Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PaNiVxrGFTBCjZ9UWd0TscrLzlU.roa
File: PaNiVxrGFTBCjZ9UWd0TscrLzlU.roa (raw, json)
Hash identifier: /IinhTlbKA1wbH3eoH+t6V5uNyJZ+ypQ1260byATZS8=
Subject key identifier: 3D:A3:62:57:1A:C6:15:30:42:8D:9F:54:59:DD:13:B1:CA:CB:CE:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018340FDC3CF8DE03C74BA747ECCFA009F48
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PaNiVxrGFTBCjZ9UWd0TscrLzlU.roa
Signing time: Thu 15 Sep 2022 11:51:56 +0000
ROA not before: Thu 15 Sep 2022 11:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.95.98.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:fd:c3:cf:8d:e0:3c:74:ba:74:7e:cc:fa:00:9f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 11:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3da362571ac61530428d9f5459dd13b1cacbce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:da:e9:cb:9b:82:89:27:5c:eb:ca:44:ca:
23:25:13:7b:a0:0c:ba:7e:03:34:87:7c:bc:fd:c8:
d1:e4:8a:3e:ae:86:62:d4:2b:31:7a:58:a3:c2:a7:
10:6d:d8:f1:0f:c0:1f:3a:bd:60:25:f5:dc:77:0b:
68:7a:e9:86:b2:7c:f3:56:00:d0:70:3d:ba:4d:0d:
84:e0:9b:1f:0b:4c:ce:ff:f5:a2:71:32:2b:60:5f:
9e:28:86:5a:a8:30:10:c2:6d:22:c1:37:0e:9d:c5:
17:70:4e:8b:4d:94:1f:23:7b:18:34:5f:38:98:52:
c4:23:54:2b:21:4b:6d:86:61:ca:80:63:89:1a:00:
ba:c0:1f:93:5d:62:68:95:1d:d8:44:3e:02:e4:33:
32:ab:71:a5:2d:cb:2a:b0:ef:0c:64:c5:d8:ec:e5:
4e:2e:ad:46:13:12:66:30:02:0e:35:c3:c5:f4:23:
e0:4c:68:03:45:8c:af:bf:b3:00:3a:23:f4:d0:f8:
e3:b0:d5:d0:54:38:57:fc:b3:f0:cb:4e:a8:71:8a:
0e:ea:a3:06:d5:dc:e6:93:2b:b7:19:a7:b5:2f:ba:
56:c7:5b:8c:8a:c5:52:c4:e5:4f:f5:24:dc:ad:31:
9b:a3:f5:4d:6f:f4:de:10:f6:bd:d4:8c:79:93:92:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:62:57:1A:C6:15:30:42:8D:9F:54:59:DD:13:B1:CA:CB:CE:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PaNiVxrGFTBCjZ9UWd0TscrLzlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.118.249.0/24
45.137.82.0/24
103.229.31.0/24
Signature Algorithm: sha256WithRSAEncryption
55:75:ff:39:2e:80:f4:d4:95:23:2f:b9:8d:1c:34:5c:3b:be:
64:af:b1:bf:40:69:30:7c:b4:fb:45:63:57:68:f1:df:3f:0b:
f3:a4:db:26:c9:33:91:2e:f6:fb:7e:31:21:e8:fe:a1:82:1d:
ec:ae:c0:d9:fb:a2:22:9d:8d:6f:b3:dd:fe:55:9c:0e:41:bf:
44:c5:dd:e6:b9:04:20:da:d6:17:7a:62:5f:df:66:15:59:6b:
f0:ca:ac:00:46:19:5f:97:32:11:96:69:8a:a3:0a:ba:06:65:
ce:e8:e9:c8:34:3c:95:c7:c5:53:f6:ec:6b:c1:8b:01:54:4e:
33:14:5d:bd:43:7b:fe:ad:14:22:48:63:85:2c:58:d3:da:74:
d1:1b:dc:78:ba:20:a0:f3:c1:2e:77:70:a3:e1:be:64:60:f6:
aa:0c:e1:af:a1:f0:dd:a4:d2:e2:fa:a8:6a:33:78:36:b4:6a:
a6:3d:c1:d0:63:fe:73:ed:28:77:dc:c0:ad:18:82:17:fc:4a:
94:a0:cc:6e:1d:48:4a:13:35:49:e6:b0:10:a9:a7:c3:65:4e:
ec:fe:dd:8f:35:d9:65:29:23:57:59:2a:18:80:d0:5a:70:84:
c7:93:0a:5e:aa:05:a6:33:8d:9d:b7:59:e5:4e:4c:31:2d:54:
37:42:ee:6a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYNA/cPPjeA8dLp0fsz6AJ9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwOTE1MTE1MTU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGEzNjI1NzFhYzYxNTMwNDI4ZDlmNTQ1OWRkMTNiMWNhY2JjZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh97a6cubgoknXOvKRMojJRN7oAy6
fgM0h3y8/cjR5Io+roZi1CsxelijwqcQbdjxD8AfOr1gJfXcdwtoeumGsnzzVgDQ
cD26TQ2E4JsfC0zO//WicTIrYF+eKIZaqDAQwm0iwTcOncUXcE6LTZQfI3sYNF84
mFLEI1QrIUtthmHKgGOJGgC6wB+TXWJolR3YRD4C5DMyq3GlLcsqsO8MZMXY7OVO
Lq1GExJmMAIONcPF9CPgTGgDRYyvv7MAOiP00PjjsNXQVDhX/LPwy06ocYoO6qMG
1dzmkyu3Gae1L7pWx1uMisVSxOVP9STcrTGbo/VNb/TeEPa91Ix5k5KLvQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFD2jYlcaxhUwQo2fVFndE7HKy85VMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUGFOaVZ4ckdGVEJDalo5VVdkMFRzY3JMemxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV9iAwQA
LXb5AwQALYlSAwQAZ+UfMA0GCSqGSIb3DQEBCwUAA4IBAQBVdf85LoD01JUjL7mN
HDRcO75kr7G/QGkwfLT7RWNXaPHfPwvzpNsmyTORLvb7fjEh6P6hgh3srsDZ+6Ii
nY1vs93+VZwOQb9Exd3muQQg2tYXemJf32YVWWvwyqwARhlflzIRlmmKowq6BmXO
6OnINDyVx8VT9uxrwYsBVE4zFF29Q3v+rRQiSGOFLFjT2nTRG9x4uiCg88Eud3Cj
4b5kYPaqDOGvofDdpNLi+qhqM3g2tGqmPcHQY/5z7Sh33MCtGIIX/EqUoMxuHUhK
EzVJ5rAQqafDZU7s/t2PNdllKSNXWSoYgNBacITHkwpeqgWmM42dt1nlTkwxLVQ3
Qu5q
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:30 2025 by rpki-client