Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/4Io-LmY0YxeJOhcRXok6RvB0hHs.roa
File: 4Io-LmY0YxeJOhcRXok6RvB0hHs.roa (raw, json)
Hash identifier: m6a9iznPJXm23A47m4zODyuJZrnZXt0mxkz/7q8zQAM=
Subject key identifier: E0:8A:3E:2E:66:34:63:17:89:3A:17:11:5E:89:3A:46:F0:74:84:7B
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 07EFBF81
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/4Io-LmY0YxeJOhcRXok6RvB0hHs.roa
Signing time: Sat 01 Jan 2022 15:04:11 +0000
ROA not before: Sat 01 Jan 2022 15:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.93.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133152641 (0x7efbf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 1 15:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e08a3e2e66346317893a17115e893a46f074847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:d8:89:85:25:e0:ed:46:21:24:c5:f6:88:
1a:44:4a:b1:9d:9a:ca:d5:85:f2:7c:76:43:58:ff:
91:c0:35:8e:e8:a5:99:e0:00:18:b0:6e:2b:dc:6e:
2a:8f:5c:19:db:14:86:ef:0f:0b:fd:1d:0e:3a:e3:
7d:1c:9e:27:91:19:38:4b:73:f5:50:9e:bd:5a:67:
e6:d2:d0:1e:64:14:25:6e:71:bb:d9:7e:8e:f5:12:
2f:d8:ba:a3:12:c7:02:e3:b7:e3:dc:f5:1f:c3:79:
da:51:c6:ff:12:26:e3:19:e5:a0:5a:a7:37:65:56:
44:97:32:03:64:a4:3f:b3:07:22:99:ed:ba:53:ab:
c5:01:ff:c6:59:c1:3f:4c:83:96:60:f2:d9:65:02:
60:4b:5e:c6:e5:58:fe:8b:1d:6b:3c:f0:3c:ef:76:
c2:09:c0:d4:d5:34:92:0b:3b:49:a6:79:65:a5:c2:
fd:98:52:bd:c3:e2:70:b1:64:5e:f6:c6:56:7b:59:
2e:60:52:da:a2:2c:f3:20:bc:e2:3b:bc:1e:1c:b6:
23:6e:7e:74:63:b0:19:96:a0:4b:4e:e0:d0:e0:3a:
1a:87:f7:fc:c1:bb:ed:a3:fe:51:c7:8f:64:2e:df:
5e:8a:56:38:64:98:0c:61:4a:6a:16:2a:24:5f:da:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:3E:2E:66:34:63:17:89:3A:17:11:5E:89:3A:46:F0:74:84:7B
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/4Io-LmY0YxeJOhcRXok6RvB0hHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.188.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d7:a3:90:e0:12:c4:67:45:67:10:da:ed:9b:c7:03:4a:81:
6d:c7:24:8b:0b:14:22:3a:0f:ec:1f:8d:48:ee:5e:6b:2f:b9:
2b:9b:ec:90:c6:20:cb:a4:d2:70:78:fc:0f:f7:2b:ad:0e:a7:
49:26:f0:cb:8a:62:5f:d5:45:d0:61:9e:0e:69:29:22:16:17:
51:89:19:a1:2c:8c:22:aa:41:28:96:5d:e3:5f:55:2a:01:1b:
f6:b5:d2:52:91:c6:63:57:64:2d:8f:99:e1:fd:dc:ad:06:29:
9c:45:46:36:75:1d:ea:4c:f9:64:53:de:82:93:ed:de:40:15:
70:33:35:00:3f:99:3d:ee:ed:4b:b7:73:05:17:76:e2:55:37:
c7:ac:59:41:57:14:43:98:fb:a5:7d:0c:2b:fe:97:30:aa:dd:
d7:04:85:d0:83:cf:be:c2:40:6a:2a:8e:ab:c6:fb:e1:6e:86:
01:f1:da:de:95:e7:5d:7e:07:d7:2e:1b:77:2b:f9:ad:57:7d:
c2:8d:b3:11:83:d0:66:f6:c4:d6:78:fc:c6:47:0b:3b:41:53:
c4:6a:8d:e4:3d:9f:d5:34:53:0e:de:5b:7a:81:db:76:33:ab:
54:55:7b:fa:f6:cf:bc:1a:a8:4b:d7:eb:cb:53:c9:13:13:9d:
da:45:81:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB++/gTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjY5YzkyYmMwOWJmNmI4ZGE2NTMzZGQ3YTdiMGIxYTU3ZTY1ZWE0MB4XDTIyMDEw
MTE1MDQxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTA4YTNlMmU2NjM0
NjMxNzg5M2ExNzExNWU4OTNhNDZmMDc0ODQ3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpU2ImFJeDtRiEkxfaIGkRKsZ2aytWF8nx2Q1j/kcA1juil
meAAGLBuK9xuKo9cGdsUhu8PC/0dDjrjfRyeJ5EZOEtz9VCevVpn5tLQHmQUJW5x
u9l+jvUSL9i6oxLHAuO349z1H8N52lHG/xIm4xnloFqnN2VWRJcyA2SkP7MHIpnt
ulOrxQH/xlnBP0yDlmDy2WUCYEtexuVY/osdazzwPO92wgnA1NU0kgs7SaZ5ZaXC
/ZhSvcPicLFkXvbGVntZLmBS2qIs8yC84ju8Hhy2I25+dGOwGZagS07g0OA6Gof3
/MG77aP+UcePZC7fXopWOGSYDGFKahYqJF/a57ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgij4uZjRjF4k6FxFeiTpG8HSEezAfBgNVHSMEGDAWgBQrackrwJv2uNpl
M916ewsaV+ZepDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0sybkpLOENiOXJqYVpUUGRlbnNMR2xmbVhxUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWQvNWIzZmZlLTlmOWQtNDE4OS1hOGNhLTA4NGFhYmEwZjU4OC8x
LzRJby1MbVkwWXhlSk9oY1JYb2s2UnZCMGhIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQv
NWIzZmZlLTlmOWQtNDE4OS1hOGNhLTA4NGFhYmEwZjU4OC8xL0sybkpLOENiOXJq
YVpUUGRlbnNMR2xmbVhxUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1dvDANBgkqhkiG9w0BAQsFAAOC
AQEAKNejkOASxGdFZxDa7ZvHA0qBbcckiwsUIjoP7B+NSO5eay+5K5vskMYgy6TS
cHj8D/crrQ6nSSbwy4piX9VF0GGeDmkpIhYXUYkZoSyMIqpBKJZd419VKgEb9rXS
UpHGY1dkLY+Z4f3crQYpnEVGNnUd6kz5ZFPegpPt3kAVcDM1AD+ZPe7tS7dzBRd2
4lU3x6xZQVcUQ5j7pX0MK/6XMKrd1wSF0IPPvsJAaiqOq8b74W6GAfHa3pXnXX4H
1y4bdyv5rVd9wo2zEYPQZvbE1nj8xkcLO0FTxGqN5D2f1TRTDt5beoHbdjOrVFV7
+vbPvBqoS9fry1PJExOd2kWBnw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:58 2025 by rpki-client