Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa
File: lsIivhM9NqwWjhJY0b4jeUf4aJs.roa (raw, json)
Hash identifier: cssaEMryInnQJ9d1pPDnFDp0ic8gfT9sBvSGJxI0SDw=
Subject key identifier: 96:C2:22:BE:13:3D:36:AC:16:8E:12:58:D1:BE:23:79:47:F8:68:9B
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 01856CEF3C1BC149CCA2E01B760C3C9D8BBD
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205981
IP address blocks: 45.9.132.0/22 maxlen: 22
212.63.104.0/22 maxlen: 22
185.194.108.0/22 maxlen: 22
45.137.72.0/22 maxlen: 22
185.248.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3c:1b:c1:49:cc:a2:e0:1b:76:0c:3c:9d:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c222be133d36ac168e1258d1be237947f8689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:9d:ab:00:21:a0:ec:99:cd:77:22:7c:e5:
79:2f:a4:86:d1:9b:27:b4:4f:ea:44:78:a8:22:19:
9e:b3:1d:e7:f8:30:8f:87:b3:3f:f3:98:f1:90:23:
8e:1a:77:3a:d1:52:5e:58:e4:fe:8f:68:ba:8e:4a:
f5:f5:37:8e:15:55:84:c7:cd:2a:cb:b4:51:ca:71:
20:d7:7d:63:c4:71:8e:fb:9f:e9:37:0c:84:77:cd:
53:e4:2a:e1:a9:b6:20:31:63:31:07:45:c7:0f:9a:
21:7a:69:d9:5a:68:45:8a:fc:bc:57:0a:07:a2:a4:
3a:fa:81:7a:3c:3b:72:05:f2:8b:e4:27:0d:2c:3b:
9c:d6:c9:40:63:a5:0b:40:21:61:34:25:d3:0d:ff:
15:8c:6b:16:77:a4:5d:ea:ff:cf:12:f7:32:1c:f2:
e4:d3:29:95:79:ed:31:ff:5c:91:3e:34:0f:40:3f:
0b:1e:d8:f1:27:5c:09:d5:60:37:c1:ea:ac:92:ff:
00:1e:f6:41:51:a1:79:17:83:2d:39:24:61:6a:3b:
88:18:2c:c2:36:56:1e:b6:53:f1:19:d7:04:36:f1:
05:08:82:ec:d5:94:3a:85:cb:48:4f:c6:fa:3a:55:
0d:94:58:27:fe:a2:4e:bf:fb:64:16:67:3e:f6:98:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:22:BE:13:3D:36:AC:16:8E:12:58:D1:BE:23:79:47:F8:68:9B
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.132.0/22
45.137.72.0/22
185.194.108.0/22
185.248.124.0/22
212.63.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:88:5e:f5:88:fa:7c:81:af:98:2e:e1:07:36:bf:53:e3:02:
ee:c5:bc:d9:6e:b6:f5:51:e4:01:a6:62:be:e6:b2:6b:61:29:
c7:a0:24:ba:9b:a1:ac:ac:fc:7e:e9:a4:05:bd:7b:f5:4e:99:
88:81:bd:a8:2c:ae:5a:5e:30:d9:e6:12:7a:90:9c:b2:fc:71:
51:98:ea:83:b7:86:18:27:f2:08:92:76:7a:03:58:89:fb:a3:
e0:35:56:22:ef:c7:ce:63:d0:aa:4e:a1:ce:d7:23:b2:d8:62:
2c:18:cc:93:bd:0f:e7:6a:52:c4:88:43:a3:81:7b:54:df:36:
07:3b:62:f5:45:97:4a:a2:78:84:16:59:19:0b:9c:de:a3:f2:
31:f1:80:a9:16:33:02:04:01:53:e5:2a:d0:6c:36:01:89:7e:
ba:16:d8:68:d0:a1:48:4d:ef:25:c2:75:f2:8d:41:7c:93:1a:
49:36:64:46:92:86:97:b3:68:8c:6d:33:cc:1f:7e:f2:bc:39:
d2:eb:4d:7e:fa:7d:5a:05:06:13:2b:61:41:33:27:ad:34:85:
3c:8f:d7:da:c7:29:69:f1:a4:78:0b:30:95:32:28:bb:1d:3c:
4e:05:2e:05:ae:48:80:c0:46:82:9f:5f:27:ae:af:6b:51:8b:
aa:22:37:9a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVs7zwbwUnMouAbdgw8nYu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjMwMTAxMTA0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmMyMjJiZTEzM2QzNmFjMTY4ZTEyNThkMWJlMjM3OTQ3Zjg2ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszmdqwAhoOyZzXcifOV5L6SG0Zsn
tE/qRHioIhmesx3n+DCPh7M/85jxkCOOGnc60VJeWOT+j2i6jkr19TeOFVWEx80q
y7RRynEg131jxHGO+5/pNwyEd81T5CrhqbYgMWMxB0XHD5ohemnZWmhFivy8VwoH
oqQ6+oF6PDtyBfKL5CcNLDuc1slAY6ULQCFhNCXTDf8VjGsWd6Rd6v/PEvcyHPLk
0ymVee0x/1yRPjQPQD8LHtjxJ1wJ1WA3weqskv8AHvZBUaF5F4MtOSRhajuIGCzC
NlYetlPxGdcENvEFCILs1ZQ6hctIT8b6OlUNlFgn/qJOv/tkFmc+9phsPwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJbCIr4TPTasFo4SWNG+I3lH+GibMB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvbHNJaXZoTTlOcXdXamhKWTBiNGplVWY0YUpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLQmEAwQC
LYlIAwQCucJsAwQCufh8AwQC1D9oMA0GCSqGSIb3DQEBCwUAA4IBAQCPiF71iPp8
ga+YLuEHNr9T4wLuxbzZbrb1UeQBpmK+5rJrYSnHoCS6m6GsrPx+6aQFvXv1TpmI
gb2oLK5aXjDZ5hJ6kJyy/HFRmOqDt4YYJ/IIknZ6A1iJ+6PgNVYi78fOY9CqTqHO
1yOy2GIsGMyTvQ/nalLEiEOjgXtU3zYHO2L1RZdKoniEFlkZC5zeo/Ix8YCpFjMC
BAFT5SrQbDYBiX66Ftho0KFITe8lwnXyjUF8kxpJNmRGkoaXs2iMbTPMH37yvDnS
601++n1aBQYTK2FBMyetNIU8j9faxylp8aR4CzCVMii7HTxOBS4FrkiAwEaCn18n
rq9rUYuqIjea
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:25 2025 by rpki-client