Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/h-wXhgsUKzaBNM9YZ5hUrR_5jD8.roa
File: h-wXhgsUKzaBNM9YZ5hUrR_5jD8.roa (raw, json)
Hash identifier: TQZFFsSdZ2oDTAEwL5HPhIZEl+vCM4z/tWoDNtN4PyU=
Subject key identifier: 87:EC:17:86:0B:14:2B:36:81:34:CF:58:67:98:54:AD:1F:F9:8C:3F
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 0186E45209B0D05F757EB2A46651706F4220
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/h-wXhgsUKzaBNM9YZ5hUrR_5jD8.roa
Signing time: Wed 15 Mar 2023 08:10:27 +0000
ROA not before: Wed 15 Mar 2023 08:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208250
IP address blocks: 45.150.120.0/24 maxlen: 24
45.150.120.0/22 maxlen: 22
45.150.121.0/24 maxlen: 24
45.150.122.0/24 maxlen: 24
2a0f:be00::/29 maxlen: 29
2a0f:be00:2::/48 maxlen: 48
2a0f:be00::/48 maxlen: 48
2a0f:be00:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:52:09:b0:d0:5f:75:7e:b2:a4:66:51:70:6f:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Mar 15 08:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87ec17860b142b368134cf58679854ad1ff98c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:d9:c4:03:5f:7c:f2:e3:c7:04:0e:d7:cb:
9b:42:35:68:ad:b9:2a:22:c0:c3:24:88:96:96:b0:
d5:0a:84:0f:b4:bc:83:39:8f:71:2b:71:f3:fb:3d:
90:ec:03:3b:5c:09:4d:85:42:cf:d8:1f:df:07:5f:
b8:fd:43:79:25:fc:fc:f1:67:27:8a:ac:f4:6e:9a:
19:06:f4:c9:95:3d:c3:06:3b:ab:d0:4a:d5:99:e4:
b4:31:15:77:3e:f7:9d:75:9d:f3:f7:50:93:57:62:
e7:78:b0:9c:b0:3f:a9:37:79:5b:f2:3a:01:77:1f:
ff:85:ba:3d:e6:2f:4e:56:47:9a:fe:34:a3:0d:84:
31:50:10:4e:6b:71:6b:45:c5:b7:f6:13:4a:13:f5:
70:4f:cf:94:86:4d:92:13:a2:1f:5c:a9:a0:22:5d:
72:e0:8f:13:e8:e0:e0:d7:b5:16:4a:24:2d:00:45:
82:49:30:6a:81:03:6c:f2:34:1d:ae:dc:77:ae:a9:
08:67:6f:0e:45:68:f8:44:c4:7b:db:78:ca:1c:70:
26:d1:6f:b1:84:69:9f:90:a6:7d:e7:00:30:05:5e:
79:aa:51:54:b2:f4:bd:98:f6:45:7b:4b:b1:ae:7f:
c1:9f:a4:66:ee:90:fc:04:b9:d8:c8:f9:92:39:6f:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:17:86:0B:14:2B:36:81:34:CF:58:67:98:54:AD:1F:F9:8C:3F
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/h-wXhgsUKzaBNM9YZ5hUrR_5jD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.120.0/22
IPv6:
2a0f:be00::/29
Signature Algorithm: sha256WithRSAEncryption
49:10:98:b4:2a:6b:b7:db:ad:c6:d5:65:85:82:81:7e:19:d7:
22:c8:57:20:8c:c9:81:3e:df:72:6a:15:d5:ad:eb:ac:ca:43:
f8:a3:ff:61:6d:3f:0e:53:da:c1:9f:d3:40:24:6a:d4:a9:c7:
f3:bb:e6:44:b6:15:52:1d:b8:36:5e:e9:1e:28:ab:07:ce:a0:
91:96:3a:80:28:4b:c1:53:5a:4a:fd:17:c3:0b:fa:b8:78:d9:
e6:b1:d2:d7:26:90:64:bb:c7:42:aa:86:5a:8b:26:e1:0b:c4:
80:26:ee:9c:46:51:08:57:87:18:4f:aa:c5:46:20:36:5a:bc:
a0:9b:f2:70:47:76:39:d4:a4:a8:48:e2:a5:cd:e7:a6:23:17:
19:0a:9c:95:28:0c:1c:d1:21:bc:7f:68:f7:5c:d1:b3:82:38:
ae:6d:49:35:49:86:9e:b3:28:f1:da:46:fa:39:30:02:4f:38:
7e:16:8d:bf:d1:66:02:54:27:75:50:50:b7:f5:24:8c:20:e5:
cb:77:f8:76:f0:96:f0:c8:de:35:b2:21:a9:20:6e:d8:6f:85:
dd:f7:96:3d:43:e6:56:3f:9a:be:6d:f4:16:ec:34:4e:8d:b6:
91:b0:56:24:49:cd:08:df:15:6b:ed:6d:3f:7a:62:34:13:bb:
c9:f4:2f:f3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbkUgmw0F91frKkZlFwb0IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTE2M2QzOWRiODg4MTZjZGRjNTk3YTVkYjVlYWU3MDdk
M2RlMzkwHhcNMjMwMzE1MDgxMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2VjMTc4NjBiMTQyYjM2ODEzNGNmNTg2Nzk4NTRhZDFmZjk4YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7ZxANffPLjxwQO18ubQjVorbkq
IsDDJIiWlrDVCoQPtLyDOY9xK3Hz+z2Q7AM7XAlNhULP2B/fB1+4/UN5Jfz88Wcn
iqz0bpoZBvTJlT3DBjur0ErVmeS0MRV3PveddZ3z91CTV2LneLCcsD+pN3lb8joB
dx//hbo95i9OVkea/jSjDYQxUBBOa3FrRcW39hNKE/VwT8+Uhk2SE6IfXKmgIl1y
4I8T6ODg17UWSiQtAEWCSTBqgQNs8jQdrtx3rqkIZ28ORWj4RMR723jKHHAm0W+x
hGmfkKZ95wAwBV55qlFUsvS9mPZFe0uxrn/Bn6Rm7pD8BLnYyPmSOW/tcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIfsF4YLFCs2gTTPWGeYVK0f+Yw/MB8GA1UdIwQY
MBaAFCNRY9OduIgWzdxZel216ucH0945MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgt
OTE1MDI5NmRhYTBhLzEvaC13WGhnc1VLemFCTk05WVo1aFVyUl81akQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgtOTE1MDI5NmRhYTBh
LzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZZ4MA0E
AgACMAcDBQMqD74AMA0GCSqGSIb3DQEBCwUAA4IBAQBJEJi0Kmu3263G1WWFgoF+
GdciyFcgjMmBPt9yahXVreusykP4o/9hbT8OU9rBn9NAJGrUqcfzu+ZEthVSHbg2
XukeKKsHzqCRljqAKEvBU1pK/RfDC/q4eNnmsdLXJpBku8dCqoZaiybhC8SAJu6c
RlEIV4cYT6rFRiA2Wrygm/JwR3Y51KSoSOKlzeemIxcZCpyVKAwc0SG8f2j3XNGz
gjiubUk1SYaesyjx2kb6OTACTzh+Fo2/0WYCVCd1UFC39SSMIOXLd/h28JbwyN41
siGpIG7Yb4Xd95Y9Q+ZWP5q+bfQW7DROjbaRsFYkSc0I3xVr7W0/emI0E7vJ9C/z
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:13 2025 by rpki-client