Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Rq_WgfIto8h9FR1B-QGCoZq7CzU.roa
File: Rq_WgfIto8h9FR1B-QGCoZq7CzU.roa (raw, json)
Hash identifier: kUmhayhBMXF/da3QXMPlaJ34G8gNYAKID+o1sxFVlQM=
Subject key identifier: 46:AF:D6:81:F2:2D:A3:C8:7D:15:1D:41:F9:01:82:A1:9A:BB:0B:35
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 051DF9F5
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Rq_WgfIto8h9FR1B-QGCoZq7CzU.roa
Signing time: Wed 23 Feb 2022 16:18:26 +0000
ROA not before: Wed 23 Feb 2022 16:18:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210931
IP address blocks: 87.251.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85850613 (0x51df9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 23 16:18:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46afd681f22da3c87d151d41f90182a19abb0b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:e6:b4:d5:26:88:e2:d8:61:50:ba:1c:2d:
c7:84:1d:99:e2:36:01:8e:ad:65:a6:b3:e5:5f:03:
24:f1:96:d8:95:3b:9c:d7:d3:ef:e6:28:22:70:72:
61:f2:c1:73:d7:67:c7:74:1c:af:fd:bb:e3:62:46:
cb:c8:7a:43:0c:9f:80:8f:a8:63:a6:c2:5c:7e:5c:
03:5c:ab:af:91:32:2c:7e:f8:ea:35:4c:97:77:df:
7a:55:ae:bc:c0:c6:bc:5c:a5:10:03:f6:55:c2:94:
95:fa:89:a4:b7:48:d7:53:2b:98:ba:82:dc:da:1b:
b7:5b:e7:d6:06:2f:dd:bd:19:4c:69:3c:f7:98:23:
c5:e1:78:c5:89:e6:78:75:4a:ec:28:74:27:f4:45:
53:e2:86:06:4f:98:cf:b1:d1:73:bd:7e:f1:aa:06:
c6:fe:ce:01:2a:12:7c:dd:be:6a:cc:4a:ec:10:df:
be:e7:48:88:15:78:e4:79:ac:65:b8:7a:e7:5a:57:
20:48:30:44:0c:b4:24:9e:77:6d:89:9f:3c:d4:08:
b8:96:2a:eb:7e:c6:ff:de:f4:6e:dc:03:e9:7b:d0:
df:01:e5:7d:95:5e:fe:1a:d3:f7:11:e9:97:63:c4:
8a:55:8d:59:8a:7a:0e:97:fa:39:77:ee:6d:77:9a:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:D6:81:F2:2D:A3:C8:7D:15:1D:41:F9:01:82:A1:9A:BB:0B:35
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Rq_WgfIto8h9FR1B-QGCoZq7CzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.76.0/24
Signature Algorithm: sha256WithRSAEncryption
73:23:aa:8f:78:62:1b:91:fe:45:dd:17:49:2a:09:50:e9:b5:
e3:6e:18:1b:25:ff:e9:a6:f8:1f:2c:97:70:b2:18:6b:88:d5:
4a:2f:88:ed:b6:f5:6e:a6:69:ce:4d:63:c8:43:db:62:86:3f:
89:6c:04:7f:9c:1f:9a:fe:37:b1:ed:37:47:3f:d0:fb:64:a5:
b7:6c:cf:7c:b0:22:55:11:f0:e9:e9:dd:43:ac:6c:19:d7:97:
b5:7a:a7:4a:41:e1:ec:78:d7:1d:3f:5a:54:86:5d:df:16:84:
ce:84:d9:90:87:1f:ac:00:5e:e4:66:55:ea:c7:57:35:0e:c7:
bb:99:0a:df:60:c6:8b:e9:09:aa:26:55:4f:6c:91:d0:17:04:
7e:1b:f1:79:5c:e3:0d:80:7d:11:bc:c1:8d:f5:23:e5:d0:29:
e5:a2:27:d0:d1:b1:e1:3a:cb:e3:19:3c:d5:4e:9b:6a:0d:84:
82:ce:b8:49:84:23:f0:4e:33:45:17:ea:53:a5:f6:88:5b:13:
64:bf:9b:7c:bf:2b:ea:6e:f0:42:09:27:2e:a7:e8:32:5d:4f:
d8:64:4f:6a:34:52:03:c5:b1:93:6a:43:2c:19:41:f4:2a:fe:
e1:43:be:b5:19:f0:fa:cc:f1:ab:fe:1e:63:56:73:22:26:5e:
37:18:0c:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBR359TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzNiNGMxMjQ4YzRiY2YyMmIwNTc3ZGZjYTliMTRkOTA2M2MyOGMwMB4XDTIyMDIy
MzE2MTgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDZhZmQ2ODFmMjJk
YTNjODdkMTUxZDQxZjkwMTgyYTE5YWJiMGIzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANau5rTVJoji2GFQuhwtx4QdmeI2AY6tZaaz5V8DJPGW2JU7
nNfT7+YoInByYfLBc9dnx3Qcr/2742JGy8h6QwyfgI+oY6bCXH5cA1yrr5EyLH74
6jVMl3ffelWuvMDGvFylEAP2VcKUlfqJpLdI11MrmLqC3Nobt1vn1gYv3b0ZTGk8
95gjxeF4xYnmeHVK7Ch0J/RFU+KGBk+Yz7HRc71+8aoGxv7OASoSfN2+asxK7BDf
vudIiBV45HmsZbh651pXIEgwRAy0JJ53bYmfPNQIuJYq637G/970btwD6XvQ3wHl
fZVe/hrT9xHpl2PEilWNWYp6Dpf6OXfubXeatzUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRGr9aB8i2jyH0VHUH5AYKhmrsLNTAfBgNVHSMEGDAWgBQHO0wSSMS88isF
d9/KmxTZBjwowDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J6dE1Fa2pFdlBJckJYZmZ5cHNVMlFZOEtNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8x
L1JxX1dnZkl0bzhoOUZSMUItUUdDb1pxN0N6VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NjNkYmU1LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8xL0J6dE1Fa2pFdlBJ
ckJYZmZ5cHNVMlFZOEtNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf7TDANBgkqhkiG9w0BAQsFAAOC
AQEAcyOqj3hiG5H+Rd0XSSoJUOm1424YGyX/6ab4HyyXcLIYa4jVSi+I7bb1bqZp
zk1jyEPbYoY/iWwEf5wfmv43se03Rz/Q+2Slt2zPfLAiVRHw6endQ6xsGdeXtXqn
SkHh7HjXHT9aVIZd3xaEzoTZkIcfrABe5GZV6sdXNQ7Hu5kK32DGi+kJqiZVT2yR
0BcEfhvxeVzjDYB9EbzBjfUj5dAp5aIn0NGx4TrL4xk81U6bag2Egs64SYQj8E4z
RRfqU6X2iFsTZL+bfL8r6m7wQgknLqfoMl1P2GRPajRSA8Wxk2pDLBlB9Cr+4UO+
tRnw+szxq/4eY1ZzIiZeNxgMFQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:08 2025 by rpki-client