Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/zUli6V-tEQ1umwn-a5l-H1Ldvuw.roa
File: zUli6V-tEQ1umwn-a5l-H1Ldvuw.roa (raw, json)
Hash identifier: OVqKHZp2KiD4IZFne1XmqgJeQ+koyvRquCrNqETxDA0=
Subject key identifier: CD:49:62:E9:5F:AD:11:0D:6E:9B:09:FE:6B:99:7E:1F:52:DD:BE:EC
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 08AAD91B
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/zUli6V-tEQ1umwn-a5l-H1Ldvuw.roa
Signing time: Sat 01 Jan 2022 12:02:59 +0000
ROA not before: Sat 01 Jan 2022 12:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 155.105.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145414427 (0x8aad91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jan 1 12:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd4962e95fad110d6e9b09fe6b997e1f52ddbeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:e3:3c:21:07:b1:4f:c6:e8:fb:03:91:74:
29:fe:8b:be:02:d6:f5:e5:af:83:1d:d4:68:b1:9e:
b0:b1:b7:7f:6f:88:f8:34:73:56:f5:11:77:27:cf:
d8:9c:2a:9f:ee:8a:0d:aa:39:59:47:c6:fd:38:37:
be:8f:01:3b:b9:9e:5c:5e:a6:fa:c8:d1:16:61:d6:
80:9b:d6:4f:d5:d4:f2:17:04:54:e7:8c:30:50:41:
df:d3:95:03:77:95:27:a5:ac:e8:49:45:b6:f6:d4:
8d:49:14:b2:54:96:dc:b2:04:af:d6:d7:dc:52:1f:
4a:f2:81:bf:b3:6e:c4:94:f2:6d:93:99:a4:03:99:
98:9b:f6:84:ed:65:63:55:5f:87:a9:87:c5:ca:7a:
b4:4a:91:d2:b8:3f:26:14:71:f7:c3:e7:38:22:f8:
fa:f7:18:a0:20:df:c0:88:a9:37:06:70:e0:ca:ff:
7d:cb:a6:d7:0b:9b:5c:9f:f5:35:33:ad:7b:17:55:
a3:c5:2b:44:5f:ce:2f:39:f9:0a:62:f8:f1:f1:cc:
11:6a:6f:1d:7f:14:f8:7e:b5:6e:12:f6:5d:8e:dd:
9a:23:91:74:49:62:9a:e6:10:8c:95:b2:4a:2d:f5:
f8:bf:18:50:b4:34:86:50:59:09:76:45:11:2f:38:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:62:E9:5F:AD:11:0D:6E:9B:09:FE:6B:99:7E:1F:52:DD:BE:EC
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/zUli6V-tEQ1umwn-a5l-H1Ldvuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:0d:db:38:14:e3:f2:78:ce:5c:e5:27:17:a7:52:57:1b:da:
83:ee:31:b2:4c:6b:1a:c8:0e:d0:eb:c7:a4:d8:84:f1:74:cf:
de:f4:e1:55:2a:b1:c7:67:48:85:5c:4e:8d:fe:da:3f:19:be:
27:d2:40:0d:76:53:56:12:e4:7c:38:ae:bc:79:06:7d:99:43:
2a:b3:ad:02:86:50:7c:6f:cf:50:56:d2:8c:f7:6a:60:ff:39:
67:1b:d6:33:d3:3c:9c:1e:66:f9:cf:bd:2c:11:f1:9e:6f:59:
98:fe:9a:06:61:63:77:f9:3e:dd:bf:66:b0:0b:dd:44:c3:d5:
a2:60:8e:0f:ac:36:1e:6e:bf:45:d9:32:db:64:f3:bb:14:95:
e9:73:9b:26:24:29:84:6a:cb:51:ce:27:62:02:be:89:ed:a1:
a9:66:2f:3d:63:49:db:a1:9e:05:89:09:ee:ef:c2:66:ac:e9:
33:2a:9d:80:91:0e:45:3e:ea:bd:37:87:ec:c6:2c:f2:b8:9c:
f0:1f:d3:15:c3:4f:9b:b7:8c:10:ea:66:ac:09:55:6c:5b:dd:
f6:dc:50:34:86:9d:80:d6:c0:58:2b:da:c5:4e:55:f9:de:72:
d8:38:db:ab:97:50:d0:70:ce:c9:a4:8f:c8:fd:82:93:72:12:
f3:14:f8:ef
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECKrZGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjMyNThhYTZiODNlYzlmYjdiZTk2NmM2MjZhOTE2Njc4MWM3ZjNiMB4XDTIyMDEw
MTEyMDI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Q0OTYyZTk1ZmFk
MTEwZDZlOWIwOWZlNmI5OTdlMWY1MmRkYmVlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANKm4zwhB7FPxuj7A5F0Kf6LvgLW9eWvgx3UaLGesLG3f2+I
+DRzVvURdyfP2Jwqn+6KDao5WUfG/Tg3vo8BO7meXF6m+sjRFmHWgJvWT9XU8hcE
VOeMMFBB39OVA3eVJ6Ws6ElFtvbUjUkUslSW3LIEr9bX3FIfSvKBv7NuxJTybZOZ
pAOZmJv2hO1lY1Vfh6mHxcp6tEqR0rg/JhRx98PnOCL4+vcYoCDfwIipNwZw4Mr/
fcum1wubXJ/1NTOtexdVo8UrRF/OLzn5CmL48fHMEWpvHX8U+H61bhL2XY7dmiOR
dElimuYQjJWySi31+L8YULQ0hlBZCXZFES84XJECAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBTNSWLpX60RDW6bCf5rmX4fUt2+7DAfBgNVHSMEGDAWgBTyMliqa4Psn7e+
lmxiapFmeBx/OzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhqSllxbXVEN0otM3ZwWnNZbXFSWm5nY2Z6cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvNDhjM2E4LWI5NTQtNDFjOS1iZDIzLTcxMmZjZmE0NDFlNC8x
L3pVbGk2Vi10RVExdW13bi1hNWwtSDFMZHZ1dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
NDhjM2E4LWI5NTQtNDFjOS1iZDIzLTcxMmZjZmE0NDFlNC8xLzhqSllxbXVEN0ot
M3ZwWnNZbXFSWm5nY2Z6cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJtpMA0GCSqGSIb3DQEBCwUAA4IB
AQAgDds4FOPyeM5c5ScXp1JXG9qD7jGyTGsayA7Q68ek2ITxdM/e9OFVKrHHZ0iF
XE6N/to/Gb4n0kANdlNWEuR8OK68eQZ9mUMqs60ChlB8b89QVtKM92pg/zlnG9Yz
0zycHmb5z70sEfGeb1mY/poGYWN3+T7dv2awC91Ew9WiYI4PrDYebr9F2TLbZPO7
FJXpc5smJCmEastRzidiAr6J7aGpZi89Y0nboZ4FiQnu78JmrOkzKp2AkQ5FPuq9
N4fsxizyuJzwH9MVw0+bt4wQ6masCVVsW9323FA0hp2A1sBYK9rFTlX53nLYONur
l1DQcM7JpI/I/YKTchLzFPjv
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:12 2025 by rpki-client