Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/9zeSiqLO_EDpVwGMxUpY1bzhV7Y.roa
File: 9zeSiqLO_EDpVwGMxUpY1bzhV7Y.roa (raw, json)
Hash identifier: sJy1oUFpLcl2Ih9uO8gatnuF7eipHM+Eba/qIgfZxqI=
Subject key identifier: F7:37:92:8A:A2:CE:FC:40:E9:57:01:8C:C5:4A:58:D5:BC:E1:57:B6
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 07418A12
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/9zeSiqLO_EDpVwGMxUpY1bzhV7Y.roa
Signing time: Sat 01 Jan 2022 12:56:41 +0000
ROA not before: Sat 01 Jan 2022 12:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208202
IP address blocks: 45.154.55.0/24 maxlen: 24
45.154.52.0/24 maxlen: 24
45.154.53.0/24 maxlen: 24
45.154.54.0/24 maxlen: 24
2a0f:ad01::/32 maxlen: 32
2a0f:ad00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121735698 (0x7418a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Jan 1 12:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f737928aa2cefc40e957018cc54a58d5bce157b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:07:73:a2:6a:8b:e6:69:eb:1f:86:93:c6:
13:9e:d4:02:f4:be:f7:b7:cb:40:8e:f6:55:a7:05:
96:24:9c:a3:f6:12:06:38:9c:70:5f:59:b7:6a:5d:
38:31:00:54:a6:6e:1c:32:1e:b2:72:5b:e4:4a:ef:
47:a2:f2:20:46:0c:9d:90:86:ad:ad:7e:7b:4e:7e:
dc:64:99:79:2b:1d:40:d5:9a:a8:98:1d:1e:46:15:
9a:59:19:d8:dd:4a:83:4a:4f:71:3c:25:d4:40:c3:
2e:c8:c4:c8:17:23:12:8e:1f:51:2d:69:26:2f:31:
f3:2d:15:46:bd:2f:29:58:90:88:e4:08:be:aa:3b:
9e:1c:0b:03:a1:06:ad:0e:75:fe:65:a0:19:b5:b2:
82:9e:c7:1b:00:e5:f4:30:3d:9e:5b:8f:36:55:e0:
16:28:d0:91:2a:fc:0e:dc:22:b9:9c:d2:ac:7f:71:
d2:e9:7b:62:45:34:3b:b2:dd:09:dd:e5:0d:a5:0b:
c5:3c:49:62:ef:22:a6:07:e2:74:83:1b:ae:ae:aa:
a4:e2:0f:6d:b8:ef:d2:e2:1f:21:f8:57:0f:87:8b:
16:14:96:1e:fa:12:0a:ee:68:d9:bf:8a:58:74:98:
84:29:de:7d:a5:6a:9a:1a:b1:2e:bb:e1:2e:7a:4d:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:92:8A:A2:CE:FC:40:E9:57:01:8C:C5:4A:58:D5:BC:E1:57:B6
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/9zeSiqLO_EDpVwGMxUpY1bzhV7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.52.0/22
IPv6:
2a0f:ad00::/31
Signature Algorithm: sha256WithRSAEncryption
20:bc:3a:a5:b2:ce:92:6b:57:17:45:83:97:83:1c:25:11:5e:
01:76:ea:43:fb:d1:74:af:f6:ae:b3:02:65:96:96:df:77:a2:
92:69:b8:b0:11:47:e7:38:f5:24:25:1f:71:34:eb:ac:3d:4f:
8d:8b:2c:bb:ff:cc:fb:5b:46:a4:4f:37:ed:59:22:8b:d7:fd:
8f:d1:4d:54:bb:1f:e5:39:64:e4:fd:c6:73:ef:63:2a:0a:97:
07:2a:eb:97:7e:6e:41:07:bf:d0:03:a9:cd:cf:3e:5e:ef:84:
2e:38:09:80:4a:eb:3f:ea:7d:3d:12:86:f3:51:cb:b9:d0:a8:
6b:9b:31:b2:23:b9:94:ca:19:90:4a:56:9f:83:ad:12:a7:58:
4c:8c:16:aa:bd:19:e4:43:56:91:fa:c4:a4:41:6d:62:3e:06:
82:38:84:97:28:d1:c4:12:9b:b7:89:51:4e:bb:eb:24:55:25:
00:2c:ea:5b:d6:8a:d9:47:1c:5a:71:a0:2b:18:bc:aa:68:34:
78:e1:12:48:46:20:54:fa:22:f4:91:4f:f3:1b:c4:40:ba:0b:
f5:b2:9d:8a:0e:20:a0:00:0d:ab:20:e1:90:c2:9a:fb:06:2b:
ec:3a:0b:10:b4:5b:3a:98:fa:89:6e:d7:31:e5:f3:9c:ca:9f:
61:87:2a:da
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB0GKEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTE3MGVlODU5ZTkxZjQ5NzNkZTRhNTcyYjFiYWQyZjNhNWQxODI1MB4XDTIyMDEw
MTEyNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjczNzkyOGFhMmNl
ZmM0MGU5NTcwMThjYzU0YTU4ZDViY2UxNTdiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZ9B3OiaovmaesfhpPGE57UAvS+97fLQI72VacFliSco/YS
BjiccF9Zt2pdODEAVKZuHDIesnJb5ErvR6LyIEYMnZCGra1+e05+3GSZeSsdQNWa
qJgdHkYVmlkZ2N1Kg0pPcTwl1EDDLsjEyBcjEo4fUS1pJi8x8y0VRr0vKViQiOQI
vqo7nhwLA6EGrQ51/mWgGbWygp7HGwDl9DA9nluPNlXgFijQkSr8DtwiuZzSrH9x
0ul7YkU0O7LdCd3lDaULxTxJYu8ipgfidIMbrq6qpOIPbbjv0uIfIfhXD4eLFhSW
HvoSCu5o2b+KWHSYhCnefaVqmhqxLrvhLnpNyl8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT3N5KKos78QOlXAYzFSljVvOFXtjAfBgNVHSMEGDAWgBQOFw7oWekfSXPe
SlcrG60vOl0YJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RoY082Rm5wSDBsejNrcFhLeHV0THpwZEdDVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvY2Y3MjBlLTRkMzMtNGRiMS04NmU5LWZjMmVjNGJiNTk2Ny8x
Lzl6ZVNpcUxPX0VEcFZ3R014VXBZMWJ6aFY3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
Y2Y3MjBlLTRkMzMtNGRiMS04NmU5LWZjMmVjNGJiNTk2Ny8xL0RoY082Rm5wSDBs
ejNrcFhLeHV0THpwZEdDVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2aNDANBAIAAjAHAwUBKg+tADAN
BgkqhkiG9w0BAQsFAAOCAQEAILw6pbLOkmtXF0WDl4McJRFeAXbqQ/vRdK/2rrMC
ZZaW33eikmm4sBFH5zj1JCUfcTTrrD1PjYssu//M+1tGpE837Vkii9f9j9FNVLsf
5Tlk5P3Gc+9jKgqXByrrl35uQQe/0AOpzc8+Xu+ELjgJgErrP+p9PRKG81HLudCo
a5sxsiO5lMoZkEpWn4OtEqdYTIwWqr0Z5ENWkfrEpEFtYj4GgjiElyjRxBKbt4lR
TrvrJFUlACzqW9aK2UccWnGgKxi8qmg0eOESSEYgVPoi9JFP8xvEQLoL9bKdig4g
oAANqyDhkMKa+wYr7DoLELRbOpj6iW7XMeXznMqfYYcq2g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:44 2025 by rpki-client