aa:f7:
57:1a:29:8f:fd:91:fe:d4:52:36:4e:11:a2:ce:6c:
e7:f4:f3:24:05:85:68:9e:d3:6d:81:e3:96:0e:dc:
0e:f2:f2:fd:67:d1:e7:7e:e5:12:e6:9c:42:3d:a4:
d0:f1:07:c5:f1:75:a2:40:52:05:fb:ae:3a:22:dc:
8d:b3:05:ca:69:96:21:fd:6c:27:14:95:44:b8:6f:
a8:48:2c:7a:86:ff:72:e7:d4:86:c8:32:fc:4b:4a:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:A2:2B:EE:16:B2:EC:DF:AA:A0:F5:D2:EB:C5:07:BE:D0:49:E6
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/F2miK-4WsuzfqqD10uvFB77QSeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:83:bb:66:7e:66:ba:ea:1f:5d:dc:14:3e:d8:7d:7c:25:e5:
b1:73:ee:2b:6c:b2:60:c4:48:92:5a:17:db:70:d1:e4:74:67:
36:28:5b:6b:ca:ef:00:25:fe:05:7c:7f:b3:41:ee:2c:32:f0:
10:57:fa:01:84:f9:85:97:62:9a:c1:44:6b:bd:3b:9c:5a:fe:
92:6a:46:76:c6:8c:dd:fd:cd:53:34:6b:2b:92:a5:41:fa:4a:
93:3d:4a:19:9e:bb:1e:5b:b6:ac:13:8a:92:8a:fb:49:f2:bd:
7e:6e:7f:e7:56:69:60:21:6f:a7:8d:fd:21:a3:fa:0f:3a:bf:
f4:1c:e2:f0:0c:62:ac:be:28:4f:61:be:a7:0f:76:c9:b7:45:
63:c4:e5:8d:fc:09:ba:41:bc:86:17:01:d1:ed:6f:19:8a:f6:
a9:e3:9d:cd:86:07:24:08:cd:8c:c4:2b:03:9c:c5:30:5c:60:
97:58:17:32:42:7d:4b:50:7b:43:09:7c:ad:24:eb:a5:7e:3c:
ca:af:e9:91:c0:51:f4:4e:37:8b:be:41:6f:7a:cc:97:d0:cd:
48:b6:ff:30:2f:1c:19:e6:d7:18:9e:27:ac:43:76:5c:a5:2e:
74:e1:8e:09:e8:64:93:d5:d3:fc:4f:c7:76:45:20:ac:35:2a:
7a:9a:f2:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECIKIJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDRkZDNhZmQ3Y2NlN2NlMDBhOWVhYzY3ZTBiY2E5OWJlYjcyOWFhMB4XDTIyMDEw
MTA4MDM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc2OWEyMmJlZTE2
YjJlY2RmYWFhMGY1ZDJlYmM1MDdiZWQwNDllNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFsdAb8m0jjXZnuv60ElWkfCnmkYWyL6TJEOM47rwFttorL
n4mxgXJCgJrkyeDtNDALjwZ4WXAApysVK8hyHd2iR1zGAwMNpHH6d3e10Usmkt6X
WnJnIcZw60+4hnZvnUvFsaoY1DK9k1hP6tmz69KPRE2G+thBDiSN8LJQkPlcuFfr
9e9pcxEqwf0WKhTNEf2DZb6gtBKri0VJdSM8I4aYpar3Vxopj/2R/tRSNk4Ros5s
5/TzJAWFaJ7TbYHjlg7cDvLy/WfR537lEuacQj2k0PEHxfF1okBSBfuuOiLcjbMF
ymmWIf1sJxSVRLhvqEgseob/cufUhsgy/EtKNWUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXaaIr7hay7N+qoPXS68UHvtBJ5jAfBgNVHSMEGDAWgBR0TdOv18znzgCp
6sZ+C8qZvrcpqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RFM1RyOWZNNTg0QXFlckdmZ3ZLbWI2M0thby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMmVhNTk0LWEyY2EtNGZmYS04OWVlLTg5MjFiMDU1OWU5MC8x
L0YybWlLLTRXc3V6ZnFxRDEwdXZGQjc3UVNlWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MmVhNTk0LWEyY2EtNGZmYS04OWVlLTg5MjFiMDU1OWU5MC8xL2RFM1RyOWZNNTg0
QXFlckdmZ3ZLbWI2M0thby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1RVDANBgkqhkiG9w0BAQsFAAOC
AQEAeoO7Zn5muuofXdwUPth9fCXlsXPuK2yyYMRIkloX23DR5HRnNihba8rvACX+
BXx/s0HuLDLwEFf6AYT5hZdimsFEa707nFr+kmpGdsaM3f3NUzRrK5KlQfpKkz1K
GZ67Hlu2rBOKkor7SfK9fm5/51ZpYCFvp439IaP6Dzq/9Bzi8AxirL4oT2G+pw92
ybdFY8TljfwJukG8hhcB0e1vGYr2qeOdzYYHJAjNjMQrA5zFMFxgl1gXMkJ9S1B7
Qwl8rSTrpX48yq/pkcBR9E43i75Bb3rMl9DNSLb/MC8cGebXGJ4nrEN2XKUudOGO
Cehkk9XT/E/HdkUgrDUqepryBA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:25 2025 by rpki-client