Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa
File: w9fTuDtNrY-TjKgtne7y-VxBuMM.roa (raw, json)
Hash identifier: aZ06DaaiaBpnBAfvV/zY9PxsuXXEKQ8ut7GaYuFY62M=
Subject key identifier: C3:D7:D3:B8:3B:4D:AD:8F:93:8C:A8:2D:9D:EE:F2:F9:5C:41:B8:C3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0186ACD6267E07F186E4E754D0731699B201
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa
Signing time: Sat 04 Mar 2023 13:36:00 +0000
ROA not before: Sat 04 Mar 2023 13:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:d6:26:7e:07:f1:86:e4:e7:54:d0:73:16:99:b2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 4 13:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d7d3b83b4dad8f938ca82d9deef2f95c41b8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:63:d9:4f:8f:b2:a6:5b:4a:d2:72:fa:2e:
59:62:49:e3:cf:b2:0d:12:c7:a9:29:23:38:6c:a2:
d1:1a:5d:3d:29:03:1d:89:91:b8:2f:45:a6:8c:17:
c2:30:b6:15:ff:1a:29:ca:5f:4b:2c:e9:9b:e7:10:
fb:40:5e:db:5b:a8:d3:d7:c3:0b:8a:2c:85:ab:b4:
01:a2:bc:b8:3c:6c:85:7e:36:32:d4:54:56:4d:ae:
1c:bf:fb:e9:62:f6:45:ca:cf:8b:7f:60:df:c7:51:
e6:d4:ec:b5:74:b7:81:74:1b:0d:a7:83:e5:d1:3b:
7b:c1:37:26:c9:78:41:72:45:d1:e5:f3:0e:8f:cc:
8d:eb:b1:26:64:02:8d:dd:8e:b0:02:98:10:20:23:
20:0c:9f:02:2f:f9:61:d5:44:d5:8d:01:5e:35:fd:
18:04:88:ec:b3:c7:88:cb:55:9a:1b:6f:b8:20:0c:
22:62:d1:7a:03:24:9b:68:4f:a6:c0:e5:5d:59:3a:
b0:ca:ea:85:44:9a:72:ca:29:e6:d8:67:df:dc:1a:
88:59:5f:31:70:33:46:d7:aa:72:95:4a:d5:40:21:
a4:16:68:ad:4c:5f:0a:21:06:8f:05:b4:e8:19:ec:
40:f7:64:e5:7a:74:03:2d:25:1e:a0:97:97:f7:55:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:D3:B8:3B:4D:AD:8F:93:8C:A8:2D:9D:EE:F2:F9:5C:41:B8:C3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:bf:a3:20:7e:03:f2:78:da:a2:0b:b0:05:76:16:5c:c1:2c:
44:a5:84:d4:60:b5:b0:39:a9:e5:81:d6:72:37:13:c3:36:8d:
b4:c7:3f:20:45:59:83:36:7e:6b:06:96:ef:6c:bf:cd:6f:2c:
45:5b:72:b9:f0:d1:f8:3f:db:e4:9c:47:77:7f:49:dd:f4:66:
25:f6:99:43:f7:8c:8e:89:67:7f:ba:2a:34:2a:12:62:41:c2:
e8:d4:1b:34:fc:ed:be:3a:05:03:02:c6:0c:f6:fa:c4:9e:d8:
5c:a2:0d:cf:da:7d:cb:73:2f:7d:9d:8c:c7:2f:27:d8:78:0b:
0e:e5:2b:40:01:11:6e:e7:39:a8:6f:12:c1:61:be:fe:ee:48:
fc:8a:3b:67:e0:72:49:e6:67:4f:0e:3d:1b:88:c7:aa:36:19:
7f:3c:c8:64:4a:1e:55:f3:9e:aa:a1:a9:75:77:c2:b8:71:8d:
9d:c2:cd:0c:74:fc:79:1d:c9:4e:5c:47:e3:78:7a:b3:c0:a9:
b5:4b:10:e9:c5:4e:e0:0a:d4:79:31:eb:28:c1:ae:42:a0:7a:
a8:5b:40:78:9e:d1:e8:e3:b0:53:da:55:5a:89:19:fa:da:65:
85:74:0b:9f:f5:48:63:6a:55:1b:36:71:1e:79:c3:2e:03:be:
dd:28:0d:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYas1iZ+B/GG5OdU0HMWmbIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMzA0MTMzNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Q3ZDNiODNiNGRhZDhmOTM4Y2E4MmQ5ZGVlZjJmOTVjNDFiOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm5j2U+PsqZbStJy+i5ZYknjz7IN
EsepKSM4bKLRGl09KQMdiZG4L0WmjBfCMLYV/xopyl9LLOmb5xD7QF7bW6jT18ML
iiyFq7QBory4PGyFfjYy1FRWTa4cv/vpYvZFys+Lf2Dfx1Hm1Oy1dLeBdBsNp4Pl
0Tt7wTcmyXhBckXR5fMOj8yN67EmZAKN3Y6wApgQICMgDJ8CL/lh1UTVjQFeNf0Y
BIjss8eIy1WaG2+4IAwiYtF6AySbaE+mwOVdWTqwyuqFRJpyyinm2Gff3BqIWV8x
cDNG16pylUrVQCGkFmitTF8KIQaPBbToGexA92TlenQDLSUeoJeX91WodQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPX07g7Ta2Pk4yoLZ3u8vlcQbjDMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdzlmVHVEdE5yWS1UaktndG5lN3ktVnhCdU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjEMA0G
CSqGSIb3DQEBCwUAA4IBAQDCv6MgfgPyeNqiC7AFdhZcwSxEpYTUYLWwOanlgdZy
NxPDNo20xz8gRVmDNn5rBpbvbL/NbyxFW3K58NH4P9vknEd3f0nd9GYl9plD94yO
iWd/uio0KhJiQcLo1Bs0/O2+OgUDAsYM9vrEnthcog3P2n3Lcy99nYzHLyfYeAsO
5StAARFu5zmobxLBYb7+7kj8ijtn4HJJ5mdPDj0biMeqNhl/PMhkSh5V856qoal1
d8K4cY2dws0MdPx5HclOXEfjeHqzwKm1SxDpxU7gCtR5Mesowa5CoHqoW0B4ntHo
47BT2lVaiRn62mWFdAuf9UhjalUbNnEeecMuA77dKA31
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:05 2025 by rpki-client