Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/B_YsAATdan3iVB0I4apgn9qMfVo.roa
File: B_YsAATdan3iVB0I4apgn9qMfVo.roa (raw, json)
Hash identifier: 9XgHU7z6rPFIVCsW4vPiG3UTyRUnqc8ZImuF5v+El+A=
Subject key identifier: 07:F6:2C:00:04:DD:6A:7D:E2:54:1D:08:E1:AA:60:9F:DA:8C:7D:5A
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 08718398
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/B_YsAATdan3iVB0I4apgn9qMfVo.roa
Signing time: Sat 01 Jan 2022 00:51:33 +0000
ROA not before: Sat 01 Jan 2022 00:51:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60456
IP address blocks: 45.81.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141656984 (0x8718398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jan 1 00:51:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07f62c0004dd6a7de2541d08e1aa609fda8c7d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c2:ae:38:6d:a5:df:9f:ba:0a:e4:84:f5:ee:
24:15:3a:c8:ac:87:f9:2f:e5:5e:89:f1:75:04:10:
d3:98:90:da:6d:bb:ab:2f:e6:e5:a1:8f:9b:b7:04:
7e:32:0d:99:a9:16:73:fc:3a:1b:e1:d4:bb:33:9c:
77:58:9f:7b:63:17:87:89:fe:6e:36:38:81:ed:3a:
3c:ea:9c:f4:64:aa:62:86:2a:a3:23:26:04:4f:5c:
46:66:1f:04:2c:ad:6e:c4:66:40:87:67:43:f2:b7:
8e:ba:eb:b8:64:fb:73:f7:79:0f:d9:a4:ac:bb:a9:
3f:08:b7:fd:6e:b3:60:38:92:de:12:f3:59:f5:4e:
d3:65:7a:0e:2b:50:ba:fa:a7:7e:a8:a6:93:0e:49:
43:57:32:45:03:11:c9:9a:7b:98:f1:8b:52:f1:38:
fa:9c:67:73:73:25:bd:67:5c:4b:f2:28:5e:73:f7:
24:fb:d8:69:7e:99:21:21:a4:71:df:16:7d:c3:90:
3b:12:54:63:18:e2:13:46:be:1b:0f:15:69:89:8d:
ea:ff:55:c9:81:b3:90:55:d8:5d:b9:88:1f:81:d2:
68:36:d6:7d:1b:f3:48:96:1c:4c:de:29:b8:68:00:
24:5f:65:55:99:dd:a8:09:01:ed:8b:94:7f:6c:0b:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:2C:00:04:DD:6A:7D:E2:54:1D:08:E1:AA:60:9F:DA:8C:7D:5A
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/B_YsAATdan3iVB0I4apgn9qMfVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:53:f1:d1:2a:3c:98:95:9c:bd:31:12:29:43:97:ce:83:c0:
bd:d3:34:aa:d0:d6:68:1f:88:19:90:ff:ca:cd:03:74:01:fd:
e2:55:04:89:0f:d6:9a:cb:87:5c:8a:ef:3d:ea:ce:5d:ec:aa:
81:78:57:2b:6d:66:45:10:5c:a1:8c:6c:4b:1f:eb:61:2b:21:
1d:5b:b9:77:4b:cc:86:f4:53:59:5b:32:a5:c2:31:72:3b:4c:
1a:d9:32:b1:65:e0:7a:05:c5:a6:fb:98:a9:47:12:c3:3b:12:
61:de:1c:83:83:20:4c:dc:de:18:1e:79:91:1c:4a:fc:df:67:
7c:ed:4c:cb:e4:f8:78:64:96:28:ef:03:f6:18:6a:25:d2:9e:
0d:96:98:1d:0e:f0:08:89:9a:30:05:ff:33:be:89:8d:a6:fa:
d3:00:4a:04:9b:26:61:53:09:f4:d8:d8:9f:bc:64:1e:eb:fb:
37:87:09:5f:8b:5f:27:3e:b9:2f:a4:19:b2:dc:d0:e7:80:da:
55:b2:cc:7b:a5:36:86:36:e7:fc:08:c3:49:d6:ac:36:0f:fe:
c2:e8:db:23:d2:70:65:f6:02:61:73:96:de:9b:b7:bd:ad:6f:
2f:33:38:da:2a:55:6f:63:9b:db:84:d1:09:04:75:37:cd:70:
26:df:84:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECHGDmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Mzc1MzY5YjJkNGJiMmUyZGVkZTY2ODY0NTMxM2UzNDRlNmYxY2MwMB4XDTIyMDEw
MTAwNTEzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdmNjJjMDAwNGRk
NmE3ZGUyNTQxZDA4ZTFhYTYwOWZkYThjN2Q1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7Crjhtpd+fugrkhPXuJBU6yKyH+S/lXonxdQQQ05iQ2m27
qy/m5aGPm7cEfjINmakWc/w6G+HUuzOcd1ife2MXh4n+bjY4ge06POqc9GSqYoYq
oyMmBE9cRmYfBCytbsRmQIdnQ/K3jrrruGT7c/d5D9mkrLupPwi3/W6zYDiS3hLz
WfVO02V6DitQuvqnfqimkw5JQ1cyRQMRyZp7mPGLUvE4+pxnc3MlvWdcS/IoXnP3
JPvYaX6ZISGkcd8WfcOQOxJUYxjiE0a+Gw8VaYmN6v9VyYGzkFXYXbmIH4HSaDbW
fRvzSJYcTN4puGgAJF9lVZndqAkB7YuUf2wLXTcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQH9iwABN1qfeJUHQjhqmCf2ox9WjAfBgNVHSMEGDAWgBSjdTabLUuy4t7e
ZoZFMT40Tm8cwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L28zVTJteTFMc3VMZTNtYUdSVEUtTkU1dkhNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZWM2OTA1LWIwZjctNDI0Zi04YTg0LTI4YmVjN2I5OTkyOS8x
L0JfWXNBQVRkYW4zaVZCMEk0YXBnbjlxTWZWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZWM2OTA1LWIwZjctNDI0Zi04YTg0LTI4YmVjN2I5OTkyOS8xL28zVTJteTFMc3VM
ZTNtYUdSVEUtTkU1dkhNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1RzDANBgkqhkiG9w0BAQsFAAOC
AQEAj1Px0So8mJWcvTESKUOXzoPAvdM0qtDWaB+IGZD/ys0DdAH94lUEiQ/WmsuH
XIrvPerOXeyqgXhXK21mRRBcoYxsSx/rYSshHVu5d0vMhvRTWVsypcIxcjtMGtky
sWXgegXFpvuYqUcSwzsSYd4cg4MgTNzeGB55kRxK/N9nfO1My+T4eGSWKO8D9hhq
JdKeDZaYHQ7wCImaMAX/M76Jjab60wBKBJsmYVMJ9NjYn7xkHuv7N4cJX4tfJz65
L6QZstzQ54DaVbLMe6U2hjbn/AjDSdasNg/+wujbI9JwZfYCYXOW3pu3va1vLzM4
2ipVb2Ob24TRCQR1N81wJt+Euw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:08:29 2025 by rpki-client