Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/9Sc_oMzN98wm6uHnNy_bR8NWA_M.roa
File: 9Sc_oMzN98wm6uHnNy_bR8NWA_M.roa (raw, json)
Hash identifier: ekHc0C7W821K35CZPf4dU7NfBEsAlxnG52MCazYX9jU=
Subject key identifier: F5:27:3F:A0:CC:CD:F7:CC:26:EA:E1:E7:37:2F:DB:47:C3:56:03:F3
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 018452D83064ABA95DB290D32B2DFBFB2F5E
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/9Sc_oMzN98wm6uHnNy_bR8NWA_M.roa
Signing time: Mon 07 Nov 2022 16:06:50 +0000
ROA not before: Mon 07 Nov 2022 16:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212816
IP address blocks: 45.136.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:d8:30:64:ab:a9:5d:b2:90:d3:2b:2d:fb:fb:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Nov 7 16:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5273fa0cccdf7cc26eae1e7372fdb47c35603f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:d2:36:06:6f:85:a4:19:f6:b5:f0:e5:c3:
e8:9b:84:95:65:65:e9:9e:d0:2e:dc:f6:10:34:f6:
af:d9:57:8e:74:a5:e9:b5:7d:c1:ea:6a:79:b0:06:
bf:0a:8d:cc:a4:bf:d1:98:2f:a2:2e:b3:65:41:62:
bb:2a:34:6c:0d:c6:ef:57:85:cc:87:90:fc:30:f8:
4a:cf:9c:46:96:20:50:4c:cf:e9:df:1c:dc:ad:d2:
d4:b6:3d:7d:d0:ed:c5:b2:59:3f:76:17:18:68:1b:
40:2a:8f:30:99:41:92:6f:72:6d:50:b3:91:a1:92:
39:51:81:87:26:10:fe:68:31:68:b2:11:40:85:b9:
ff:d2:f5:fa:b1:39:7e:ff:1b:11:ee:c9:31:7c:7f:
50:29:67:52:1a:33:0f:39:da:4f:aa:e1:64:c3:ce:
92:5c:55:26:60:a4:c5:1c:27:1f:f4:a9:4b:04:ca:
a8:56:6a:62:9d:1c:2c:d4:b6:83:6f:5d:f2:72:8e:
c8:86:e1:9d:6d:a2:d5:5b:1c:fa:57:ff:4b:a6:0e:
fb:4b:52:34:ba:95:77:78:27:7e:02:ec:5e:83:d4:
92:be:fd:bb:02:ce:b2:b5:28:a9:ee:7f:f3:cf:36:
ae:ae:7a:5d:c9:84:ab:78:6b:25:3d:67:53:1b:75:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:3F:A0:CC:CD:F7:CC:26:EA:E1:E7:37:2F:DB:47:C3:56:03:F3
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/9Sc_oMzN98wm6uHnNy_bR8NWA_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:39:65:bd:43:d8:26:71:14:9f:b7:75:19:dd:30:3e:8b:4d:
43:55:43:5c:fc:ba:a7:30:73:64:b3:10:6a:9c:a7:d9:14:9f:
6d:3c:3b:2d:99:cf:37:5c:8e:ef:6a:73:ae:da:a0:98:86:65:
69:f6:8b:30:62:0e:18:57:7d:44:0d:bc:23:01:ec:bd:7f:50:
6c:0b:a6:40:fa:03:cd:33:e6:0b:d1:df:06:6f:94:3d:af:b2:
c8:b2:ac:96:0b:00:aa:c7:6c:6e:19:96:4a:ca:93:b7:b7:b5:
14:50:57:4f:09:a7:ae:e5:f0:ad:34:1e:9d:b5:55:e5:a6:a0:
c6:bd:16:07:39:bc:24:68:b0:65:df:c2:35:2f:5b:a0:0b:fb:
aa:2a:40:be:89:e0:c2:bc:5a:2b:1c:28:10:dd:c0:df:52:95:
d8:5c:e6:fc:b7:0a:b6:55:38:09:c3:bf:02:b1:0f:b7:14:a8:
92:59:34:b1:2c:44:71:49:c1:2e:b1:eb:f4:01:d3:3f:fb:76:
d3:0b:71:66:ae:71:99:e9:87:0a:2d:8a:af:99:fa:15:89:ac:
2d:d0:35:60:ed:50:2c:9a:07:f1:9a:b7:0b:d8:c6:9f:0b:d7:
c9:35:59:71:ab:05:8e:38:fd:8f:a4:ad:6b:f0:96:50:65:6c:
65:36:8e:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRS2DBkq6ldspDTKy37+y9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5
ZGM4ZTIwHhcNMjIxMTA3MTYwNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTI3M2ZhMGNjY2RmN2NjMjZlYWUxZTczNzJmZGI0N2MzNTYwM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHrSNgZvhaQZ9rXw5cPom4SVZWXp
ntAu3PYQNPav2VeOdKXptX3B6mp5sAa/Co3MpL/RmC+iLrNlQWK7KjRsDcbvV4XM
h5D8MPhKz5xGliBQTM/p3xzcrdLUtj190O3Fslk/dhcYaBtAKo8wmUGSb3JtULOR
oZI5UYGHJhD+aDFoshFAhbn/0vX6sTl+/xsR7skxfH9QKWdSGjMPOdpPquFkw86S
XFUmYKTFHCcf9KlLBMqoVmpinRws1LaDb13yco7IhuGdbaLVWxz6V/9Lpg77S1I0
upV3eCd+Auxeg9SSvv27As6ytSip7n/zzzaurnpdyYSreGslPWdTG3V37wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUnP6DMzffMJurh5zcv20fDVgPzMB8GA1UdIwQY
MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt
ZmE3OTg4YjcxNGJjLzEvOVNjX29Nek45OHdtNnVIbk55X2JSOE5XQV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj
LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYgoMA0G
CSqGSIb3DQEBCwUAA4IBAQALOWW9Q9gmcRSft3UZ3TA+i01DVUNc/LqnMHNksxBq
nKfZFJ9tPDstmc83XI7vanOu2qCYhmVp9oswYg4YV31EDbwjAey9f1BsC6ZA+gPN
M+YL0d8Gb5Q9r7LIsqyWCwCqx2xuGZZKypO3t7UUUFdPCaeu5fCtNB6dtVXlpqDG
vRYHObwkaLBl38I1L1ugC/uqKkC+ieDCvForHCgQ3cDfUpXYXOb8twq2VTgJw78C
sQ+3FKiSWTSxLERxScEusev0AdM/+3bTC3FmrnGZ6YcKLYqvmfoViawt0DVg7VAs
mgfxmrcL2MafC9fJNVlxqwWOOP2PpK1r8JZQZWxlNo7b
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:25 2025 by rpki-client