Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/b21GzIDHUoRy52uG-SNOV8mPlKk.roa
File: b21GzIDHUoRy52uG-SNOV8mPlKk.roa (raw, json)
Hash identifier: EmzOGZDdz/kPhUWywKSOdIcSlEUVB7UNNJ+def3KBko=
Subject key identifier: 6F:6D:46:CC:80:C7:52:84:72:E7:6B:86:F9:23:4E:57:C9:8F:94:A9
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 1138033A
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/b21GzIDHUoRy52uG-SNOV8mPlKk.roa
Signing time: Sat 01 Jan 2022 14:58:35 +0000
ROA not before: Sat 01 Jan 2022 14:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208130
IP address blocks: 45.155.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288883514 (0x1138033a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 1 14:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f6d46cc80c7528472e76b86f9234e57c98f94a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:d4:25:b7:da:49:b9:ca:2e:e7:70:bb:25:
e0:a0:a4:46:52:1f:30:31:da:30:34:c9:20:87:05:
7e:ca:b0:d6:a0:d0:6b:21:db:d6:a1:45:9e:f7:84:
ad:91:4e:75:19:ea:07:7e:5a:4d:00:8d:fb:f9:ab:
36:61:c2:bf:0c:1a:83:dc:15:96:58:90:4c:5b:c1:
02:9f:af:3e:c3:25:cf:89:13:1f:74:b8:f2:d9:1d:
46:57:91:71:5d:0e:4f:b0:26:0b:5f:64:95:30:37:
87:f0:4a:3a:77:b8:95:ae:32:31:57:65:64:9f:e7:
2f:2f:dc:23:76:74:a9:45:b5:45:93:d4:90:8d:a4:
b7:23:b4:62:42:be:4c:f9:54:8c:39:d6:a5:98:3b:
c4:4b:51:70:b0:3c:78:64:27:e0:19:f7:17:ef:d7:
9c:9d:49:f2:cc:03:39:c8:70:54:65:35:b9:ee:cd:
96:1c:14:0a:92:b3:a8:4e:b6:58:37:ae:33:41:b6:
8b:1e:5e:ac:0d:56:67:8b:92:19:29:a8:b7:42:35:
35:ab:84:e1:16:87:d9:39:ed:19:d7:28:14:64:25:
19:56:4e:73:4c:ad:5d:b1:ea:16:a3:b1:44:1a:7e:
f1:b5:72:67:0e:0b:11:c3:9d:60:90:e9:5a:9d:92:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6D:46:CC:80:C7:52:84:72:E7:6B:86:F9:23:4E:57:C9:8F:94:A9
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/b21GzIDHUoRy52uG-SNOV8mPlKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0f:a1:21:b7:36:a8:da:a2:5b:53:89:cf:3d:51:af:90:92:
ad:52:ed:3a:f0:80:b3:0f:c3:9d:ed:a8:cb:d1:57:8a:52:13:
8f:21:be:f2:2d:38:50:ba:35:1c:a0:ce:f3:03:0c:c5:44:89:
3c:bc:d4:5a:f0:07:47:52:a2:e4:c4:44:d8:e2:5d:7f:84:84:
9e:0c:41:fc:4f:97:3d:8e:d7:14:fe:6d:c2:e4:a3:ed:c9:05:
e3:ae:a4:79:6f:56:e2:95:3d:5b:ad:21:c5:62:85:b8:6a:62:
1e:20:40:a9:ac:13:02:61:7c:7c:f8:0c:b8:a0:07:3d:38:cb:
0b:0f:4f:8a:aa:da:04:8c:58:a2:69:ed:d5:db:32:6b:7c:2d:
96:fb:0f:d8:8e:a8:53:44:f9:4f:50:53:d6:ff:7b:bd:8b:19:
b8:53:a5:f2:83:9c:a2:c1:7d:98:72:f6:8e:1f:0b:d1:bf:74:
41:6e:bf:ec:84:c9:6b:ca:10:eb:5e:6a:96:3f:15:1b:1c:ca:
5f:52:61:88:39:f6:aa:6e:73:13:1a:a1:87:3b:0b:53:2c:ac:
0d:e0:dc:16:1e:45:de:26:1c:8f:6d:51:52:83:5c:e0:c4:f4:
35:07:c3:c8:12:51:8e:c4:6f:bc:e0:97:72:a6:8e:43:fa:5e:
c4:52:06:a5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEETgDOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NmU5MmMzNDFlNzY5NDQzZmRlMWQyNzU2NjA0NGI0YjY1MTU5MDYwMB4XDTIyMDEw
MTE0NTgzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY2ZDQ2Y2M4MGM3
NTI4NDcyZTc2Yjg2ZjkyMzRlNTdjOThmOTRhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJaV1CW32km5yi7ncLsl4KCkRlIfMDHaMDTJIIcFfsqw1qDQ
ayHb1qFFnveErZFOdRnqB35aTQCN+/mrNmHCvwwag9wVlliQTFvBAp+vPsMlz4kT
H3S48tkdRleRcV0OT7AmC19klTA3h/BKOne4la4yMVdlZJ/nLy/cI3Z0qUW1RZPU
kI2ktyO0YkK+TPlUjDnWpZg7xEtRcLA8eGQn4Bn3F+/XnJ1J8swDOchwVGU1ue7N
lhwUCpKzqE62WDeuM0G2ix5erA1WZ4uSGSmot0I1NauE4RaH2TntGdcoFGQlGVZO
c0ytXbHqFqOxRBp+8bVyZw4LEcOdYJDpWp2SBj0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRvbUbMgMdShHLna4b5I05XyY+UqTAfBgNVHSMEGDAWgBRm6Sw0HnaUQ/3h
0nVmBEtLZRWQYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1p1a3NOQjUybEVQOTRkSjFaZ1JMUzJVVmtHQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvOGYxOTY4LWE3OWEtNGEwNy1hY2U2LWMxZDI5NmY4ZmQwNy8x
L2IyMUd6SURIVW9SeTUydUctU05PVjhtUGxLay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
OGYxOTY4LWE3OWEtNGEwNy1hY2U2LWMxZDI5NmY4ZmQwNy8xL1p1a3NOQjUybEVQ
OTRkSjFaZ1JMUzJVVmtHQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2bFDANBgkqhkiG9w0BAQsFAAOC
AQEAsQ+hIbc2qNqiW1OJzz1Rr5CSrVLtOvCAsw/Dne2oy9FXilITjyG+8i04ULo1
HKDO8wMMxUSJPLzUWvAHR1Ki5MRE2OJdf4SEngxB/E+XPY7XFP5twuSj7ckF466k
eW9W4pU9W60hxWKFuGpiHiBAqawTAmF8fPgMuKAHPTjLCw9PiqraBIxYomnt1dsy
a3wtlvsP2I6oU0T5T1BT1v97vYsZuFOl8oOcosF9mHL2jh8L0b90QW6/7ITJa8oQ
615qlj8VGxzKX1JhiDn2qm5zExqhhzsLUyysDeDcFh5F3iYcj21RUoNc4MT0NQfD
yBJRjsRvvOCXcqaOQ/pexFIGpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:08 2025 by rpki-client