Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/wh3qNmqXgfAxSl3Trko7NT4kKKo.roa
File: wh3qNmqXgfAxSl3Trko7NT4kKKo.roa (raw, json)
Hash identifier: a3g8569x2T16PBLNjspo73TJWudOwf1PM/MuXgoQfg8=
Subject key identifier: C2:1D:EA:36:6A:97:81:F0:31:4A:5D:D3:AE:4A:3B:35:3E:24:28:AA
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 030AD482
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/wh3qNmqXgfAxSl3Trko7NT4kKKo.roa
Signing time: Sat 01 Jan 2022 14:05:16 +0000
ROA not before: Sat 01 Jan 2022 14:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 82.195.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51041410 (0x30ad482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 1 14:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21dea366a9781f0314a5dd3ae4a3b353e2428aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:d0:e2:75:86:9b:75:2b:24:50:4b:25:c8:
24:7e:0a:60:c8:37:9a:df:d4:29:21:7f:6e:70:77:
2b:a9:b4:f0:f8:98:e3:a8:39:b3:0b:71:0f:72:94:
e9:e5:59:7e:33:9c:aa:4d:a6:b2:60:ed:90:e2:1b:
7b:c4:4e:7d:17:61:ec:a3:0f:bc:f9:ed:a5:bc:68:
d6:e3:bc:87:0a:ce:9a:33:80:4a:4d:c0:15:df:f2:
43:d4:60:93:4f:97:12:4c:cd:f6:ad:c5:be:7b:05:
a4:47:39:48:66:7c:e8:0c:2f:c9:f1:0b:80:10:cf:
4f:9b:af:9a:5e:0f:7e:61:3f:86:e2:cb:86:b1:ee:
af:c0:b0:50:f8:08:31:8d:48:3f:64:e6:c7:23:83:
84:fd:87:1b:42:5c:f7:c9:7c:ac:79:f2:f1:3e:93:
e1:ad:36:df:ed:a9:da:0e:70:68:57:bb:26:44:3d:
40:cc:d1:ec:8e:a1:c7:e9:6a:8a:7a:de:12:9f:a4:
b3:2b:5a:45:1a:ee:66:9d:2f:f5:3e:b7:18:c4:cd:
c8:4d:88:f5:61:fc:ea:95:65:b1:c5:a7:df:3e:5b:
d0:bb:cc:8f:96:91:99:c3:72:1f:3a:b8:33:de:19:
e1:c0:df:88:55:ec:f8:87:c4:90:66:06:e8:66:ce:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:EA:36:6A:97:81:F0:31:4A:5D:D3:AE:4A:3B:35:3E:24:28:AA
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/wh3qNmqXgfAxSl3Trko7NT4kKKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
Signature Algorithm: sha256WithRSAEncryption
75:ea:cc:ff:0a:b4:8f:f5:5b:a7:f6:22:b9:1f:78:5d:50:4d:
72:6c:42:55:3c:15:62:10:b9:22:dd:dc:c6:b9:94:f4:69:2f:
5b:08:15:62:74:8b:5d:36:e1:1b:06:0a:8a:69:08:99:13:78:
2b:cf:f5:1b:f0:f8:c2:f3:77:df:72:d8:61:67:2c:b2:3a:73:
2b:b5:3a:09:fa:7b:81:32:05:1d:53:44:5c:84:69:7b:04:d1:
a6:0f:98:96:02:d5:ac:50:a7:86:9e:70:a7:31:92:5b:cc:64:
ea:54:32:ac:57:35:b4:7f:6c:a8:f7:e3:fa:cb:0b:59:e4:ff:
01:ab:9e:42:2c:f7:8d:58:cc:ad:45:10:86:69:01:86:53:de:
19:b6:60:66:00:6b:c0:5c:dc:d0:67:48:c1:2a:f1:27:10:4e:
52:6c:d7:88:b8:a4:16:4e:17:d4:94:01:26:c5:c5:c6:17:d3:
56:48:cc:9b:13:f2:88:43:af:08:13:2d:6e:58:c0:99:84:99:
30:8c:ce:38:6d:0f:2b:c5:6d:4c:62:7c:7c:e3:d9:08:3f:9c:
30:2b:e8:09:f0:1e:51:2a:f5:21:cf:2f:fb:3f:a5:7f:7f:cd:
6f:d9:3b:cd:6c:c7:3f:59:61:03:ac:07:9b:f8:0d:5f:4d:73:
a7:28:05:12
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwrUgjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWZkMzM3NGM3YWMzYzAzNzc4NzA3ZjM2N2Y5MTQ4ZjFmZTAzOTBkMB4XDTIyMDEw
MTE0MDUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzIxZGVhMzY2YTk3
ODFmMDMxNGE1ZGQzYWU0YTNiMzUzZTI0MjhhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfM0OJ1hpt1KyRQSyXIJH4KYMg3mt/UKSF/bnB3K6m08PiY
46g5swtxD3KU6eVZfjOcqk2msmDtkOIbe8ROfRdh7KMPvPntpbxo1uO8hwrOmjOA
Sk3AFd/yQ9Rgk0+XEkzN9q3FvnsFpEc5SGZ86AwvyfELgBDPT5uvml4PfmE/huLL
hrHur8CwUPgIMY1IP2TmxyODhP2HG0Jc98l8rHny8T6T4a023+2p2g5waFe7JkQ9
QMzR7I6hx+lqinreEp+ksytaRRruZp0v9T63GMTNyE2I9WH86pVlscWn3z5b0LvM
j5aRmcNyHzq4M94Z4cDfiFXs+IfEkGYG6GbO0dUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCHeo2apeB8DFKXdOuSjs1PiQoqjAfBgNVHSMEGDAWgBRF/TN0x6w8A3eH
B/Nn+RSPH+A5DTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JmMHpkTWVzUEFOM2h3ZnpaX2tVanhfZ09RMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvODgwOWJiLTI0NjgtNDFlNi04YTQyLWRlMjVjZGM4ZjIxMS8x
L3doM3FObXFYZ2ZBeFNsM1Rya283TlQ0a0tLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
ODgwOWJiLTI0NjgtNDFlNi04YTQyLWRlMjVjZGM4ZjIxMS8xL1JmMHpkTWVzUEFO
M2h3ZnpaX2tVanhfZ09RMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBVLDIDANBgkqhkiG9w0BAQsFAAOC
AQEAderM/wq0j/Vbp/YiuR94XVBNcmxCVTwVYhC5It3cxrmU9GkvWwgVYnSLXTbh
GwYKimkImRN4K8/1G/D4wvN333LYYWcssjpzK7U6Cfp7gTIFHVNEXIRpewTRpg+Y
lgLVrFCnhp5wpzGSW8xk6lQyrFc1tH9sqPfj+ssLWeT/AaueQiz3jVjMrUUQhmkB
hlPeGbZgZgBrwFzc0GdIwSrxJxBOUmzXiLikFk4X1JQBJsXFxhfTVkjMmxPyiEOv
CBMtbljAmYSZMIzOOG0PK8VtTGJ8fOPZCD+cMCvoCfAeUSr1Ic8v+z+lf3/Nb9k7
zWzHP1lhA6wHm/gNX01zpygFEg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:39:33 2025 by rpki-client