Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RkZqrtdtyJ0I5wl9FirMSDw2Tx0.roa
File: RkZqrtdtyJ0I5wl9FirMSDw2Tx0.roa (raw, json)
Hash identifier: 6oXkeizhI+oUAPAP09+BsnWhrs4bdzLt8GDWKYQpv0A=
Subject key identifier: 46:46:6A:AE:D7:6D:C8:9D:08:E7:09:7D:16:2A:CC:48:3C:36:4F:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01D110BF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RkZqrtdtyJ0I5wl9FirMSDw2Tx0.roa
Signing time: Mon 07 Feb 2022 23:03:28 +0000
ROA not before: Mon 07 Feb 2022 23:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.164.59.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30478527 (0x1d110bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 7 23:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46466aaed76dc89d08e7097d162acc483c364f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:3a:ab:d0:8d:19:29:a2:7b:b7:04:29:27:
b1:6d:92:5f:05:04:4d:aa:d9:65:3f:a2:bf:c4:2f:
bf:c6:2b:00:3b:31:af:10:78:7d:6a:19:a4:9c:b7:
73:df:2f:b8:dc:6f:03:92:82:07:cc:29:30:6c:9c:
c6:f3:fa:a2:b5:cb:7c:4a:69:9f:12:2d:e2:a9:81:
8d:0e:63:6c:ea:2b:b5:e5:7b:6d:c3:77:b9:36:95:
dc:01:11:eb:71:70:6a:60:71:c5:ae:3c:64:d7:32:
97:96:c3:c8:1b:ac:c1:2b:4e:d0:b3:0c:22:da:38:
6c:c1:1a:40:13:b5:e2:b5:02:88:e8:54:79:5d:93:
bd:49:a2:bb:f6:1c:8e:ca:93:a4:61:a8:9a:99:7c:
18:05:da:9c:49:a8:ff:18:1e:fe:68:04:64:85:c3:
e1:8e:44:42:24:d4:0a:e1:71:7c:31:71:9b:3c:e2:
63:34:61:dc:d8:92:e6:77:e1:3d:ec:6f:f1:9a:41:
67:b7:c6:34:0d:0b:4c:b2:d6:56:d0:15:e2:a1:7b:
f7:e4:20:d0:80:6c:3b:cc:9b:ce:81:ab:24:de:6e:
6d:90:68:ef:aa:99:5a:98:61:d1:fe:f7:9f:40:04:
ed:e4:70:a3:ec:71:84:d5:9c:40:78:cd:84:01:a6:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:6A:AE:D7:6D:C8:9D:08:E7:09:7D:16:2A:CC:48:3C:36:4F:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RkZqrtdtyJ0I5wl9FirMSDw2Tx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.219.0/24
185.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fa:89:a7:7b:bb:c4:77:0b:93:a4:e5:f9:c2:5f:b9:91:6d:
ed:ac:16:18:7f:a4:e8:a6:3e:56:1f:ef:4a:b1:27:20:aa:67:
82:12:8d:24:5f:d7:29:af:37:4a:2e:2c:17:53:89:0b:02:5f:
3a:bb:13:f6:75:1b:57:e4:d4:21:c0:70:b2:9c:f7:99:f6:ea:
ed:5e:b3:41:0e:82:88:91:52:9c:24:47:a7:27:06:1a:8f:4c:
b9:9c:72:74:81:1d:56:39:af:96:73:4c:11:cf:d2:58:e1:4c:
e3:da:93:fa:b0:15:93:fe:df:59:49:b4:c0:f5:2a:7e:85:ba:
c1:f2:56:26:d3:76:67:11:a9:a3:06:75:d0:9c:94:75:59:09:
09:2d:e6:de:64:0d:86:8d:bd:5c:26:e3:1f:32:05:fb:68:02:
75:3d:06:d0:17:59:f7:90:b8:d3:e4:2e:ec:f8:40:cb:93:04:
a1:94:d1:16:21:46:e4:b6:4b:84:92:6c:b5:c4:d1:7f:40:b8:
48:ec:d9:bc:50:0d:79:36:38:58:a9:97:82:7d:a3:39:81:18:
90:a5:24:52:d3:42:09:a4:80:df:a2:35:3d:70:59:1a:c0:2f:
bb:b9:ef:e2:08:55:84:f6:5a:24:f4:8f:fd:da:e8:f2:d9:da:
d0:b8:a9:bb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAdEQvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDIw
NzIzMDMyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDY0NjZhYWVkNzZk
Yzg5ZDA4ZTcwOTdkMTYyYWNjNDgzYzM2NGYxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkzOqvQjRkponu3BCknsW2SXwUETarZZT+iv8Qvv8YrADsx
rxB4fWoZpJy3c98vuNxvA5KCB8wpMGycxvP6orXLfEppnxIt4qmBjQ5jbOorteV7
bcN3uTaV3AER63FwamBxxa48ZNcyl5bDyBuswStO0LMMIto4bMEaQBO14rUCiOhU
eV2TvUmiu/YcjsqTpGGompl8GAXanEmo/xge/mgEZIXD4Y5EQiTUCuFxfDFxmzzi
YzRh3NiS5nfhPexv8ZpBZ7fGNA0LTLLWVtAV4qF79+Qg0IBsO8ybzoGrJN5ubZBo
76qZWphh0f73n0AE7eRwo+xxhNWcQHjNhAGmX5kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRGRmqu123InQjnCX0WKsxIPDZPHTAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L1JrWnFydGR0eUowSTV3bDlGaXJNU0R3MlR4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2Z2wMEALmkOzANBgkqhkiG9w0B
AQsFAAOCAQEAY/qJp3u7xHcLk6Tl+cJfuZFt7awWGH+k6KY+Vh/vSrEnIKpnghKN
JF/XKa83Si4sF1OJCwJfOrsT9nUbV+TUIcBwspz3mfbq7V6zQQ6CiJFSnCRHpycG
Go9MuZxydIEdVjmvlnNMEc/SWOFM49qT+rAVk/7fWUm0wPUqfoW6wfJWJtN2ZxGp
owZ10JyUdVkJCS3m3mQNho29XCbjHzIF+2gCdT0G0BdZ95C40+Qu7PhAy5MEoZTR
FiFG5LZLhJJstcTRf0C4SOzZvFANeTY4WKmXgn2jOYEYkKUkUtNCCaSA36I1PXBZ
GsAvu7nv4ghVhPZaJPSP/dro8tna0Lipuw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:11 2025 by rpki-client