Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lxXCRFc-8py9kByTjjLexIQWAV4.roa
File: lxXCRFc-8py9kByTjjLexIQWAV4.roa (raw, json)
Hash identifier: zf5Y/hTmg9vuvx6m6s5nzh3PzhQjiU84Q+ub6Ajm0Lc=
Subject key identifier: 97:15:C2:44:57:3E:F2:9C:BD:90:1C:93:8E:32:DE:C4:84:16:01:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0154C41B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lxXCRFc-8py9kByTjjLexIQWAV4.roa
Signing time: Sat 01 Jan 2022 05:55:07 +0000
ROA not before: Sat 01 Jan 2022 05:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.164.59.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22332443 (0x154c41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 05:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9715c244573ef29cbd901c938e32dec48416015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:50:1b:c5:4a:a5:14:1f:51:68:35:08:6d:
de:34:45:73:ff:13:92:d9:39:40:a0:31:ec:45:18:
cd:51:65:5f:2e:99:c7:c6:5f:5a:d3:86:80:89:e0:
93:1d:7f:55:cd:05:91:2e:b2:03:a2:70:54:9d:a3:
33:8a:5b:84:d9:b1:d8:c2:81:93:5b:41:94:59:1e:
ba:06:c0:27:aa:07:22:1c:fd:d5:05:bc:5a:cf:90:
eb:aa:a4:f3:10:dd:f4:0c:49:97:cd:dc:1e:fb:c2:
6e:6e:97:f1:0b:18:ef:fb:8c:ec:b9:7e:b7:ab:12:
ac:00:79:41:ee:a7:be:a9:81:53:97:f4:81:5f:68:
aa:8e:ce:4d:54:55:3f:0c:63:ae:33:53:38:ba:49:
78:d9:e6:94:b3:47:e3:97:99:49:29:da:e1:4c:00:
4e:ca:8c:7c:90:f4:bd:fc:b4:c6:5a:4c:78:e4:b1:
49:2c:2d:bd:e6:02:9d:12:13:ef:c9:53:af:1e:06:
e9:27:63:79:b8:5f:b9:7e:16:6f:37:0d:dd:90:37:
ce:fd:bc:19:06:3f:a4:ef:f8:44:a5:a9:79:07:37:
8b:fc:31:a4:74:dc:0f:7d:09:ec:19:ca:20:48:de:
ff:ce:23:35:5f:53:00:74:fc:23:61:3a:15:e2:b2:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:C2:44:57:3E:F2:9C:BD:90:1C:93:8E:32:DE:C4:84:16:01:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lxXCRFc-8py9kByTjjLexIQWAV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.219.0/24
185.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:fa:6d:42:3d:27:56:a5:dc:93:4e:ea:9e:d5:0b:4b:a1:8a:
9c:de:70:f1:b9:03:72:22:a2:f6:cc:45:0b:bc:52:0d:f7:43:
14:f6:c4:06:27:29:89:e0:0c:82:29:63:70:1d:6d:72:3e:e7:
f4:3b:2b:db:79:9b:d4:d7:5a:1f:90:68:10:0f:61:ca:d9:fb:
88:bc:5f:e0:1a:4e:37:76:fb:25:96:cc:87:8d:d3:8e:36:b9:
d9:ff:24:fb:9d:98:b9:aa:dc:5e:36:7e:1b:e8:5e:2d:8f:2b:
a2:74:6d:86:9d:8f:96:cc:59:a8:a1:d1:b2:cf:1b:a8:bf:e3:
c1:14:20:c5:69:a5:81:87:35:69:11:a1:ff:c1:6d:12:e4:80:
82:40:a0:9d:e0:1a:57:90:29:2b:77:00:0b:2b:25:73:50:17:
d0:3b:45:d7:29:d2:03:21:1a:c3:9b:59:95:b0:01:0c:b2:51:
22:50:67:0d:96:64:48:2c:6c:de:e4:cf:03:66:5a:7c:58:82:
1c:b5:68:c3:db:aa:3a:3a:9c:4c:9b:90:18:5e:9d:63:d0:c0:
1c:12:30:3f:99:51:54:31:27:a3:9c:d6:3e:89:55:35:69:79:
11:e5:6b:4f:4d:04:67:88:3b:8d:36:2f:7c:f3:81:1d:98:94:
f3:11:66:1f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAVTEGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDEw
MTA1NTUwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTcxNWMyNDQ1NzNl
ZjI5Y2JkOTAxYzkzOGUzMmRlYzQ4NDE2MDE1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXeUBvFSqUUH1FoNQht3jRFc/8Tktk5QKAx7EUYzVFlXy6Z
x8ZfWtOGgIngkx1/Vc0FkS6yA6JwVJ2jM4pbhNmx2MKBk1tBlFkeugbAJ6oHIhz9
1QW8Ws+Q66qk8xDd9AxJl83cHvvCbm6X8QsY7/uM7Ll+t6sSrAB5Qe6nvqmBU5f0
gV9oqo7OTVRVPwxjrjNTOLpJeNnmlLNH45eZSSna4UwATsqMfJD0vfy0xlpMeOSx
SSwtveYCnRIT78lTrx4G6SdjebhfuX4WbzcN3ZA3zv28GQY/pO/4RKWpeQc3i/wx
pHTcD30J7BnKIEje/84jNV9TAHT8I2E6FeKylFUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSXFcJEVz7ynL2QHJOOMt7EhBYBXjAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L2x4WENSRmMtOHB5OWtCeVRqakxleElRV0FWNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2Z2wMEALmkOzANBgkqhkiG9w0B
AQsFAAOCAQEAwPptQj0nVqXck07qntULS6GKnN5w8bkDciKi9sxFC7xSDfdDFPbE
BicpieAMgiljcB1tcj7n9Dsr23mb1NdaH5BoEA9hytn7iLxf4BpON3b7JZbMh43T
jja52f8k+52YuarcXjZ+G+heLY8ronRthp2PlsxZqKHRss8bqL/jwRQgxWmlgYc1
aRGh/8FtEuSAgkCgneAaV5ApK3cACyslc1AX0DtF1ynSAyEaw5tZlbABDLJRIlBn
DZZkSCxs3uTPA2ZafFiCHLVow9uqOjqcTJuQGF6dY9DAHBIwP5lRVDEno5zWPolV
NWl5EeVrT00EZ4g7jTYvfPOBHZiU8xFmHw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:22 2025 by rpki-client