Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/lb47HRY8xc3UEtLGj3wA6hq1MHk.roa
File: lb47HRY8xc3UEtLGj3wA6hq1MHk.roa (raw, json)
Hash identifier: MADxsjqgqKc9Oz+H0RqKTVE2tiYtYccp0uPiblkidvc=
Subject key identifier: 95:BE:3B:1D:16:3C:C5:CD:D4:12:D2:C6:8F:7C:00:EA:1A:B5:30:79
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 01856F020B081B43034D80367F6CD89C7DD5
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/lb47HRY8xc3UEtLGj3wA6hq1MHk.roa
Signing time: Sun 01 Jan 2023 20:24:42 +0000
ROA not before: Sun 01 Jan 2023 20:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58224
IP address blocks: 45.144.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:0b:08:1b:43:03:4d:80:36:7f:6c:d8:9c:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jan 1 20:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95be3b1d163cc5cdd412d2c68f7c00ea1ab53079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:bc:66:e5:3b:93:a1:fc:8b:0c:d6:ec:9b:
66:5e:7b:8d:ff:b5:ef:8e:58:5e:df:94:29:5a:36:
3a:99:46:88:7d:76:91:8b:4d:1a:28:4f:6c:76:b6:
cf:c8:2c:09:3a:68:eb:8b:75:6e:ca:49:3b:00:c1:
cd:8f:e0:1f:0e:21:38:31:28:34:00:12:99:76:e5:
c1:db:46:17:5a:6c:ed:49:a3:67:44:a2:21:c4:a3:
0d:e2:20:9a:50:22:ee:d4:5a:6e:be:0a:3b:37:59:
9c:bd:92:87:06:da:ad:4d:d4:95:a1:9c:40:12:77:
28:9a:e1:fd:d6:0e:19:7d:c0:07:51:3c:df:5a:d7:
93:34:95:eb:f8:ae:2a:13:a0:b8:e0:fb:88:bc:3a:
24:f2:ac:29:68:06:c9:94:04:db:b3:d7:e7:f5:2b:
ca:2d:bf:2f:6a:31:2b:9a:3d:5f:68:d8:c9:84:ce:
7b:78:a9:bf:f7:81:0e:b0:dd:9a:0c:49:2b:29:90:
17:0b:2d:6d:ed:68:a0:95:d5:64:4e:d8:b3:b4:12:
87:95:65:95:34:ba:95:0e:b9:41:75:10:61:90:fe:
39:ea:e5:d7:09:df:50:d0:f6:32:94:50:54:03:89:
2e:58:ac:b7:45:e1:59:23:95:70:c2:f1:c2:c6:25:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:3B:1D:16:3C:C5:CD:D4:12:D2:C6:8F:7C:00:EA:1A:B5:30:79
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/lb47HRY8xc3UEtLGj3wA6hq1MHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4d:3b:71:73:33:8a:9c:08:50:4a:6a:86:df:ef:99:a5:25:
a3:97:26:40:a4:ff:af:55:b5:f1:cc:70:3c:6c:d0:a8:3d:c2:
f7:d7:1b:14:28:c8:45:1b:2e:44:87:0a:a3:9e:2d:b8:19:97:
9f:4a:6c:40:4e:ec:14:3b:c9:b8:56:27:db:b7:6b:28:3e:a3:
b2:79:a8:b4:ee:49:e7:fa:90:9c:a3:5e:e9:38:22:02:17:69:
35:3b:08:fd:d2:4c:dd:8b:27:65:db:ee:88:dc:a0:4d:a4:ba:
a2:41:44:8a:18:4d:93:44:00:2e:de:2f:6e:73:69:ee:33:a7:
65:41:f1:70:5f:c2:ee:69:e5:8a:fd:7b:85:be:af:83:7d:84:
35:ab:ad:7a:5d:9c:a4:ca:cd:16:66:34:c5:28:36:a6:15:86:
8b:73:53:77:10:0a:a1:81:62:37:63:59:b2:e1:d4:ee:b5:39:
eb:61:23:94:f5:1e:ca:97:23:59:b9:8e:ee:13:c6:d3:2e:66:
1a:0a:14:f0:c5:13:ae:54:b2:ac:91:0e:65:b9:96:59:ff:3b:
14:6f:4a:a8:99:34:f1:d9:c9:dd:88:7d:89:78:23:a1:7e:03:
ce:bc:a8:d3:70:41:96:2a:e7:d3:fa:63:0f:04:f8:e4:d0:88:
81:8d:39:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAgsIG0MDTYA2f2zYnH3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjMwMTAxMjAyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWJlM2IxZDE2M2NjNWNkZDQxMmQyYzY4ZjdjMDBlYTFhYjUzMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj68ZuU7k6H8iwzW7JtmXnuN/7Xv
jlhe35QpWjY6mUaIfXaRi00aKE9sdrbPyCwJOmjri3Vuykk7AMHNj+AfDiE4MSg0
ABKZduXB20YXWmztSaNnRKIhxKMN4iCaUCLu1Fpuvgo7N1mcvZKHBtqtTdSVoZxA
EncomuH91g4ZfcAHUTzfWteTNJXr+K4qE6C44PuIvDok8qwpaAbJlATbs9fn9SvK
Lb8vajErmj1faNjJhM57eKm/94EOsN2aDEkrKZAXCy1t7WigldVkTtiztBKHlWWV
NLqVDrlBdRBhkP456uXXCd9Q0PYylFBUA4kuWKy3ReFZI5VwwvHCxiVn4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJW+Ox0WPMXN1BLSxo98AOoatTB5MB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvbGI0N0hSWTh4YzNVRXRMR2ozd0E2aHExTUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZAQMA0G
CSqGSIb3DQEBCwUAA4IBAQCaTTtxczOKnAhQSmqG3++ZpSWjlyZApP+vVbXxzHA8
bNCoPcL31xsUKMhFGy5Ehwqjni24GZefSmxATuwUO8m4Vifbt2soPqOyeai07knn
+pCco17pOCICF2k1Owj90kzdiydl2+6I3KBNpLqiQUSKGE2TRAAu3i9uc2nuM6dl
QfFwX8LuaeWK/XuFvq+DfYQ1q616XZykys0WZjTFKDamFYaLc1N3EAqhgWI3Y1my
4dTutTnrYSOU9R7KlyNZuY7uE8bTLmYaChTwxROuVLKskQ5luZZZ/zsUb0qomTTx
2cndiH2JeCOhfgPOvKjTcEGWKufT+mMPBPjk0IiBjTlK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:21 2025 by rpki-client