Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/8lQ3BvqzQdwgUBhGlA4BIdLZ3oM.roa
File: 8lQ3BvqzQdwgUBhGlA4BIdLZ3oM.roa (raw, json)
Hash identifier: 8T1Z7/7R7sldujg9Ep2KOjdYta3Dh9gde3Z/lcrXbwY=
Subject key identifier: F2:54:37:06:FA:B3:41:DC:20:50:18:46:94:0E:01:21:D2:D9:DE:83
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0748BC6B
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/8lQ3BvqzQdwgUBhGlA4BIdLZ3oM.roa
Signing time: Sat 01 Jan 2022 13:58:33 +0000
ROA not before: Sat 01 Jan 2022 13:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.149.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122207339 (0x748bc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 1 13:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2543706fab341dc20501846940e0121d2d9de83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:80:03:1c:15:14:a3:a9:70:af:de:d6:cc:
fe:fd:96:79:4d:79:93:4a:d2:26:36:e3:e6:82:45:
3a:d1:be:07:e0:e2:60:a4:39:dd:7e:fd:40:33:34:
48:46:64:c7:fc:b7:91:e3:b3:fc:5d:14:00:57:e6:
8b:40:68:45:0a:9d:3a:a3:a6:70:d3:c9:65:92:76:
01:d3:66:0b:e7:12:09:0e:64:fc:e1:23:c9:66:34:
ac:a3:6c:99:39:dd:79:77:2d:bf:57:74:e9:d7:06:
52:da:c4:db:db:ea:e6:7f:1e:b0:99:5e:0b:c7:31:
01:33:f2:c8:7b:6e:a0:5f:20:1b:2a:10:ed:5d:af:
30:75:dc:b6:b4:23:5d:51:d8:52:9c:a1:0b:46:bc:
68:8d:9f:c7:e8:5c:9d:0c:33:07:5d:06:fe:36:cf:
57:aa:e5:e4:56:c3:33:c9:91:6c:5a:cf:e9:7d:9b:
cb:68:eb:9e:24:ea:47:e1:b3:e3:a0:35:fe:a1:3b:
f4:31:15:de:eb:e4:33:3b:b2:d6:cd:b0:af:e3:a9:
14:2c:1e:a0:d8:72:66:94:ac:ff:c9:67:ff:f1:eb:
1b:09:78:57:d5:62:e3:dc:39:9f:dc:6c:9a:ee:73:
d0:07:86:56:80:c5:b0:78:ba:de:7b:ab:46:08:72:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:37:06:FA:B3:41:DC:20:50:18:46:94:0E:01:21:D2:D9:DE:83
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/8lQ3BvqzQdwgUBhGlA4BIdLZ3oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.108.0/22
Signature Algorithm: sha256WithRSAEncryption
91:64:c9:b2:ef:f8:8b:8a:b0:74:9b:d7:3a:ba:7e:49:14:c4:
60:5d:28:61:d9:a9:c8:fb:53:8c:ca:2b:3e:e5:cd:a3:29:43:
0b:92:4a:03:58:4e:f3:ec:a6:97:a0:18:a4:c4:49:27:18:e5:
0e:8e:e8:7e:dc:0d:6d:88:95:60:79:96:6b:27:ae:9a:4a:2a:
42:83:13:d0:72:a1:df:68:2c:e1:65:a4:e0:e1:6c:e1:e8:03:
00:f9:6b:1f:a6:c4:24:76:19:00:51:c5:68:71:6f:26:40:47:
21:7d:57:9d:52:13:4f:86:2d:ce:9f:07:c4:b4:7d:0c:dc:82:
9b:27:c9:56:a3:bc:27:63:9c:74:6f:ad:1c:f6:3a:b1:30:fd:
92:c7:65:df:de:2d:d1:ff:43:84:c8:86:1e:e7:1b:72:92:16:
6c:d0:9c:e2:1f:4e:0e:b8:73:68:bd:f5:cb:f1:e3:f3:08:09:
92:22:7f:52:4a:d1:97:1e:85:76:f6:37:8e:ce:44:92:c2:33:
9d:3a:17:68:6e:5c:1d:8e:6a:86:6c:89:d5:b1:63:1b:e2:d5:
c8:84:05:d9:7f:35:31:8a:6e:4c:41:36:4f:4e:34:7f:ea:35:
77:2e:99:66:ab:bb:46:38:66:46:6a:30:74:0a:ba:0b:75:e1:
48:e6:35:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0i8azANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NGFkZDViYTc2NjJiNzMxZGQwOGJjZjg3MzhmMTM1ZDkzYWVkNDUxMB4XDTIyMDEw
MTEzNTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjI1NDM3MDZmYWIz
NDFkYzIwNTAxODQ2OTQwZTAxMjFkMmQ5ZGU4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJcIgAMcFRSjqXCv3tbM/v2WeU15k0rSJjbj5oJFOtG+B+Di
YKQ53X79QDM0SEZkx/y3keOz/F0UAFfmi0BoRQqdOqOmcNPJZZJ2AdNmC+cSCQ5k
/OEjyWY0rKNsmTndeXctv1d06dcGUtrE29vq5n8esJleC8cxATPyyHtuoF8gGyoQ
7V2vMHXctrQjXVHYUpyhC0a8aI2fx+hcnQwzB10G/jbPV6rl5FbDM8mRbFrP6X2b
y2jrniTqR+Gz46A1/qE79DEV3uvkMzuy1s2wr+OpFCweoNhyZpSs/8ln//HrGwl4
V9Vi49w5n9xsmu5z0AeGVoDFsHi63nurRghysy0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTyVDcG+rNB3CBQGEaUDgEh0tnegzAfBgNVHSMEGDAWgBTErdW6dmK3Md0I
vPhzjxNdk67UUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hLM1Z1blppdHpIZENMejRjNDhUWFpPdTFGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvMzQ2YTIzLTExODEtNGE4MC05ZjU1LWRkN2Q0N2NmNWMxOC8x
LzhsUTNCdnF6UWR3Z1VCaEdsQTRCSWRMWjNvTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
MzQ2YTIzLTExODEtNGE4MC05ZjU1LWRkN2Q0N2NmNWMxOC8xL3hLM1Z1blppdHpI
ZENMejRjNDhUWFpPdTFGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2VbDANBgkqhkiG9w0BAQsFAAOC
AQEAkWTJsu/4i4qwdJvXOrp+SRTEYF0oYdmpyPtTjMorPuXNoylDC5JKA1hO8+ym
l6AYpMRJJxjlDo7oftwNbYiVYHmWayeumkoqQoMT0HKh32gs4WWk4OFs4egDAPlr
H6bEJHYZAFHFaHFvJkBHIX1XnVITT4Ytzp8HxLR9DNyCmyfJVqO8J2OcdG+tHPY6
sTD9ksdl394t0f9DhMiGHucbcpIWbNCc4h9ODrhzaL31y/Hj8wgJkiJ/UkrRlx6F
dvY3js5EksIznToXaG5cHY5qhmyJ1bFjG+LVyIQF2X81MYpuTEE2T040f+o1dy6Z
Zqu7RjhmRmowdAq6C3XhSOY1Ow==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:45 2025 by rpki-client