Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Y8phMjpCo-5PMO_fNVzIRMdGAvk.roa
File: Y8phMjpCo-5PMO_fNVzIRMdGAvk.roa (raw, json)
Hash identifier: U2LKK/9hE+a+fNLMTGYlhCzVjEDkTQfUs9/wpEnpWpo=
Subject key identifier: 63:CA:61:32:3A:42:A3:EE:4F:30:EF:DF:35:5C:C8:44:C7:46:02:F9
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42CE495B72B3CAE60064EA78A692F8
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Y8phMjpCo-5PMO_fNVzIRMdGAvk.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211827
IP address blocks: 45.93.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ce:49:5b:72:b3:ca:e6:00:64:ea:78:a6:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ca61323a42a3ee4f30efdf355cc844c74602f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:eb:1a:56:d9:8b:9c:c6:ed:22:a3:ae:85:
16:99:de:c9:b5:3e:20:62:fe:57:43:29:91:ac:c4:
45:62:50:ab:53:71:43:5e:a6:a3:4e:e8:1b:70:d1:
3e:36:ad:d8:14:ce:47:23:35:b4:1b:fb:2f:c6:b4:
d5:9e:34:7c:7b:58:b2:62:48:f1:39:1e:52:d9:c3:
12:fb:d8:5e:12:7d:ce:4d:e3:22:f0:56:34:46:4b:
0d:50:01:80:88:81:b2:76:4b:2e:22:4a:cb:9d:36:
6a:3a:68:28:61:a4:37:dc:9c:b3:91:a8:7a:d2:ca:
0f:cc:29:5d:71:49:a5:50:f3:6e:03:42:35:a7:7d:
04:a6:23:bb:8b:d7:c6:70:b7:80:e8:d7:7a:1d:82:
83:ce:42:67:2b:15:c5:e8:06:ef:96:84:a6:de:92:
b8:9f:45:ae:4e:9d:a5:e0:f9:f3:bf:50:0c:01:d3:
90:56:94:e4:f9:c0:f9:3d:e7:28:78:e3:06:a8:1c:
44:03:f3:13:23:b5:c0:05:63:0e:14:06:50:8c:df:
0a:cb:ff:2b:5a:3c:2b:b8:54:97:f4:b2:cf:c1:be:
b8:6b:97:b5:14:a4:50:80:d2:8f:ca:e3:3b:a0:c2:
6b:fb:d9:02:21:15:44:f6:74:a8:2a:97:80:98:eb:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:61:32:3A:42:A3:EE:4F:30:EF:DF:35:5C:C8:44:C7:46:02:F9
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Y8phMjpCo-5PMO_fNVzIRMdGAvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:02:c9:f2:7f:98:a8:e4:95:22:cc:77:da:43:8f:02:81:c2:
fd:0b:46:de:4f:db:a9:91:22:e7:3a:3d:de:3e:b9:05:c6:a1:
d9:e0:b6:f9:07:c5:b0:82:94:ae:a2:34:a6:e3:69:63:d0:a1:
30:d9:71:74:e7:15:9b:fe:ad:a8:14:7e:e1:92:00:e6:28:bd:
d8:71:ca:d8:20:97:15:58:3d:03:f2:8d:9a:43:56:3a:49:37:
4a:6e:92:c7:07:f9:af:55:66:26:dd:2f:04:6e:9c:b4:5c:1c:
f7:c4:37:da:90:30:30:67:67:56:e8:ea:f9:26:5a:e4:2e:d9:
a8:22:85:0d:1f:5b:0a:66:8b:b2:93:fc:4c:45:62:06:b9:b8:
2b:df:39:09:f4:fe:11:6e:03:fb:87:de:93:a9:70:2b:12:91:
9d:0b:62:81:94:89:ff:d4:a2:8f:6b:48:a3:6f:7d:97:91:f6:
7b:07:70:6b:76:ba:20:7a:db:d4:cb:ee:bf:7d:1a:3f:6b:35:
3d:bb:b6:51:09:b4:63:0b:fe:47:0e:e3:7c:0c:5a:12:cd:2d:
bc:6e:df:45:98:01:5e:e3:56:b3:25:92:23:e8:0f:04:77:ec:
09:32:fa:e1:2c:f7:71:35:dd:0d:07:16:c5:aa:cb:4b:28:42:
64:d7:16:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQs5JW3KzyuYAZOp4ppL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjMwMTAxMjEzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2NhNjEzMjNhNDJhM2VlNGYzMGVmZGYzNTVjYzg0NGM3NDYwMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUnrGlbZi5zG7SKjroUWmd7JtT4g
Yv5XQymRrMRFYlCrU3FDXqajTugbcNE+Nq3YFM5HIzW0G/svxrTVnjR8e1iyYkjx
OR5S2cMS+9heEn3OTeMi8FY0RksNUAGAiIGydksuIkrLnTZqOmgoYaQ33Jyzkah6
0soPzCldcUmlUPNuA0I1p30EpiO7i9fGcLeA6Nd6HYKDzkJnKxXF6AbvloSm3pK4
n0WuTp2l4Pnzv1AMAdOQVpTk+cD5PecoeOMGqBxEA/MTI7XABWMOFAZQjN8Ky/8r
WjwruFSX9LLPwb64a5e1FKRQgNKPyuM7oMJr+9kCIRVE9nSoKpeAmOuMwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPKYTI6QqPuTzDv3zVcyETHRgL5MB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvWThwaE1qcENvLTVQTU9fZk5WeklSTWRHQXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV2VMA0G
CSqGSIb3DQEBCwUAA4IBAQBtAsnyf5io5JUizHfaQ48CgcL9C0beT9upkSLnOj3e
PrkFxqHZ4Lb5B8WwgpSuojSm42lj0KEw2XF05xWb/q2oFH7hkgDmKL3YccrYIJcV
WD0D8o2aQ1Y6STdKbpLHB/mvVWYm3S8Ebpy0XBz3xDfakDAwZ2dW6Or5JlrkLtmo
IoUNH1sKZouyk/xMRWIGubgr3zkJ9P4RbgP7h96TqXArEpGdC2KBlIn/1KKPa0ij
b32XkfZ7B3BrdrogetvUy+6/fRo/azU9u7ZRCbRjC/5HDuN8DFoSzS28bt9FmAFe
41azJZIj6A8Ed+wJMvrhLPdxNd0NBxbFqstLKEJk1xbg
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:00 2025 by rpki-client