Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/oQg5gLraAB5iGXh4_hvjqmGkYM4.roa
File: oQg5gLraAB5iGXh4_hvjqmGkYM4.roa (raw, json)
Hash identifier: V2GZiDhJbdW7QX1PKee3zT82lH8bXfo1K1l3d0cx4Tw=
Subject key identifier: A1:08:39:80:BA:DA:00:1E:62:19:78:78:FE:1B:E3:AA:61:A4:60:CE
Certificate issuer: /CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Certificate serial: 04D12D32
Authority key identifier: 26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/oQg5gLraAB5iGXh4_hvjqmGkYM4.roa
Signing time: Sat 01 Jan 2022 12:01:05 +0000
ROA not before: Sat 01 Jan 2022 12:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 45.154.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80817458 (0x4d12d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Validity
Not Before: Jan 1 12:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1083980bada001e62197878fe1be3aa61a460ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:65:2e:c3:aa:1c:ad:cd:0f:ed:5f:25:a2:
47:f7:8c:db:7a:90:c8:85:b3:2d:b6:30:cb:e4:74:
d7:16:c2:f1:f1:77:52:5f:dc:03:f2:4c:33:a6:51:
15:ba:80:e7:3a:6d:2b:40:3f:d3:f8:19:1c:4b:57:
03:e6:7d:f0:fe:a2:bd:ca:48:9f:7e:c3:55:88:83:
a6:f0:8a:01:44:67:93:b1:d3:ae:96:e8:c4:a8:f1:
5b:5e:e1:3d:fe:a1:44:3f:55:b3:c8:72:99:e0:c6:
bb:3a:c9:4b:3d:d9:8c:9d:b0:0b:e2:8a:95:df:24:
c0:37:ba:40:27:1b:13:d7:c7:d5:78:ee:c0:f4:4d:
28:75:f1:07:bc:b4:e6:f3:75:ab:af:ff:c6:1f:a4:
70:93:66:83:53:3f:6f:61:a9:b7:6d:be:0b:5c:e8:
d7:0f:90:5a:7e:a1:43:85:bf:02:c9:4a:40:85:7f:
5e:e3:d0:40:85:9b:7a:76:76:85:d5:3f:ff:7d:57:
46:b0:24:fc:9e:e2:20:d9:29:38:6c:54:c3:3b:66:
99:ec:1e:e7:83:bf:16:b3:c4:fa:cd:2b:7b:5b:d0:
a7:8e:46:81:52:93:45:dd:29:11:9f:4c:3c:6b:e2:
3b:41:06:4e:60:ef:cf:ca:11:85:d9:e6:83:19:5e:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:39:80:BA:DA:00:1E:62:19:78:78:FE:1B:E3:AA:61:A4:60:CE
X509v3 Authority Key Identifier:
keyid:26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/oQg5gLraAB5iGXh4_hvjqmGkYM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.240.0/24
Signature Algorithm: sha256WithRSAEncryption
71:83:e6:f8:80:9c:0d:03:03:16:ec:83:b7:de:5c:bf:32:73:
57:12:21:02:31:9c:2a:ee:f8:dc:2e:c5:d5:52:e9:5a:12:4c:
5b:ff:e5:b1:7e:f8:8d:66:57:33:dd:4f:32:ee:5e:d4:e9:ad:
8d:bb:bd:eb:cf:be:c8:a1:13:18:d4:d8:42:68:fc:47:26:43:
17:3f:c8:b0:2d:0c:c7:d9:0a:27:20:21:21:d1:fc:0a:6f:c8:
07:93:51:a2:49:91:87:8a:a8:8c:8a:86:27:39:54:08:ed:1d:
b8:d5:a0:38:11:ff:1a:bc:13:a8:71:9e:8e:79:b6:e2:46:25:
ac:83:71:a2:9c:ab:4a:76:ff:1a:cb:a8:08:ec:81:04:a3:c9:
f3:bb:a2:81:24:ab:f7:1c:5e:dc:fe:87:36:5d:cb:df:55:63:
7f:2f:60:f0:42:34:f6:7f:6f:48:36:73:bc:33:e2:ce:de:ad:
c7:2f:13:b8:3d:8b:9a:6d:ec:d2:cd:e6:b7:91:c4:8f:1b:e1:
64:f4:24:38:79:8e:51:8a:0f:67:f9:46:c0:4d:b0:25:db:c5:
0c:0a:ed:05:de:96:22:ed:10:5a:02:13:16:d0:9e:4e:e2:11:
f7:57:85:11:4e:20:f3:42:09:a0:e8:b9:e2:43:c0:f6:f8:eb:
e5:66:35:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBNEtMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Njk1ODA3NzFjMWYxYjIyMjkyZDc3MWNkMTJmY2ZiYmY2MjFiYWYxMB4XDTIyMDEw
MTEyMDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTEwODM5ODBiYWRh
MDAxZTYyMTk3ODc4ZmUxYmUzYWE2MWE0NjBjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANlCZS7DqhytzQ/tXyWiR/eM23qQyIWzLbYwy+R01xbC8fF3
Ul/cA/JMM6ZRFbqA5zptK0A/0/gZHEtXA+Z98P6ivcpIn37DVYiDpvCKAURnk7HT
rpboxKjxW17hPf6hRD9Vs8hymeDGuzrJSz3ZjJ2wC+KKld8kwDe6QCcbE9fH1Xju
wPRNKHXxB7y05vN1q6//xh+kcJNmg1M/b2Gpt22+C1zo1w+QWn6hQ4W/AslKQIV/
XuPQQIWbenZ2hdU//31XRrAk/J7iINkpOGxUwztmmewe54O/FrPE+s0re1vQp45G
gVKTRd0pEZ9MPGviO0EGTmDvz8oRhdnmgxlepqUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBShCDmAutoAHmIZeHj+G+OqYaRgzjAfBgNVHSMEGDAWgBQmlYB3HB8bIikt
dxzRL8+79iG68TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pwV0FkeHdmR3lJcExYY2MwU19QdV9ZaHV2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvMWNmY2U2LTM1ZjUtNGM2ZS04ODJhLTZlYjE0ZTVkMGY4NS8x
L29RZzVnTHJhQUI1aUdYaDRfaHZqcW1Ha1lNNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
MWNmY2U2LTM1ZjUtNGM2ZS04ODJhLTZlYjE0ZTVkMGY4NS8xL0pwV0FkeHdmR3lJ
cExYY2MwU19QdV9ZaHV2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2a8DANBgkqhkiG9w0BAQsFAAOC
AQEAcYPm+ICcDQMDFuyDt95cvzJzVxIhAjGcKu743C7F1VLpWhJMW//lsX74jWZX
M91PMu5e1Omtjbu968++yKETGNTYQmj8RyZDFz/IsC0Mx9kKJyAhIdH8Cm/IB5NR
okmRh4qojIqGJzlUCO0duNWgOBH/GrwTqHGejnm24kYlrINxopyrSnb/GsuoCOyB
BKPJ87uigSSr9xxe3P6HNl3L31Vjfy9g8EI09n9vSDZzvDPizt6txy8TuD2Lmm3s
0s3mt5HEjxvhZPQkOHmOUYoPZ/lGwE2wJdvFDArtBd6WIu0QWgITFtCeTuIR91eF
EU4g80IJoOi54kPA9vjr5WY1qA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:31 2025 by rpki-client