Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/pHdqvsm04UG1dFwLY4MdUNAM7R8.roa
File: pHdqvsm04UG1dFwLY4MdUNAM7R8.roa (raw, json)
Hash identifier: fwmIGC8+cAa6+T8rofwMHc8feuL3kpExKwm008mJpH4=
Subject key identifier: A4:77:6A:BE:C9:B4:E1:41:B5:74:5C:0B:63:83:1D:50:D0:0C:ED:1F
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 076F84B8
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/pHdqvsm04UG1dFwLY4MdUNAM7R8.roa
Signing time: Sat 01 Jan 2022 09:58:21 +0000
ROA not before: Sat 01 Jan 2022 09:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198024
IP address blocks: 45.88.44.0/22 maxlen: 22
2a07:3b00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124748984 (0x76f84b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jan 1 09:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4776abec9b4e141b5745c0b63831d50d00ced1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:ce:98:70:c3:58:f5:05:e7:0a:d8:fb:3c:
d2:eb:ab:7b:30:3a:58:1c:d3:ce:4c:0b:cc:ef:b1:
22:ce:38:68:c6:58:2b:f2:bd:cf:95:27:7a:7f:af:
10:d0:56:59:07:f5:67:a2:08:07:b0:21:0d:87:b4:
39:18:ef:e4:46:a3:07:31:f8:be:1b:80:9c:f8:41:
56:7e:ce:c6:e1:9b:90:2e:01:79:77:3f:44:10:f6:
cc:61:b0:4a:3c:6b:5a:97:3f:fb:3e:ae:6b:ed:3b:
85:67:87:ea:0a:1c:f6:f9:f0:4a:90:15:f0:7f:54:
c6:e4:d0:f2:57:b4:98:58:51:d0:b7:02:b3:08:7e:
ea:db:8d:ae:c7:f2:f3:91:e8:f0:bc:07:67:69:b4:
c8:10:8a:f6:75:e8:28:b4:8b:24:6c:a3:97:3e:c9:
00:92:fe:9f:81:7c:18:b6:8c:ca:8b:06:b9:5a:c9:
03:3a:b2:c2:b9:a5:5e:ed:9d:39:82:71:52:7c:5a:
e2:e4:19:a7:ec:67:99:bf:e7:cc:94:73:08:06:93:
92:a7:3a:23:41:03:3b:68:4d:48:7d:ae:7a:bb:b9:
e1:5c:86:9f:b0:22:a4:39:f7:41:4a:d7:9e:ee:11:
77:a3:ef:9f:58:35:5b:7d:fb:0e:76:40:5f:50:62:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:6A:BE:C9:B4:E1:41:B5:74:5C:0B:63:83:1D:50:D0:0C:ED:1F
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/pHdqvsm04UG1dFwLY4MdUNAM7R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.44.0/22
IPv6:
2a07:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
d0:01:35:24:4c:ad:36:96:0e:5d:4d:e6:12:56:be:47:17:34:
0c:4b:ec:b6:3d:77:94:a0:06:b8:0d:62:4e:98:67:96:99:18:
c7:3e:4a:cc:72:b8:b6:b9:e6:14:66:77:38:11:d9:57:d3:2d:
8d:02:b6:24:43:0c:2b:8a:68:b2:e5:53:64:0e:2b:29:9b:6f:
c5:f2:d2:ec:88:90:83:92:f7:ed:7d:4c:d8:08:2b:e8:31:bb:
24:ef:ac:5d:9e:fb:54:62:15:65:e0:b5:19:3d:64:58:5f:fc:
c6:c9:6c:93:75:29:c6:c7:40:03:f9:25:68:18:df:cd:f7:b0:
bf:19:d8:fa:8d:73:7a:63:56:9f:03:13:a7:33:51:54:c3:5c:
ef:d0:bb:81:47:03:88:f0:a8:92:3a:12:6e:f7:e7:e6:57:69:
79:41:23:03:ef:61:32:15:77:22:2e:a6:53:71:10:e5:65:97:
d2:9c:9f:c4:b1:2e:c3:f6:07:f5:33:c0:6d:48:6b:da:b5:b7:
c6:f2:cd:e2:c2:e3:48:8b:07:e3:8e:f9:51:fa:bd:a2:f4:f6:
ed:b9:ec:bb:0f:ea:54:74:84:11:0a:33:57:bb:0e:e7:77:7d:
db:bc:ef:d2:94:2a:53:12:53:7a:7b:a2:7d:e7:ad:46:62:8d:
f3:72:64:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB2+EuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjdjZTY0YWNlMDJjY2QzMzBjZWVmOThkMDVkZjBmYjIwMzE3YTkxMB4XDTIyMDEw
MTA5NTgyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ3NzZhYmVjOWI0
ZTE0MWI1NzQ1YzBiNjM4MzFkNTBkMDBjZWQxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJiezphww1j1BecK2Ps80uurezA6WBzTzkwLzO+xIs44aMZY
K/K9z5Unen+vENBWWQf1Z6IIB7AhDYe0ORjv5EajBzH4vhuAnPhBVn7OxuGbkC4B
eXc/RBD2zGGwSjxrWpc/+z6ua+07hWeH6goc9vnwSpAV8H9UxuTQ8le0mFhR0LcC
swh+6tuNrsfy85Ho8LwHZ2m0yBCK9nXoKLSLJGyjlz7JAJL+n4F8GLaMyosGuVrJ
AzqywrmlXu2dOYJxUnxa4uQZp+xnmb/nzJRzCAaTkqc6I0EDO2hNSH2ueru54VyG
n7AipDn3QUrXnu4Rd6Pvn1g1W337DnZAX1BiB78CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSkd2q+ybThQbV0XAtjgx1Q0AztHzAfBgNVHSMEGDAWgBQyfOZKzgLM0zDO
75jQXfD7IDF6kTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01uem1TczRDek5Nd3p1LVkwRjN3LXlBeGVwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvOWRlNWRhLTJkYjItNGUwNi04NTYzLWEzZDlkNjE0ZjE5Ny8x
L3BIZHF2c20wNFVHMWRGd0xZNE1kVU5BTTdSOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
OWRlNWRhLTJkYjItNGUwNi04NTYzLWEzZDlkNjE0ZjE5Ny8xL01uem1TczRDek5N
d3p1LVkwRjN3LXlBeGVwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1YLDANBAIAAjAHAwUDKgc7ADAN
BgkqhkiG9w0BAQsFAAOCAQEA0AE1JEytNpYOXU3mEla+Rxc0DEvstj13lKAGuA1i
TphnlpkYxz5KzHK4trnmFGZ3OBHZV9MtjQK2JEMMK4posuVTZA4rKZtvxfLS7IiQ
g5L37X1M2Agr6DG7JO+sXZ77VGIVZeC1GT1kWF/8xslsk3UpxsdAA/klaBjfzfew
vxnY+o1zemNWnwMTpzNRVMNc79C7gUcDiPCokjoSbvfn5ldpeUEjA+9hMhV3Ii6m
U3EQ5WWX0pyfxLEuw/YH9TPAbUhr2rW3xvLN4sLjSIsH4475Ufq9ovT27bnsuw/q
VHSEEQozV7sO53d927zv0pQqUxJTenuifeetRmKN83JkYg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:51 2025 by rpki-client