Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ux7fqPw1EOlwISA3sLMjvmADAbs.roa
File: ux7fqPw1EOlwISA3sLMjvmADAbs.roa (raw, json)
Hash identifier: 1d/9CNNUv/8I9eA/oUk6Gkh1SndBvARnhiK/ZcFUOCM=
Subject key identifier: BB:1E:DF:A8:FC:35:10:E9:70:21:20:37:B0:B3:23:BE:60:03:01:BB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01825EE5A6E1A57D92A9F5FDF76A2AF6B9FC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ux7fqPw1EOlwISA3sLMjvmADAbs.roa
Signing time: Tue 02 Aug 2022 14:11:24 +0000
ROA not before: Tue 02 Aug 2022 14:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
45.83.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:e5:a6:e1:a5:7d:92:a9:f5:fd:f7:6a:2a:f6:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 2 14:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb1edfa8fc3510e970212037b0b323be600301bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:a5:6e:6a:34:44:fd:75:e2:d9:97:fd:94:
3b:6f:8d:b3:f4:ac:33:d3:e6:26:fe:01:ea:cf:4e:
19:03:8b:77:d2:7d:45:4c:6b:b7:6d:10:74:cf:d8:
29:3b:cf:f2:24:97:51:bd:e1:68:44:63:16:9e:79:
1b:87:92:f0:3d:11:26:b5:73:ed:4f:e9:30:97:d4:
5b:df:d5:73:45:4b:6d:6d:ff:a6:ab:5f:26:f2:17:
fb:b7:00:34:59:d6:c7:ad:10:1f:29:d6:b5:5d:5b:
55:4f:4f:f0:ad:5f:f4:aa:82:35:68:ea:29:de:d3:
1c:f4:76:5c:61:64:16:a3:78:38:8e:f6:3a:41:c4:
0f:3e:6a:1c:1b:ed:59:e0:76:18:10:47:c1:6d:cf:
ef:76:17:b6:94:36:d0:b4:7d:a0:6f:37:c5:c4:2b:
b1:6b:18:82:63:e6:a9:31:e1:5f:85:d4:15:66:63:
af:23:33:ed:e0:01:b9:df:f1:5f:a2:58:95:98:69:
b7:4c:02:31:28:ea:b2:a1:22:0f:d2:58:8e:7a:1f:
20:f2:02:86:43:09:9e:03:03:3a:4e:2d:93:b2:b5:
1d:94:fb:26:81:dd:64:93:61:b0:65:29:62:d3:87:
dc:ce:95:5d:c5:f0:85:5e:04:47:d6:8a:cc:0d:5a:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:DF:A8:FC:35:10:E9:70:21:20:37:B0:B3:23:BE:60:03:01:BB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ux7fqPw1EOlwISA3sLMjvmADAbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.140.0/24
45.15.184.0/24
45.83.141.0/24
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:54:a6:c6:67:ff:88:24:4e:56:c2:fc:3a:3d:13:b0:bd:c0:
1a:20:ec:87:07:e6:d5:8a:21:96:19:e0:c1:61:89:e4:87:fa:
ce:18:76:1b:94:fb:e9:03:e1:0d:1b:08:88:32:a6:f8:2a:4d:
89:a8:c3:ec:9e:80:41:c6:5e:2c:21:57:8d:4b:73:ba:91:4e:
13:e1:91:44:fc:66:cb:98:5a:d3:29:15:07:05:a4:f5:2e:68:
36:dd:22:4d:f1:c8:7d:ef:b2:06:b5:bf:b9:55:f7:b3:eb:31:
90:ab:e0:91:03:83:10:3f:25:db:53:a9:42:5e:12:9b:ec:d7:
76:2f:48:dc:4a:40:84:fa:83:3c:3f:5f:86:5e:c9:d3:09:53:
72:0a:ff:7f:71:ae:a9:4a:78:a0:96:90:37:42:bd:7e:bb:95:
3f:cb:c7:7c:bf:6c:1e:24:64:44:5a:2c:d2:2c:76:60:89:82:
ad:11:41:d4:2d:1d:4d:73:27:ab:86:ed:94:83:67:bd:3e:68:
4f:2b:3e:ac:51:cc:e8:7c:de:37:e3:d9:de:2f:bc:db:d7:02:
d8:c9:a4:6f:82:14:5b:29:bd:51:17:a9:78:26:61:56:d4:d3:
87:e7:2e:f5:39:7e:d7:e1:0d:14:59:b4:84:f0:a3:40:fb:98:
4d:5b:02:e9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYJe5abhpX2SqfX992oq9rn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIwODAyMTQxMTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjFlZGZhOGZjMzUxMGU5NzAyMTIwMzdiMGIzMjNiZTYwMDMwMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6POlbmo0RP114tmX/ZQ7b42z9Kwz
0+Ym/gHqz04ZA4t30n1FTGu3bRB0z9gpO8/yJJdRveFoRGMWnnkbh5LwPREmtXPt
T+kwl9Rb39VzRUttbf+mq18m8hf7twA0WdbHrRAfKda1XVtVT0/wrV/0qoI1aOop
3tMc9HZcYWQWo3g4jvY6QcQPPmocG+1Z4HYYEEfBbc/vdhe2lDbQtH2gbzfFxCux
axiCY+apMeFfhdQVZmOvIzPt4AG53/FfoliVmGm3TAIxKOqyoSIP0liOeh8g8gKG
QwmeAwM6Ti2TsrUdlPsmgd1kk2GwZSli04fczpVdxfCFXgRH1orMDVo2nwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLse36j8NRDpcCEgN7CzI75gAwG7MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdXg3ZnFQdzFFT2x3SVNBM3NMTWp2bUFEQWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQ+MAwQA
LQ+4AwQALVONAwQALVipAwQALVyiMA0GCSqGSIb3DQEBCwUAA4IBAQBPVKbGZ/+I
JE5Wwvw6PROwvcAaIOyHB+bViiGWGeDBYYnkh/rOGHYblPvpA+ENGwiIMqb4Kk2J
qMPsnoBBxl4sIVeNS3O6kU4T4ZFE/GbLmFrTKRUHBaT1Lmg23SJN8ch977IGtb+5
Vfez6zGQq+CRA4MQPyXbU6lCXhKb7Nd2L0jcSkCE+oM8P1+GXsnTCVNyCv9/ca6p
SniglpA3Qr1+u5U/y8d8v2weJGREWizSLHZgiYKtEUHULR1Ncyerhu2Ug2e9PmhP
Kz6sUczofN4349neL7zb1wLYyaRvghRbKb1RF6l4JmFW1NOH5y71OX7X4Q0UWbSE
8KNA+5hNWwLp
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:06 2025 by rpki-client