Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/_rvOq8_8L35c_sYhLQU_pcDYms4.roa
File: _rvOq8_8L35c_sYhLQU_pcDYms4.roa (raw, json)
Hash identifier: OTRS8e5UVxM5Qt4N2f2QzJBDAm3T2eX5Xt5B+U9/Iy4=
Subject key identifier: FE:BB:CE:AB:CF:FC:2F:7E:5C:FE:C6:21:2D:05:3F:A5:C0:D8:9A:CE
Certificate issuer: /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial: 018BE319CFFFEB4D0133E90B1091883549AC
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/_rvOq8_8L35c_sYhLQU_pcDYms4.roa
Signing time: Sat 18 Nov 2023 15:43:21 +0000
ROA not before: Sat 18 Nov 2023 15:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200254
IP address blocks: 45.131.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e3:19:cf:ff:eb:4d:01:33:e9:0b:10:91:88:35:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Validity
Not Before: Nov 18 15:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=febbceabcffc2f7e5cfec6212d053fa5c0d89ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:77:7e:9a:09:51:fd:8e:84:54:2e:e0:d5:
fb:9d:da:2b:f1:85:cf:9f:50:4e:c0:de:a2:c3:cf:
d4:0f:57:7c:9a:06:89:50:3b:32:d4:d7:20:fc:e2:
0a:22:60:66:39:06:95:a6:5c:ef:92:2a:ec:59:e1:
13:af:c2:f1:f4:13:0b:b9:b8:0c:fb:43:a1:de:02:
2e:2f:e7:b1:35:5e:5a:4c:7b:fd:95:7a:28:12:9e:
6a:a9:78:2e:ac:ae:ab:61:d8:4f:3f:21:9e:05:22:
21:9b:21:70:3e:5a:0e:4c:cb:bb:3f:a8:54:1f:84:
37:3c:a9:0e:69:c3:31:96:17:76:f3:2f:65:78:53:
c9:58:fb:1f:49:44:66:6e:00:67:47:a2:e5:b4:6d:
32:59:b8:14:94:ae:8b:40:4d:71:ae:20:69:94:c8:
82:e8:d3:d8:8f:b1:7a:5c:5d:81:9b:71:dc:86:b5:
18:52:65:98:dd:11:26:fe:e7:ee:ff:29:74:72:7c:
ef:2a:9d:ca:b4:ac:a3:8b:4e:e6:65:98:6c:a3:bc:
95:9a:3e:32:f7:d6:41:04:f6:35:07:4c:ef:88:87:
93:4c:c6:73:31:c9:2b:c6:7e:c6:b5:7e:a8:f5:6f:
f0:35:da:1e:c8:2b:0a:dd:f5:45:bb:6c:a8:1d:4c:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:CE:AB:CF:FC:2F:7E:5C:FE:C6:21:2D:05:3F:A5:C0:D8:9A:CE
X509v3 Authority Key Identifier:
keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/_rvOq8_8L35c_sYhLQU_pcDYms4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:8a:29:ab:95:27:41:92:ab:d3:e6:00:7b:20:f6:9b:57:0b:
87:c9:5a:01:ce:79:0b:ca:37:7e:d5:78:ea:6d:c3:fa:fd:3a:
89:95:98:54:cd:4a:b4:fa:09:52:1a:7b:54:97:18:ff:13:f9:
d8:4d:13:7c:a1:4f:d5:a7:0f:b9:b3:5f:93:f3:28:0e:d3:44:
db:1b:c5:c4:d8:90:9b:3a:53:fc:fc:0f:ce:1b:57:a5:e3:b3:
fe:1c:91:8c:20:70:21:10:3b:ec:8d:6a:f6:11:67:71:b7:e8:
04:c2:df:6a:45:c5:00:2b:7d:cd:b8:e5:e5:ae:fa:1d:6c:9b:
6c:84:62:30:a2:b0:72:8f:e0:4f:fc:da:71:88:80:b9:55:d6:
a1:56:6b:4a:23:34:57:0b:f8:0c:41:9e:c9:00:7d:8a:67:77:
ae:5a:77:76:40:4a:b0:39:e0:5e:b1:9d:86:4c:bc:80:79:4a:
ab:39:8c:b0:ae:07:a8:21:96:10:86:06:75:72:27:dd:45:b4:
b5:b4:c1:40:6d:d6:ec:d8:81:f2:a0:e6:a4:7b:03:fa:b2:1e:
60:c1:07:b7:4c:4c:d2:49:1e:6c:cd:5c:54:b8:0f:51:b4:22:
96:73:86:f2:17:d6:d7:1d:32:3a:cf:79:30:f0:ca:aa:81:aa:
9e:73:ac:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvjGc//600BM+kLEJGINUmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWU4OWMxM2Q2ZGU3M2E4OTQ0MDRiZjdlYWY5ZWU1ZTQw
ZGVhMzMwHhcNMjMxMTE4MTU0MzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWJiY2VhYmNmZmMyZjdlNWNmZWM2MjEyZDA1M2ZhNWMwZDg5YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFV3fpoJUf2OhFQu4NX7ndor8YXP
n1BOwN6iw8/UD1d8mgaJUDsy1Ncg/OIKImBmOQaVplzvkirsWeETr8Lx9BMLubgM
+0Oh3gIuL+exNV5aTHv9lXooEp5qqXgurK6rYdhPPyGeBSIhmyFwPloOTMu7P6hU
H4Q3PKkOacMxlhd28y9leFPJWPsfSURmbgBnR6LltG0yWbgUlK6LQE1xriBplMiC
6NPYj7F6XF2Bm3HchrUYUmWY3REm/ufu/yl0cnzvKp3KtKyji07mZZhso7yVmj4y
99ZBBPY1B0zviIeTTMZzMckrxn7GtX6o9W/wNdoeyCsK3fVFu2yoHUzwmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP67zqvP/C9+XP7GIS0FP6XA2JrOMB8GA1UdIwQY
MBaAFK3uicE9bec6iUQEv36vnuXkDeozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmU2SndUMXQ1enFKUkFTX2ZxLWU1ZVFONmpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMjlkOTYtZGE5ZS00N2EwLTlmYjEt
MTI0M2I0Njc5NWY4LzEvX3J2T3E4XzhMMzVjX3NZaExRVV9wY0RZbXM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMjlkOTYtZGE5ZS00N2EwLTlmYjEtMTI0M2I0Njc5NWY4
LzEvcmU2SndUMXQ1enFKUkFTX2ZxLWU1ZVFONmpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYMIMA0G
CSqGSIb3DQEBCwUAA4IBAQCciimrlSdBkqvT5gB7IPabVwuHyVoBznkLyjd+1Xjq
bcP6/TqJlZhUzUq0+glSGntUlxj/E/nYTRN8oU/Vpw+5s1+T8ygO00TbG8XE2JCb
OlP8/A/OG1el47P+HJGMIHAhEDvsjWr2EWdxt+gEwt9qRcUAK33NuOXlrvodbJts
hGIworByj+BP/NpxiIC5VdahVmtKIzRXC/gMQZ7JAH2KZ3euWnd2QEqwOeBesZ2G
TLyAeUqrOYywrgeoIZYQhgZ1cifdRbS1tMFAbdbs2IHyoOakewP6sh5gwQe3TEzS
SR5szVxUuA9RtCKWc4byF9bXHTI6z3kw8Mqqgaqec6ys
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:49:40 2025 by rpki-client