Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WrO9zyawbXISY7elGpUP8NU_VxI.roa
File: WrO9zyawbXISY7elGpUP8NU_VxI.roa (raw, json)
Hash identifier: A18g09DU+ONiz2PpLWCqM23lCCl2pf+CZLeO2IiNN1E=
Subject key identifier: 5A:B3:BD:CF:26:B0:6D:72:12:63:B7:A5:1A:95:0F:F0:D5:3F:57:12
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 397ABE54
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WrO9zyawbXISY7elGpUP8NU_VxI.roa
Signing time: Mon 20 Jun 2022 11:45:45 +0000
ROA not before: Mon 20 Jun 2022 11:45:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204666
IP address blocks: 45.153.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964345428 (0x397abe54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jun 20 11:45:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ab3bdcf26b06d721263b7a51a950ff0d53f5712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:4e:00:4b:73:87:c5:7b:89:ad:04:0c:04:
dc:39:07:ae:d6:9c:29:bb:55:1f:83:66:49:42:ed:
e9:70:a1:b4:b2:59:9a:d2:47:62:2a:9e:aa:8e:b7:
27:3a:a5:6d:38:6b:58:d6:e3:7d:4b:e6:c4:c0:c9:
ab:c7:4b:88:26:08:d6:62:9a:00:5b:07:8d:57:f8:
19:ad:c8:f8:dc:25:3a:e4:02:9a:76:4f:ea:38:42:
fb:41:b8:9c:1b:34:7a:eb:38:a9:8c:53:f5:aa:dc:
e0:ef:cc:7b:9b:5d:72:89:64:bd:7f:b7:59:62:3b:
19:9b:d6:2d:c4:9b:8c:73:00:ce:1c:38:11:8e:90:
a1:c8:ac:ca:c4:40:9b:1f:0d:19:f5:0d:fd:9f:a3:
1b:88:77:51:ae:eb:67:29:ca:aa:24:bc:64:05:bf:
c1:3a:f2:1b:50:56:cb:44:32:2c:38:54:d3:a5:f3:
e6:dd:72:32:06:04:70:19:30:65:20:da:6e:38:77:
55:6e:a0:a3:12:eb:bf:f1:ff:12:c8:e2:69:5f:a9:
30:cb:5f:d7:24:81:9b:2e:ea:3b:08:5c:c8:73:a3:
85:97:a3:a9:f6:79:3d:1a:f3:91:9d:e9:ca:d6:4b:
70:76:a9:80:aa:a0:d9:e7:4c:44:c0:6d:fc:97:fe:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:BD:CF:26:B0:6D:72:12:63:B7:A5:1A:95:0F:F0:D5:3F:57:12
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WrO9zyawbXISY7elGpUP8NU_VxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d5:6d:1b:44:05:65:81:fb:82:94:45:09:4f:da:5d:fc:48:
4f:43:28:ff:16:52:41:e7:fb:95:8d:43:52:3a:c4:5a:ea:f0:
d8:ae:bc:31:82:d6:e6:e3:f7:96:ba:ed:70:43:33:10:d6:a7:
ed:88:ac:82:d9:e9:f3:39:cb:77:25:c2:71:0d:1d:92:c7:8e:
21:f8:e0:fc:b4:e3:2b:3b:e2:02:99:80:da:c7:53:9a:10:dc:
01:f8:ac:84:db:2a:6a:43:bd:a6:c8:66:11:17:50:3b:52:95:
39:19:ed:22:47:fc:fb:82:ff:f9:05:51:43:5e:fa:f0:d1:f8:
b6:88:9f:5f:c0:0a:4e:c0:db:58:b6:72:80:63:0e:4d:67:dd:
a7:92:8e:54:4d:28:eb:67:2d:bb:21:c5:d7:da:9b:83:f4:25:
41:18:bf:32:64:05:d7:55:a7:55:2f:85:da:d5:65:9c:18:48:
89:f1:43:83:7d:0e:64:d3:1d:0f:7f:dd:c0:a1:96:1b:65:4f:
e8:38:88:88:50:c4:f6:ec:5f:55:15:b4:43:13:18:1d:bf:c6:
16:7a:b5:02:bf:82:5b:60:00:63:10:95:73:63:b0:e1:9b:30:
a3:2b:b8:d0:99:28:c7:34:23:27:00:7f:ae:47:85:75:43:97:
84:9d:13:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOXq+VDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTlmMGY1ZmY2MjBlMGRiNTMxMWY2NDczNjkwOTk3M2FjNjBmNmYzMB4XDTIyMDYy
MDExNDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWFiM2JkY2YyNmIw
NmQ3MjEyNjNiN2E1MWE5NTBmZjBkNTNmNTcxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN2JTgBLc4fFe4mtBAwE3DkHrtacKbtVH4NmSULt6XChtLJZ
mtJHYiqeqo63JzqlbThrWNbjfUvmxMDJq8dLiCYI1mKaAFsHjVf4Ga3I+NwlOuQC
mnZP6jhC+0G4nBs0eus4qYxT9arc4O/Me5tdcolkvX+3WWI7GZvWLcSbjHMAzhw4
EY6QocisysRAmx8NGfUN/Z+jG4h3Ua7rZynKqiS8ZAW/wTryG1BWy0QyLDhU06Xz
5t1yMgYEcBkwZSDabjh3VW6goxLrv/H/EsjiaV+pMMtf1ySBmy7qOwhcyHOjhZej
qfZ5PRrzkZ3pytZLcHapgKqg2edMRMBt/Jf+cu8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRas73PJrBtchJjt6UalQ/w1T9XEjAfBgNVHSMEGDAWgBQ1nw9f9iDg21MR
9kc2kJlzrGD28zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05aOFBYX1lnNE50VEVmWkhOcENaYzZ4Zzl2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWEvNDBkOWE1LTI1NjYtNDllMS1hNTdiLWQxYWJmNGVlMzJjYi8x
L1dyTzl6eWF3YlhJU1k3ZWxHcFVQOE5VX1Z4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEv
NDBkOWE1LTI1NjYtNDllMS1hNTdiLWQxYWJmNGVlMzJjYi8xL05aOFBYX1lnNE50
VEVmWkhOcENaYzZ4Zzl2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2ZwDANBgkqhkiG9w0BAQsFAAOC
AQEAHtVtG0QFZYH7gpRFCU/aXfxIT0Mo/xZSQef7lY1DUjrEWurw2K68MYLW5uP3
lrrtcEMzENan7Yisgtnp8znLdyXCcQ0dkseOIfjg/LTjKzviApmA2sdTmhDcAfis
hNsqakO9pshmERdQO1KVORntIkf8+4L/+QVRQ1768NH4toifX8AKTsDbWLZygGMO
TWfdp5KOVE0o62ctuyHF19qbg/QlQRi/MmQF11WnVS+F2tVlnBhIifFDg30OZNMd
D3/dwKGWG2VP6DiIiFDE9uxfVRW0QxMYHb/GFnq1Ar+CW2AAYxCVc2Ow4Zswoyu4
0JkoxzQjJwB/rkeFdUOXhJ0T7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:23 2025 by rpki-client