Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/V4O0NoHWZ_7OLTH_BRLmt523UQg.roa
File: V4O0NoHWZ_7OLTH_BRLmt523UQg.roa (raw, json)
Hash identifier: MI9Zd0hPGHyeLlNl1iNw1ATDNafFphMKAbyZ7ui1L+8=
Subject key identifier: 57:83:B4:36:81:D6:67:FE:CE:2D:31:FF:05:12:E6:B7:9D:B7:51:08
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 01856E820CEA77763A4A353680AC9BC3E9EC
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/V4O0NoHWZ_7OLTH_BRLmt523UQg.roa
Signing time: Sun 01 Jan 2023 18:04:54 +0000
ROA not before: Sun 01 Jan 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209760
IP address blocks: 192.145.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:0c:ea:77:76:3a:4a:35:36:80:ac:9b:c3:e9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Jan 1 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5783b43681d667fece2d31ff0512e6b79db75108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:d0:8b:28:3c:3e:ca:72:14:d8:9a:f2:e5:
e0:85:2b:d5:94:94:6c:e2:33:5e:65:39:cb:54:0f:
50:b3:fe:18:0f:8f:61:69:0c:f4:69:3a:2a:a4:4d:
32:05:38:91:a2:35:bf:96:5b:a1:c5:24:43:51:3f:
e2:d4:a8:52:b0:6d:57:64:38:cc:04:38:f6:57:a2:
2d:de:95:09:88:e2:01:72:6d:f3:e1:8d:eb:21:7b:
43:4b:66:08:0f:f4:4e:bc:46:75:bf:f4:ea:29:27:
a8:94:7c:b7:1d:fa:2b:c5:04:f2:0b:f0:a3:1d:05:
90:ed:10:80:27:73:7a:9e:12:6f:7b:4f:79:b0:e2:
83:72:fe:8a:74:8d:9d:cd:60:1d:18:e1:b7:48:8f:
4a:e3:6b:b1:49:02:71:4f:2f:d8:a6:f2:a6:65:14:
b6:6f:c8:41:c6:1a:34:cd:39:a3:37:56:e9:0b:97:
87:fc:d7:0f:02:ae:c9:3d:e7:8a:f2:5d:23:aa:08:
0f:ff:63:6f:92:32:d5:6b:d1:a1:1c:a6:bc:7f:e9:
ae:dd:10:2f:9b:fd:91:7a:0b:fa:7e:f7:91:7b:ef:
40:bd:91:5e:da:ae:fa:b3:c0:04:1d:bb:ef:5c:d6:
b4:61:5a:ff:49:e6:ec:f7:3e:27:69:82:3b:19:58:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:83:B4:36:81:D6:67:FE:CE:2D:31:FF:05:12:E6:B7:9D:B7:51:08
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/V4O0NoHWZ_7OLTH_BRLmt523UQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:82:a0:f1:15:90:d6:37:ac:60:87:b0:45:15:9f:b1:16:b0:
1e:74:a7:c6:47:42:ad:f8:57:50:68:c4:63:1b:a5:d4:7a:9c:
4c:3c:af:1e:f3:e6:76:3e:37:57:53:c8:a8:98:ee:44:a8:1f:
79:51:ab:c7:cc:9d:e9:11:82:e6:05:f6:71:9f:1f:8e:ca:8c:
b0:4b:af:8c:6f:a5:81:9b:b6:bb:d7:c7:e0:0d:e8:52:1e:f8:
0b:7e:55:ea:2b:3c:13:56:d1:ef:f3:2b:b3:ae:fe:f0:76:b6:
e4:84:30:37:3c:7e:36:d3:47:10:bc:4a:c4:e3:4e:7d:b3:65:
9e:17:ee:35:7b:59:81:ce:4c:b0:f6:7f:9f:0d:5d:15:22:92:
4c:f4:12:0f:a2:27:a7:43:6d:d8:8a:84:ab:5d:ef:3b:49:fc:
ae:46:33:64:41:0c:09:49:39:2b:19:4f:37:57:a2:1d:40:df:
65:8a:d2:0c:d5:2a:1e:8c:88:7c:7a:e7:36:53:5e:40:c3:10:
24:09:a5:85:1f:26:5a:dc:fc:d8:99:f4:85:39:cb:ee:5e:68:
79:24:1b:86:80:3c:ac:37:c7:41:5d:0b:f1:bf:bb:8e:e8:b7:
7c:93:c3:8d:a3:fc:d5:2f:75:60:e8:40:13:10:04:e2:0b:1c:
f1:5b:ab:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuggzqd3Y6SjU2gKybw+nsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3
Y2MzNDUwHhcNMjMwMTAxMTgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzgzYjQzNjgxZDY2N2ZlY2UyZDMxZmYwNTEyZTZiNzlkYjc1MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhvQiyg8PspyFNia8uXghSvVlJRs
4jNeZTnLVA9Qs/4YD49haQz0aToqpE0yBTiRojW/lluhxSRDUT/i1KhSsG1XZDjM
BDj2V6It3pUJiOIBcm3z4Y3rIXtDS2YID/ROvEZ1v/TqKSeolHy3HforxQTyC/Cj
HQWQ7RCAJ3N6nhJve095sOKDcv6KdI2dzWAdGOG3SI9K42uxSQJxTy/YpvKmZRS2
b8hBxho0zTmjN1bpC5eH/NcPAq7JPeeK8l0jqggP/2NvkjLVa9GhHKa8f+mu3RAv
m/2Regv6fveRe+9AvZFe2q76s8AEHbvvXNa0YVr/Sebs9z4naYI7GVheYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeDtDaB1mf+zi0x/wUS5redt1EIMB8GA1UdIwQY
MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt
MzY4MGFlYjYzMmRhLzEvVjRPME5vSFdaXzdPTFRIX0JSTG10NTIzVVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh
LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJEgMA0G
CSqGSIb3DQEBCwUAA4IBAQBvgqDxFZDWN6xgh7BFFZ+xFrAedKfGR0Kt+FdQaMRj
G6XUepxMPK8e8+Z2PjdXU8iomO5EqB95UavHzJ3pEYLmBfZxnx+OyoywS6+Mb6WB
m7a718fgDehSHvgLflXqKzwTVtHv8yuzrv7wdrbkhDA3PH4200cQvErE4059s2We
F+41e1mBzkyw9n+fDV0VIpJM9BIPoienQ23YioSrXe87SfyuRjNkQQwJSTkrGU83
V6IdQN9litIM1SoejIh8euc2U15AwxAkCaWFHyZa3PzYmfSFOcvuXmh5JBuGgDys
N8dBXQvxv7uO6Ld8k8ONo/zVL3Vg6EATEATiCxzxW6tz
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:00 2025 by rpki-client