Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1LHMxJeiw8GcOJWvO7oNxbdZueI.roa
File: 1LHMxJeiw8GcOJWvO7oNxbdZueI.roa (raw, json)
Hash identifier: E4bD+m5NCya7jTYaqVQzxWoudqOHQ1M6/mCANd7TPHs=
Subject key identifier: D4:B1:CC:C4:97:A2:C3:C1:9C:38:95:AF:3B:BA:0D:C5:B7:59:B9:E2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 029A3D6E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1LHMxJeiw8GcOJWvO7oNxbdZueI.roa
Signing time: Sat 02 Apr 2022 12:07:05 +0000
ROA not before: Sat 02 Apr 2022 12:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 45.153.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43662702 (0x29a3d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 2 12:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b1ccc497a2c3c19c3895af3bba0dc5b759b9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:99:62:c8:ff:3c:81:67:f3:20:77:51:26:
c4:a7:06:7d:47:7e:4a:de:55:d6:f4:15:4c:41:ff:
4f:a9:ba:f5:a7:ae:14:35:9d:28:81:ff:2a:35:06:
e1:94:e8:3e:6a:01:d3:da:3b:7b:b3:b2:c9:5a:64:
6c:4c:8a:4f:18:de:e8:8a:1d:a1:59:22:e5:42:c8:
f2:0f:66:bc:ad:68:f5:0c:7d:e7:c1:ca:21:61:10:
3a:30:44:96:af:0e:41:70:ae:d7:30:54:dc:a1:a8:
ee:36:5b:d8:d8:fc:f7:64:0c:b4:b5:12:35:fb:3c:
d1:54:93:11:f0:4f:64:65:dd:ee:10:97:98:c0:f0:
76:92:38:b7:40:cb:db:8c:97:a0:d6:00:55:11:f9:
3a:6c:64:50:55:1d:19:9f:81:44:80:4e:93:bc:7e:
8e:f5:c0:97:7a:6b:e5:12:01:2f:eb:7d:7e:e6:f3:
08:e9:ff:87:d1:8c:3b:1e:d1:c4:7f:86:95:c9:cd:
bb:5e:26:8b:49:c0:91:9b:d3:ad:c4:20:c6:06:9e:
09:36:0d:ee:59:d6:6d:f2:db:54:6d:c2:15:4e:77:
ca:be:fd:06:29:ee:22:29:ed:6e:b0:7f:06:a2:b0:
09:d5:81:3f:a4:1c:80:4f:29:37:03:d7:26:d0:42:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:CC:C4:97:A2:C3:C1:9C:38:95:AF:3B:BA:0D:C5:B7:59:B9:E2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1LHMxJeiw8GcOJWvO7oNxbdZueI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.218.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4a:69:34:3d:e6:91:54:de:0d:0a:89:d5:85:50:60:93:93:
e0:6e:4b:e9:f1:35:b4:c5:d6:39:a0:c4:1c:29:50:9e:3e:d8:
9b:24:2c:30:19:2b:69:6d:2b:51:2d:67:65:6f:b0:a6:ad:70:
81:6e:7d:8e:a5:e8:6d:28:43:f3:24:d1:2c:6c:d2:3f:06:23:
64:d7:fd:f6:b8:54:27:0a:29:7d:b1:b6:83:b7:41:d5:e7:1b:
5e:e5:af:56:3f:b3:28:50:58:5d:0c:d3:d9:41:c9:08:94:af:
f7:c5:82:2e:aa:21:17:af:09:e9:f6:49:3a:54:d1:4a:11:d9:
bb:9e:c5:1b:c6:41:76:15:0e:e9:93:96:b7:76:db:7d:17:0c:
cc:ce:36:72:2a:6b:c2:21:d4:aa:77:43:40:c7:ab:09:d5:e4:
b7:bb:08:2f:0a:3f:b3:d5:db:4a:6a:7b:f3:da:c6:5c:92:0b:
5a:5c:06:db:5b:86:33:06:41:fc:d6:89:8a:72:5b:bb:cd:b4:
85:3b:c7:fe:86:67:37:88:eb:0c:07:a1:21:42:ac:61:2a:65:
fc:f7:5e:80:08:ff:4b:f7:2f:8d:84:39:02:e0:e6:94:6c:b9:
81:f6:8c:83:43:9f:0d:e6:7f:47:e7:63:c4:1a:b7:6a:ce:f3:
30:61:42:cb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEApo9bjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDQw
MjEyMDcwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDRiMWNjYzQ5N2Ey
YzNjMTljMzg5NWFmM2JiYTBkYzViNzU5YjllMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmbmWLI/zyBZ/Mgd1EmxKcGfUd+St5V1vQVTEH/T6m69aeu
FDWdKIH/KjUG4ZToPmoB09o7e7OyyVpkbEyKTxje6IodoVki5ULI8g9mvK1o9Qx9
58HKIWEQOjBElq8OQXCu1zBU3KGo7jZb2Nj892QMtLUSNfs80VSTEfBPZGXd7hCX
mMDwdpI4t0DL24yXoNYAVRH5OmxkUFUdGZ+BRIBOk7x+jvXAl3pr5RIBL+t9fubz
COn/h9GMOx7RxH+GlcnNu14mi0nAkZvTrcQgxgaeCTYN7lnWbfLbVG3CFU53yr79
BinuIintbrB/BqKwCdWBP6QcgE8pNwPXJtBCLLECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTUsczEl6LDwZw4la87ug3Ft1m54jAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
LzFMSE14SmVpdzhHY09KV3ZPN29OeGJkWnVlSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2Z2jANBgkqhkiG9w0BAQsFAAOC
AQEAh0ppND3mkVTeDQqJ1YVQYJOT4G5L6fE1tMXWOaDEHClQnj7YmyQsMBkraW0r
US1nZW+wpq1wgW59jqXobShD8yTRLGzSPwYjZNf99rhUJwopfbG2g7dB1ecbXuWv
Vj+zKFBYXQzT2UHJCJSv98WCLqohF68J6fZJOlTRShHZu57FG8ZBdhUO6ZOWt3bb
fRcMzM42ciprwiHUqndDQMerCdXkt7sILwo/s9XbSmp789rGXJILWlwG21uGMwZB
/NaJinJbu820hTvH/oZnN4jrDAehIUKsYSpl/PdegAj/S/cvjYQ5AuDmlGy5gfaM
g0OfDeZ/R+djxBq3as7zMGFCyw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:20 2025 by rpki-client