Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ng62zOkRw-XvMpuYDXojVeMBZs4.roa
File: ng62zOkRw-XvMpuYDXojVeMBZs4.roa (raw, json)
Hash identifier: stXmE4C0kLYDDZ9qKdLrE8bV6C1tWuP2maijkdoLC3g=
Subject key identifier: 9E:0E:B6:CC:E9:11:C3:E5:EF:32:9B:98:0D:7A:23:55:E3:01:66:CE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018291FD228E0A9C8F1CE02CA8FB92AEE706
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ng62zOkRw-XvMpuYDXojVeMBZs4.roa
Signing time: Fri 12 Aug 2022 12:17:41 +0000
ROA not before: Fri 12 Aug 2022 12:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.95.98.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:fd:22:8e:0a:9c:8f:1c:e0:2c:a8:fb:92:ae:e7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 12 12:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e0eb6cce911c3e5ef329b980d7a2355e30166ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:5a:f8:77:b7:d2:ee:8f:41:54:c0:dd:b6:
f7:08:06:fe:fa:2b:82:c1:65:c2:c6:ef:98:0b:84:
1c:67:8c:d1:df:fb:5b:d9:8a:09:55:9f:75:81:00:
ee:4c:71:5e:96:04:f6:87:8c:84:36:09:d4:de:31:
75:d0:9b:2a:ac:01:8e:b4:61:2f:fb:f7:91:ca:be:
1f:fb:a1:dc:e0:f8:af:5d:2f:6e:ae:af:e1:10:6c:
de:ae:c9:73:0d:ec:11:37:f1:a5:82:77:e4:67:17:
c8:68:41:cc:da:4e:c8:31:e6:8d:5a:72:96:f3:ff:
69:2e:7d:30:bc:91:0d:3b:71:7a:d2:dc:94:1b:ab:
e6:7e:6e:97:81:67:04:b8:2e:8d:e4:0d:62:78:3d:
31:db:83:98:b7:bb:ed:e6:7b:44:80:83:71:9c:3b:
e0:ea:55:c3:c8:24:11:e1:28:89:b2:90:eb:91:20:
00:4a:28:64:37:c2:9e:dc:4d:da:d8:d4:2e:5d:b8:
23:c4:53:e3:13:c3:62:be:90:21:3f:ee:2f:98:fa:
c8:be:dc:b5:c3:49:d4:45:f8:9a:a9:d2:57:6e:0a:
ed:07:9f:9b:cb:bc:fe:93:a7:ae:dd:77:3c:71:e0:
4e:3a:a4:e8:72:7b:60:ec:aa:ab:c1:77:4c:fa:cd:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:B6:CC:E9:11:C3:E5:EF:32:9B:98:0D:7A:23:55:E3:01:66:CE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ng62zOkRw-XvMpuYDXojVeMBZs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.118.249.0/24
45.137.82.0/24
103.229.31.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e9:7b:df:34:fb:ab:4f:0c:17:c0:5b:8d:61:8c:11:b5:37:
ec:76:d7:34:5b:c3:1f:f3:95:d1:47:33:f3:7a:2f:fb:ae:5b:
f0:a2:7c:d3:5d:a7:56:ec:16:16:ea:8a:48:70:81:87:e5:02:
d2:9f:39:c2:9e:bc:77:38:74:33:9f:c4:a2:74:d4:fc:c1:b5:
16:af:84:68:92:15:43:d5:e8:5e:e0:f6:03:be:7b:0b:b6:50:
95:c5:31:f9:8e:8c:85:53:1b:7e:69:78:1d:39:98:87:bc:79:
b8:17:16:b9:d8:75:b7:45:d3:23:ee:dd:5a:10:47:12:f5:a3:
a9:86:d3:4f:e1:cd:ca:fa:a5:d4:f2:00:1f:f6:a9:bb:16:b1:
ea:dd:40:86:d1:d2:4e:17:56:28:0e:37:ec:3a:d5:01:e8:47:
ee:6e:47:4a:16:32:72:43:d2:86:4e:2a:31:07:8b:21:fa:51:
36:dc:0c:ee:9e:4e:d4:df:bf:6d:d2:44:40:aa:f7:c6:86:27:
e8:1f:6f:e0:d8:af:1d:2d:84:92:43:73:dc:49:cc:7d:49:23:
7f:db:a7:c9:aa:1a:98:ff:0f:25:9b:0e:0d:ca:e1:f8:3e:e3:
8c:d1:64:90:eb:25:6d:d5:c0:de:a7:44:9f:f7:7a:63:4f:cf:
a3:29:97:ab
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYKR/SKOCpyPHOAsqPuSrucGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwODEyMTIxNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBlYjZjY2U5MTFjM2U1ZWYzMjliOTgwZDdhMjM1NWUzMDE2NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTJa+He30u6PQVTA3bb3CAb++iuC
wWXCxu+YC4QcZ4zR3/tb2YoJVZ91gQDuTHFelgT2h4yENgnU3jF10JsqrAGOtGEv
+/eRyr4f+6Hc4PivXS9urq/hEGzerslzDewRN/GlgnfkZxfIaEHM2k7IMeaNWnKW
8/9pLn0wvJENO3F60tyUG6vmfm6XgWcEuC6N5A1ieD0x24OYt7vt5ntEgINxnDvg
6lXDyCQR4SiJspDrkSAASihkN8Ke3E3a2NQuXbgjxFPjE8NivpAhP+4vmPrIvty1
w0nURfiaqdJXbgrtB5+by7z+k6eu3Xc8ceBOOqTocntg7KqrwXdM+s03NwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ4OtszpEcPl7zKbmA16I1XjAWbOMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbmc2MnpPa1J3LVh2TXB1WURYb2pWZU1CWnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV9iAwQA
LXb5AwQALYlSAwQAZ+UfMA0GCSqGSIb3DQEBCwUAA4IBAQBR6XvfNPurTwwXwFuN
YYwRtTfsdtc0W8Mf85XRRzPzei/7rlvwonzTXadW7BYW6opIcIGH5QLSnznCnrx3
OHQzn8SidNT8wbUWr4RokhVD1ehe4PYDvnsLtlCVxTH5joyFUxt+aXgdOZiHvHm4
Fxa52HW3RdMj7t1aEEcS9aOphtNP4c3K+qXU8gAf9qm7FrHq3UCG0dJOF1YoDjfs
OtUB6EfubkdKFjJyQ9KGTioxB4sh+lE23Azunk7U379t0kRAqvfGhifoH2/g2K8d
LYSSQ3PcScx9SSN/26fJqhqY/w8lmw4NyuH4PuOM0WSQ6yVt1cDep0Sf93pjT8+j
KZer
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:16:15 2025 by rpki-client