Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/Ufxwg6LQHl4nDfpg8tY5OhgTKD8.roa
File: Ufxwg6LQHl4nDfpg8tY5OhgTKD8.roa (raw, json)
Hash identifier: pkixVoedBhX0XeAVRTlEKiqEcq4vsjV0t7BCILdxYHo=
Subject key identifier: 51:FC:70:83:A2:D0:1E:5E:27:0D:FA:60:F2:D6:39:3A:18:13:28:3F
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01856F42C3FB527333F4612B5AD85B3251A8
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/Ufxwg6LQHl4nDfpg8tY5OhgTKD8.roa
Signing time: Sun 01 Jan 2023 21:35:24 +0000
ROA not before: Sun 01 Jan 2023 21:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8749
IP address blocks: 45.140.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c3:fb:52:73:33:f4:61:2b:5a:d8:5b:32:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jan 1 21:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51fc7083a2d01e5e270dfa60f2d6393a1813283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:5b:e1:cc:b5:ab:39:3a:8d:ca:ff:33:74:
f1:58:c2:8b:c3:41:64:67:4f:e5:8a:b2:c8:d9:20:
a7:0b:b0:bb:5f:0f:e1:e0:10:21:48:a4:fd:ad:dc:
e0:7d:0b:c4:8a:5e:60:5e:16:01:be:e2:d9:fb:a1:
72:db:e1:4a:12:16:56:a3:1a:8a:ed:63:4f:3f:d8:
fd:aa:57:4a:5f:e1:04:f7:a8:4e:98:bd:7f:bc:9d:
a1:ba:f7:bb:84:54:24:91:a7:38:2f:a0:de:13:9a:
19:28:7b:7c:c6:99:db:09:12:70:a4:1b:66:05:f0:
63:68:5c:fb:1c:33:f4:04:3e:a9:db:f2:03:b0:66:
b9:96:bc:f1:ef:d3:d5:58:67:5e:67:7a:12:60:88:
eb:25:f4:10:1d:63:76:67:72:8a:84:c9:53:7e:b3:
5c:7d:75:4c:3c:a5:45:18:2f:d3:82:77:8b:d9:ec:
0d:6d:ac:50:79:05:19:4e:be:1d:16:23:d6:75:9f:
dc:fd:49:fd:fb:5f:8d:8b:2e:9a:36:71:fc:1e:10:
ba:81:56:96:52:5a:98:06:4d:59:85:3a:f5:26:ff:
9d:ce:ad:ea:6f:45:8e:b9:00:7d:b3:35:58:a7:67:
0d:7d:5c:d7:03:07:12:22:ae:e2:66:fa:1f:ca:38:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:70:83:A2:D0:1E:5E:27:0D:FA:60:F2:D6:39:3A:18:13:28:3F
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/Ufxwg6LQHl4nDfpg8tY5OhgTKD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:03:49:7b:ab:2e:69:d1:ad:f5:3f:80:67:b8:00:b0:33:6a:
e9:2c:22:cd:cb:1f:46:69:27:ee:ee:b4:a1:22:56:8e:52:13:
fe:db:05:94:8e:a5:49:0f:12:e6:70:a3:15:0e:05:45:88:9a:
ef:e8:23:82:a0:67:74:da:c5:1d:28:1b:c5:90:b0:a4:ec:82:
a4:62:5a:1c:17:89:97:07:5f:4c:fd:a3:0f:ce:88:a6:ff:7e:
82:d2:42:01:5f:fc:6d:b3:19:d2:3b:ba:a6:9b:03:f5:38:7a:
e6:1a:1b:06:8f:90:20:de:55:a4:6d:36:1b:b6:f0:54:36:0f:
95:98:44:b2:3b:14:7e:8d:b3:6f:be:7d:3c:c5:60:dc:12:74:
4f:f1:5e:44:69:53:c1:aa:f1:a6:7c:4a:3a:02:93:3e:ae:d4:
f8:e2:54:8a:9c:eb:4a:de:d7:e9:9b:a1:9f:2d:a7:61:c3:d2:
58:7c:c0:44:36:d8:31:26:af:9f:b5:4e:d8:1a:87:62:20:52:
87:87:1c:38:6d:4b:55:18:e3:6d:f8:54:38:39:fd:43:b4:f3:
3d:1d:7c:7c:23:0a:ff:6d:52:2f:ab:ab:c8:9d:f4:15:33:be:
f3:6f:b5:2e:f2:7c:19:f7:8a:5d:d1:6c:5f:29:4a:07:e6:76:
2d:f9:aa:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQsP7UnMz9GErWthbMlGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli
M2E4Y2EwHhcNMjMwMTAxMjEzNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWZjNzA4M2EyZDAxZTVlMjcwZGZhNjBmMmQ2MzkzYTE4MTMyODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtb4cy1qzk6jcr/M3TxWMKLw0Fk
Z0/lirLI2SCnC7C7Xw/h4BAhSKT9rdzgfQvEil5gXhYBvuLZ+6Fy2+FKEhZWoxqK
7WNPP9j9qldKX+EE96hOmL1/vJ2huve7hFQkkac4L6DeE5oZKHt8xpnbCRJwpBtm
BfBjaFz7HDP0BD6p2/IDsGa5lrzx79PVWGdeZ3oSYIjrJfQQHWN2Z3KKhMlTfrNc
fXVMPKVFGC/TgneL2ewNbaxQeQUZTr4dFiPWdZ/c/Un9+1+Niy6aNnH8HhC6gVaW
UlqYBk1ZhTr1Jv+dzq3qb0WOuQB9szVYp2cNfVzXAwcSIq7iZvofyjgrVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFH8cIOi0B5eJw36YPLWOToYEyg/MB8GA1UdIwQY
MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt
NWNiYzYzNmJkN2U3LzEvVWZ4d2c2TFFIbDRuRGZwZzh0WTVPaGdUS0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3
LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYxcMA0G
CSqGSIb3DQEBCwUAA4IBAQB7A0l7qy5p0a31P4BnuACwM2rpLCLNyx9GaSfu7rSh
IlaOUhP+2wWUjqVJDxLmcKMVDgVFiJrv6COCoGd02sUdKBvFkLCk7IKkYlocF4mX
B19M/aMPzoim/36C0kIBX/xtsxnSO7qmmwP1OHrmGhsGj5Ag3lWkbTYbtvBUNg+V
mESyOxR+jbNvvn08xWDcEnRP8V5EaVPBqvGmfEo6ApM+rtT44lSKnOtK3tfpm6Gf
Ladhw9JYfMBENtgxJq+ftU7YGodiIFKHhxw4bUtVGONt+FQ4Of1DtPM9HXx8Iwr/
bVIvq6vInfQVM77zb7Uu8nwZ94pd0WxfKUoH5nYt+aod
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:20:57 2025 by rpki-client