Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sODZCVlnvm_47AfCmwwP-98YZXc.roa
File: sODZCVlnvm_47AfCmwwP-98YZXc.roa (raw, json)
Hash identifier: w6Ydzx9Eu7bfFsqswVMD1zbUXej0XXPPGRptD4NfgeQ=
Subject key identifier: B0:E0:D9:09:59:67:BE:6F:F8:EC:07:C2:9B:0C:0F:FB:DF:18:65:77
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 01872D1DA1BDE078559E5B066E21349B249C
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sODZCVlnvm_47AfCmwwP-98YZXc.roa
Signing time: Wed 29 Mar 2023 11:25:29 +0000
ROA not before: Wed 29 Mar 2023 11:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272877
IP address blocks: 45.80.198.0/23 maxlen: 23
45.80.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:1d:a1:bd:e0:78:55:9e:5b:06:6e:21:34:9b:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Mar 29 11:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e0d9095967be6ff8ec07c29b0c0ffbdf186577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:9e:c6:9c:a5:91:19:29:d3:b3:e4:d0:0a:
09:ea:13:bc:5c:6a:d1:f7:c0:54:25:f1:7b:a1:bc:
7b:4c:e1:7f:6c:11:02:b7:fd:c2:70:a7:b6:91:d3:
83:22:f4:4c:ac:9f:62:c1:6c:9c:b0:aa:20:a8:71:
9b:15:c3:a4:c9:f8:17:26:71:ea:d7:f2:d0:cd:be:
a7:c2:74:44:a2:f4:e4:6d:2d:a4:b2:c5:3b:b3:6e:
a3:f6:d5:93:8a:86:d0:e6:52:f1:1a:9d:a0:9e:bd:
30:eb:8e:ae:c9:ef:a9:99:c2:cd:15:7e:13:7f:72:
f6:bd:50:70:b5:b8:3d:95:6c:65:ea:fa:9f:0e:8d:
b1:17:4f:e8:7d:8d:1d:6e:1e:3f:fd:3d:c4:e5:d3:
09:45:c8:78:cf:91:c5:50:41:df:a5:7e:81:0d:8e:
f6:9f:09:8b:e2:8d:43:77:5b:b3:3d:a0:fc:45:83:
7f:fc:f9:20:68:30:d0:dd:de:cf:c4:dd:9a:f4:7f:
f0:a1:3a:ce:b1:e9:a0:04:79:15:dc:be:c3:1b:57:
1e:40:6a:f7:77:53:92:2f:4f:f1:57:95:b9:10:03:
64:49:b4:6c:6f:17:ab:4b:11:1f:c1:3b:9c:03:f7:
3d:d9:86:29:f3:84:d4:9d:03:04:b5:e9:71:28:5f:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:D9:09:59:67:BE:6F:F8:EC:07:C2:9B:0C:0F:FB:DF:18:65:77
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/sODZCVlnvm_47AfCmwwP-98YZXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:66:18:49:8e:93:f1:08:d5:4f:44:d0:72:e9:5f:6f:e7:01:
f0:b8:54:e7:1c:14:5a:89:48:3a:89:35:dc:24:d3:2a:19:ab:
04:51:7b:3e:47:cc:a2:3f:0c:4b:fa:ba:ad:77:5f:13:e4:88:
9d:1f:cb:bc:2a:7b:a7:d5:74:cf:47:15:df:fa:5a:6c:0e:8d:
fd:1d:6e:1d:aa:42:c2:76:26:7a:97:6a:54:da:3d:fc:ce:59:
67:15:f7:8a:4f:7b:36:7a:49:4b:2e:71:18:7f:60:2a:33:d2:
8b:6a:4c:8d:ee:00:6c:c9:23:90:9e:08:25:2d:57:23:ed:99:
1a:a7:89:be:f7:59:c9:8e:30:50:ac:d0:03:72:ed:dd:3b:19:
04:2e:2e:b5:7c:99:c2:40:aa:c5:f0:22:4d:ca:bd:4e:00:42:
5f:71:d5:61:20:2f:10:12:82:18:67:07:82:c6:f6:35:11:2d:
f2:ce:20:95:bd:ed:74:64:98:4f:23:06:71:74:ca:99:69:9c:
a6:b6:21:b3:4a:78:02:dc:25:1d:ea:b1:98:9b:a5:7b:0e:4a:
3f:c1:4c:83:b3:23:a3:00:e0:9d:aa:ef:8c:72:72:53:d4:6a:
36:48:62:2f:5d:e1:b9:f4:f3:4a:c6:1b:dc:a5:cf:ad:eb:0e:
14:82:ac:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYctHaG94HhVnlsGbiE0myScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjMwMzI5MTEyNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGUwZDkwOTU5NjdiZTZmZjhlYzA3YzI5YjBjMGZmYmRmMTg2NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/2expylkRkp07Pk0AoJ6hO8XGrR
98BUJfF7obx7TOF/bBECt/3CcKe2kdODIvRMrJ9iwWycsKogqHGbFcOkyfgXJnHq
1/LQzb6nwnREovTkbS2kssU7s26j9tWTiobQ5lLxGp2gnr0w646uye+pmcLNFX4T
f3L2vVBwtbg9lWxl6vqfDo2xF0/ofY0dbh4//T3E5dMJRch4z5HFUEHfpX6BDY72
nwmL4o1Dd1uzPaD8RYN//PkgaDDQ3d7PxN2a9H/woTrOsemgBHkV3L7DG1ceQGr3
d1OSL0/xV5W5EANkSbRsbxerSxEfwTucA/c92YYp84TUnQMEtelxKF+XwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDg2QlZZ75v+OwHwpsMD/vfGGV3MB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvc09EWkNWbG52bV80N0FmQ213d1AtOThZWlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVDEMA0G
CSqGSIb3DQEBCwUAA4IBAQBdZhhJjpPxCNVPRNBy6V9v5wHwuFTnHBRaiUg6iTXc
JNMqGasEUXs+R8yiPwxL+rqtd18T5IidH8u8Knun1XTPRxXf+lpsDo39HW4dqkLC
diZ6l2pU2j38zllnFfeKT3s2eklLLnEYf2AqM9KLakyN7gBsySOQngglLVcj7Zka
p4m+91nJjjBQrNADcu3dOxkELi61fJnCQKrF8CJNyr1OAEJfcdVhIC8QEoIYZweC
xvY1ES3yziCVve10ZJhPIwZxdMqZaZymtiGzSngC3CUd6rGYm6V7Dko/wUyDsyOj
AOCdqu+McnJT1Go2SGIvXeG59PNKxhvcpc+t6w4Ugqyq
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:08 2025 by rpki-client