Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/qZ8GqETNGsU8fmuyqMd-Jt27ZSY.roa
File: qZ8GqETNGsU8fmuyqMd-Jt27ZSY.roa (raw, json)
Hash identifier: mFrFNu0z3yBgetA29gnaQa3SvhM13gUX/I+IuogfqjU=
Subject key identifier: A9:9F:06:A8:44:CD:1A:C5:3C:7E:6B:B2:A8:C7:7E:26:DD:BB:65:26
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 089221C3
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/qZ8GqETNGsU8fmuyqMd-Jt27ZSY.roa
Signing time: Sat 01 Jan 2022 07:59:32 +0000
ROA not before: Sat 01 Jan 2022 07:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 212.118.58.0/23 maxlen: 23
45.14.196.0/22 maxlen: 22
95.178.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143794627 (0x89221c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jan 1 07:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a99f06a844cd1ac53c7e6bb2a8c77e26ddbb6526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:09:16:53:58:fc:b0:fb:a4:c7:54:69:26:
46:a7:64:fd:0b:2e:99:c1:4a:f1:65:65:14:80:fa:
ee:16:f3:ee:14:b8:ce:9e:13:eb:cb:f7:65:c1:d1:
31:33:c9:32:ed:c3:4d:1b:ea:59:70:08:e5:f3:b5:
d6:ca:db:f9:fd:74:6b:0b:c5:60:1c:bf:1f:c4:f7:
2b:2c:8b:2c:fe:ee:1f:78:1a:15:cf:f4:6a:cf:76:
3b:2d:e9:a1:10:44:8b:4f:93:e6:83:41:7a:78:e4:
fd:a1:4d:16:36:87:ba:2d:eb:84:6c:0b:63:ab:ce:
bc:ee:e1:46:7f:ca:05:b4:5f:59:3c:be:36:12:27:
20:45:20:a4:0f:1e:83:6c:e3:c9:ed:3a:c8:35:ee:
20:6d:9b:9a:32:20:8c:e2:56:5b:80:5b:b5:2b:45:
fe:b5:ec:f5:55:1a:9c:0e:82:7c:3f:95:ca:dc:b6:
7d:6c:f2:41:02:32:a8:21:25:51:16:35:07:c0:ff:
99:f6:62:b1:d9:9e:7e:7c:16:4d:b1:32:4e:5d:3d:
f3:c6:95:ca:3e:f6:e4:8c:30:bd:85:08:de:8b:e3:
50:a5:8f:f3:17:85:e7:33:45:13:a9:12:7b:47:f4:
a2:51:5c:e1:3b:70:2a:0a:88:0b:b3:03:3d:e5:d9:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:06:A8:44:CD:1A:C5:3C:7E:6B:B2:A8:C7:7E:26:DD:BB:65:26
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/qZ8GqETNGsU8fmuyqMd-Jt27ZSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.196.0/22
95.178.37.0/24
212.118.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e8:99:f7:ca:5c:c4:3d:53:ec:2c:09:d8:6d:85:e0:d0:99:
d0:82:a4:23:1a:6d:a0:d1:89:e2:ed:64:46:96:89:a3:e5:54:
14:77:7f:96:d9:f7:43:65:48:00:ee:5e:b0:8f:7f:9f:fa:59:
5d:00:34:e0:e2:6a:e4:a9:c6:f2:ba:71:db:22:e0:c6:76:d7:
ef:f1:1f:98:33:f5:4f:be:16:ec:34:1c:e3:b7:0b:94:95:22:
0b:8e:03:0c:b2:4e:74:48:01:2f:8a:f2:2b:0e:4c:63:66:e4:
8f:c3:a7:07:b9:93:d1:e2:d7:f1:16:a1:6c:b1:e1:05:5d:02:
38:d8:d4:3f:90:b1:bf:62:70:e9:b3:20:e7:c0:31:da:ae:3f:
13:67:f5:92:aa:a8:e4:fa:4e:aa:97:5e:ae:81:a3:55:f9:08:
96:a9:76:86:79:36:50:f0:36:9a:27:a1:40:19:93:45:11:f3:
21:72:fb:2d:e1:e5:f0:93:99:12:20:49:08:3d:7b:f8:ae:8d:
68:3b:2b:1c:2c:1a:89:b8:87:50:6d:75:38:3b:74:c3:f3:2f:
0d:86:dd:6b:68:bf:9a:a8:69:c7:f1:59:0f:4e:21:5a:72:f4:
bc:14:6b:4c:2d:4a:a1:16:9d:84:4e:48:60:4f:28:f8:7d:be:
d8:82:d1:ce
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECJIhwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
N2VhNGU4ODQ2NmRlNGM4OTYwOTQwMjhmMWNmMGRiNjY1MzYwZDMyMB4XDTIyMDEw
MTA3NTkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk5ZjA2YTg0NGNk
MWFjNTNjN2U2YmIyYThjNzdlMjZkZGJiNjUyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrYCRZTWPyw+6THVGkmRqdk/QsumcFK8WVlFID67hbz7hS4
zp4T68v3ZcHRMTPJMu3DTRvqWXAI5fO11srb+f10awvFYBy/H8T3KyyLLP7uH3ga
Fc/0as92Oy3poRBEi0+T5oNBenjk/aFNFjaHui3rhGwLY6vOvO7hRn/KBbRfWTy+
NhInIEUgpA8eg2zjye06yDXuIG2bmjIgjOJWW4BbtStF/rXs9VUanA6CfD+Vyty2
fWzyQQIyqCElURY1B8D/mfZisdmefnwWTbEyTl0988aVyj725IwwvYUI3ovjUKWP
8xeF5zNFE6kSe0f0olFc4TtwKgqIC7MDPeXZ0gkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSpnwaoRM0axTx+a7Kox34m3btlJjAfBgNVHSMEGDAWgBQH6k6IRm3kyJYJ
QCjxzw22ZTYNMjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ItcE9pRVp0NU1pV0NVQW84YzhOdG1VMkRUSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvZjgwMGYxLTc0YWUtNGMxOS1hN2NmLTMxYjM2ZjU3OWYwNi8x
L3FaOEdxRVROR3NVOGZtdXlxTWQtSnQyN1pTWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
ZjgwMGYxLTc0YWUtNGMxOS1hN2NmLTMxYjM2ZjU3OWYwNi8xL0ItcE9pRVp0NU1p
V0NVQW84YzhOdG1VMkRUSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi0OxAMEAF+yJQMEAdR2OjANBgkq
hkiG9w0BAQsFAAOCAQEAXuiZ98pcxD1T7CwJ2G2F4NCZ0IKkIxptoNGJ4u1kRpaJ
o+VUFHd/ltn3Q2VIAO5esI9/n/pZXQA04OJq5KnG8rpx2yLgxnbX7/EfmDP1T74W
7DQc47cLlJUiC44DDLJOdEgBL4ryKw5MY2bkj8OnB7mT0eLX8RahbLHhBV0CONjU
P5Cxv2Jw6bMg58Ax2q4/E2f1kqqo5PpOqpderoGjVfkIlql2hnk2UPA2miehQBmT
RRHzIXL7LeHl8JOZEiBJCD17+K6NaDsrHCwaibiHUG11ODt0w/MvDYbda2i/mqhp
x/FZD04hWnL0vBRrTC1KoRadhE5IYE8o+H2+2ILRzg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:49 2025 by rpki-client