Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/zAlJ-SKkDuvfbV_GDWlvcCX1jEg.roa
File: zAlJ-SKkDuvfbV_GDWlvcCX1jEg.roa (raw, json)
Hash identifier: /zWXJFMMYTZBcEo7eecKAh3IIS/nUryS0QwL6B2SAE4=
Subject key identifier: CC:09:49:F9:22:A4:0E:EB:DF:6D:5F:C6:0D:69:6F:70:25:F5:8C:48
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 04E7D548
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/zAlJ-SKkDuvfbV_GDWlvcCX1jEg.roa
Signing time: Sat 01 Jan 2022 05:58:37 +0000
ROA not before: Sat 01 Jan 2022 05:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200781
IP address blocks: 45.13.124.0/22 maxlen: 22
45.13.124.0/23 maxlen: 23
45.13.126.0/23 maxlen: 23
185.96.42.0/23 maxlen: 23
185.96.40.0/23 maxlen: 23
185.96.40.0/22 maxlen: 22
2a03:fd80::/32 maxlen: 32
2a03:fd80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82302280 (0x4e7d548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 1 05:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0949f922a40eebdf6d5fc60d696f7025f58c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:a3:25:30:da:f0:2a:06:10:8f:81:c3:2a:
1c:cd:68:60:06:69:f6:74:ed:c3:fd:83:72:d4:68:
5f:03:06:9d:be:c7:0e:e0:10:d1:7b:10:89:3c:46:
00:59:66:af:2c:40:8d:92:a0:75:16:47:c3:24:56:
43:b9:d5:d9:21:0e:ec:6c:39:af:d5:77:3d:2d:3f:
ae:c4:97:fc:5b:ca:df:18:14:1b:ec:f9:ba:c7:30:
18:46:3b:c1:24:15:27:7d:a7:98:6c:e4:24:49:15:
bd:38:a7:0e:d8:83:39:51:85:da:5c:20:ca:cf:26:
35:b1:ec:ca:5d:18:96:0b:c0:90:a1:23:58:a5:63:
b9:f9:c5:c5:60:d1:f3:4b:2d:61:68:e4:ba:d3:97:
2c:d9:03:34:96:db:24:69:fc:7f:08:70:c7:13:5c:
67:46:9f:9a:ee:9b:2a:04:9e:e2:3c:67:ed:fe:44:
48:f0:2b:ee:e7:22:91:62:f1:b4:b7:86:b8:23:c2:
39:45:43:c9:55:7c:e4:52:2c:28:5f:94:ac:ee:57:
42:6a:b8:68:e4:b8:16:7f:c0:3c:ad:fc:e4:40:8c:
34:43:11:40:ef:31:c0:2a:96:e3:f2:54:d7:2e:47:
6d:28:ab:a3:a4:65:f7:d4:57:7d:72:0d:87:ed:7a:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:49:F9:22:A4:0E:EB:DF:6D:5F:C6:0D:69:6F:70:25:F5:8C:48
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/zAlJ-SKkDuvfbV_GDWlvcCX1jEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
44:a7:5c:d6:76:5e:d6:ee:da:a6:09:fc:7f:a5:63:88:55:fd:
8b:84:dc:c1:89:7a:6a:ce:f3:1e:8b:a9:08:e1:28:66:90:3d:
ad:89:81:41:08:df:2b:00:c3:61:4d:eb:37:a1:7c:2e:a1:8a:
6a:5e:33:73:34:0c:8d:22:a5:19:5b:46:50:44:f5:ae:0f:d2:
15:d4:1f:84:d4:07:48:ea:a4:06:18:9e:34:91:01:68:d5:02:
13:f0:0f:66:f6:02:c9:d8:cf:af:64:a0:8f:2b:9c:ac:1d:30:
8e:3d:19:c0:12:23:eb:4b:d7:64:c1:32:65:1d:07:3f:e5:65:
43:ef:86:c2:89:53:e3:4d:f6:f5:40:5e:c9:9a:b4:45:d8:31:
53:9f:a4:d8:d0:66:8b:45:e2:82:aa:ff:95:2b:a6:02:87:5d:
1a:55:42:30:e1:48:76:cb:b5:9e:a8:3b:96:ec:20:bd:b5:97:
ab:c5:a2:a6:24:15:55:46:b8:b0:c6:82:9b:4e:4d:05:ee:be:
96:df:5c:dc:7b:89:01:1c:fb:dd:68:54:d3:64:0d:19:92:9a:
e2:51:e2:95:7e:a9:42:45:a0:00:62:f7:75:18:6f:35:47:6d:
e7:17:bf:5a:f8:e2:e8:d0:6e:21:53:07:50:29:51:99:47:59:
6e:9d:13:c2
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBOfVSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YzZlYWRiODY1OWJjNzM0ZGNjYjI5ZjYzODQyMTAzNmJiOTIyZTM2MB4XDTIyMDEw
MTA1NTgzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MwOTQ5ZjkyMmE0
MGVlYmRmNmQ1ZmM2MGQ2OTZmNzAyNWY1OGM0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7qoyUw2vAqBhCPgcMqHM1oYAZp9nTtw/2DctRoXwMGnb7H
DuAQ0XsQiTxGAFlmryxAjZKgdRZHwyRWQ7nV2SEO7Gw5r9V3PS0/rsSX/FvK3xgU
G+z5uscwGEY7wSQVJ32nmGzkJEkVvTinDtiDOVGF2lwgys8mNbHsyl0YlgvAkKEj
WKVjufnFxWDR80stYWjkutOXLNkDNJbbJGn8fwhwxxNcZ0afmu6bKgSe4jxn7f5E
SPAr7ucikWLxtLeGuCPCOUVDyVV85FIsKF+UrO5XQmq4aOS4Fn/APK385ECMNEMR
QO8xwCqW4/JU1y5HbSiro6Rl99RXfXINh+16HtMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTMCUn5IqQO699tX8YNaW9wJfWMSDAfBgNVHSMEGDAWgBSMbq24ZZvHNNzL
KfY4QhA2u5IuNjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pHNnR1R1dieHpUY3l5bjJPRUlRTnJ1U0xqWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvYmZkYmEwLTJjNjAtNDAyNy1hZjBkLTY2NDVkZDNkNjI0Yi8x
L3pBbEotU0trRHV2ZmJWX0dEV2x2Y0NYMWpFZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
YmZkYmEwLTJjNjAtNDAyNy1hZjBkLTY2NDVkZDNkNjI0Yi8xL2pHNnR1R1dieHpU
Y3l5bjJPRUlRTnJ1U0xqWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi0NfAMEArlgKDANBAIAAjAHAwUD
KgP9gDANBgkqhkiG9w0BAQsFAAOCAQEARKdc1nZe1u7apgn8f6VjiFX9i4TcwYl6
as7zHoupCOEoZpA9rYmBQQjfKwDDYU3rN6F8LqGKal4zczQMjSKlGVtGUET1rg/S
FdQfhNQHSOqkBhieNJEBaNUCE/APZvYCydjPr2SgjyucrB0wjj0ZwBIj60vXZMEy
ZR0HP+VlQ++GwolT40329UBeyZq0RdgxU5+k2NBmi0Xigqr/lSumAoddGlVCMOFI
dsu1nqg7luwgvbWXq8WipiQVVUa4sMaCm05NBe6+lt9c3HuJARz73WhU02QNGZKa
4lHilX6pQkWgAGL3dRhvNUdt5xe/Wvji6NBuIVMHUClRmUdZbp0Twg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:11:03 2025 by rpki-client