Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fJOpHLAbA9ELCxEOc-zaM94AY6k.roa
File: fJOpHLAbA9ELCxEOc-zaM94AY6k.roa (raw, json)
Hash identifier: LpNOpro57CqwctuszyP6E9EVmm7Yr4fPsyrQhhEO17E=
Subject key identifier: 7C:93:A9:1C:B0:1B:03:D1:0B:0B:11:0E:73:EC:DA:33:DE:00:63:A9
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0183E72F2CEDEB63C514E15E17D0019E5739
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fJOpHLAbA9ELCxEOc-zaM94AY6k.roa
Signing time: Mon 17 Oct 2022 18:22:51 +0000
ROA not before: Mon 17 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48336
IP address blocks: 45.135.226.0/23 maxlen: 24
45.86.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:2f:2c:ed:eb:63:c5:14:e1:5e:17:d0:01:9e:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 17 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c93a91cb01b03d10b0b110e73ecda33de0063a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:9e:64:4f:cc:e9:9b:09:5c:be:15:df:a7:
0a:39:82:95:f2:ad:bd:31:aa:c4:b8:70:e4:23:fc:
cc:59:6b:76:4f:3d:36:07:d2:d8:7d:62:fb:cf:76:
da:e6:d7:35:ef:83:49:b1:12:d3:3e:06:eb:75:eb:
37:cd:04:c8:95:b9:22:2c:00:56:ed:21:74:eb:02:
8d:d7:9b:49:8b:bf:f0:b9:d0:2e:87:c7:8d:41:e7:
a3:05:78:c2:d1:b7:91:89:7b:b5:d9:7a:54:2d:20:
c0:5d:5b:a3:03:af:ae:e2:3b:64:b8:14:40:64:92:
3f:cb:5a:ab:f3:21:db:0b:ee:9c:a6:3a:7b:5e:07:
2f:c6:28:df:ca:a1:91:d9:80:05:37:4f:53:40:de:
78:19:66:68:72:74:25:e4:3f:f5:75:1f:08:18:cf:
b6:7b:b3:fd:50:02:b7:42:1e:e0:9a:57:d2:8d:50:
e0:31:84:12:80:52:d6:55:e4:ee:7d:a2:ca:c2:81:
51:84:a5:70:28:66:5c:c9:b7:d5:94:cb:0a:a9:1c:
2c:54:e3:0d:ee:9a:26:30:da:0b:93:b7:ef:30:97:
aa:75:b4:6a:83:83:e8:01:64:db:75:0f:9f:3e:c6:
39:4a:ed:3e:fb:26:7a:73:71:5c:3f:11:66:5f:d5:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:A9:1C:B0:1B:03:D1:0B:0B:11:0E:73:EC:DA:33:DE:00:63:A9
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fJOpHLAbA9ELCxEOc-zaM94AY6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.240.0/24
45.135.226.0/23
Signature Algorithm: sha256WithRSAEncryption
34:38:70:36:f2:a1:e3:ad:c5:65:39:4f:74:03:38:2d:d9:30:
7e:b3:a8:42:28:38:8c:7d:be:c1:b6:e7:16:7c:ee:b5:3d:53:
cd:bb:74:ba:61:70:8b:ad:f4:18:4c:92:b8:e0:01:54:00:b6:
91:e5:0a:4b:ba:dd:b2:d8:a2:8e:68:60:9b:4a:e6:07:59:d9:
68:62:74:46:09:45:15:b6:dc:2c:e7:ae:5f:86:14:83:46:49:
3c:9f:5c:ec:b4:76:99:c5:87:18:d4:39:29:14:3b:bb:80:73:
2c:fd:b3:e7:28:f5:a0:47:b1:bc:e1:c0:df:23:c7:6d:73:3a:
7a:ac:97:ec:fb:48:82:74:cf:8d:f8:f6:ef:0a:37:8d:4d:dd:
5b:34:6f:2f:31:e0:83:95:3d:c5:2b:ef:d2:0c:83:ca:8f:9d:
84:83:c1:1b:35:f7:2f:ec:27:b7:ae:ec:72:b9:a3:da:13:03:
70:f1:17:ca:8d:55:02:67:4d:3a:ea:0f:63:7a:3f:aa:66:ae:
6d:e4:43:36:60:a8:58:83:76:9e:50:e5:bd:40:41:a5:13:2a:
8e:ed:4c:53:1b:3e:d9:e3:f4:e5:38:50:3e:23:5f:32:e5:52:
d8:3c:e2:a7:a5:88:a6:ec:4a:c4:bb:eb:be:40:41:bb:7f:04:
a9:c3:6f:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPnLyzt62PFFOFeF9ABnlc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjIxMDE3MTgyMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzkzYTkxY2IwMWIwM2QxMGIwYjExMGU3M2VjZGEzM2RlMDA2M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulieZE/M6ZsJXL4V36cKOYKV8q29
MarEuHDkI/zMWWt2Tz02B9LYfWL7z3ba5tc174NJsRLTPgbrdes3zQTIlbkiLABW
7SF06wKN15tJi7/wudAuh8eNQeejBXjC0beRiXu12XpULSDAXVujA6+u4jtkuBRA
ZJI/y1qr8yHbC+6cpjp7XgcvxijfyqGR2YAFN09TQN54GWZocnQl5D/1dR8IGM+2
e7P9UAK3Qh7gmlfSjVDgMYQSgFLWVeTufaLKwoFRhKVwKGZcybfVlMsKqRwsVOMN
7pomMNoLk7fvMJeqdbRqg4PoAWTbdQ+fPsY5Su0++yZ6c3FcPxFmX9URwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHyTqRywGwPRCwsRDnPs2jPeAGOpMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvZkpPcEhMQWJBOUVMQ3hFT2MtemFNOTRBWTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVbwAwQB
LYfiMA0GCSqGSIb3DQEBCwUAA4IBAQA0OHA28qHjrcVlOU90Azgt2TB+s6hCKDiM
fb7BtucWfO61PVPNu3S6YXCLrfQYTJK44AFUALaR5QpLut2y2KKOaGCbSuYHWdlo
YnRGCUUVttws565fhhSDRkk8n1zstHaZxYcY1DkpFDu7gHMs/bPnKPWgR7G84cDf
I8dtczp6rJfs+0iCdM+N+PbvCjeNTd1bNG8vMeCDlT3FK+/SDIPKj52Eg8EbNfcv
7Ce3ruxyuaPaEwNw8RfKjVUCZ0066g9jej+qZq5t5EM2YKhYg3aeUOW9QEGlEyqO
7UxTGz7Z4/TlOFA+I18y5VLYPOKnpYim7ErEu+u+QEG7fwSpw2+H
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:16 2025 by rpki-client