Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/mYRoF2fgNPvYHNnQT3aw1RemYFk.roa
File: mYRoF2fgNPvYHNnQT3aw1RemYFk.roa (raw, json)
Hash identifier: rR673v469X4/ELwiMl1AUBaCjFnX889rRqfIz7Al+1A=
Subject key identifier: 99:84:68:17:67:E0:34:FB:D8:1C:D9:D0:4F:76:B0:D5:17:A6:60:59
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 02FC48
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/mYRoF2fgNPvYHNnQT3aw1RemYFk.roa
Signing time: Wed 25 May 2022 15:47:15 +0000
ROA not before: Wed 25 May 2022 15:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 145.8.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195656 (0x2fc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: May 25 15:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9984681767e034fbd81cd9d04f76b0d517a66059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:7f:22:8d:ef:c5:83:90:32:98:d5:42:47:
77:03:01:37:99:4d:48:09:0d:2d:41:e2:72:29:bc:
f3:98:09:7a:cf:a2:54:1b:02:06:9d:9b:1e:a2:0f:
01:c1:44:42:c8:32:1d:62:f9:78:0d:1b:c1:bb:46:
0b:79:2b:6a:e3:1a:15:25:2b:4c:41:19:5a:c7:4c:
b4:de:d2:a3:20:a2:fd:f8:69:48:8d:a7:e1:e6:97:
fe:b4:49:2b:a1:bf:3d:20:0f:0a:53:77:a8:1e:32:
47:f2:6d:5a:60:07:2f:39:aa:3e:14:79:63:3c:62:
6c:f2:4f:82:2d:0b:44:42:a5:13:69:a6:92:61:04:
33:94:c4:0b:06:08:3c:9c:78:2c:5d:c9:8e:81:c4:
dc:f3:0c:84:ae:a8:3e:e4:29:f3:26:67:3c:51:79:
74:f2:56:2c:59:cc:f7:6f:9f:6e:ba:e4:14:65:d0:
4a:f8:3d:10:0a:4f:9e:b9:be:ba:27:2e:0f:4d:9f:
53:45:b8:2b:1e:3a:b5:e0:4c:39:39:9f:69:35:bc:
15:49:35:d5:fa:8b:6a:2f:ca:e2:82:cc:30:d7:4d:
97:71:5b:1c:f2:4d:f2:82:be:45:24:e2:21:3d:05:
8e:51:82:1d:cb:4e:17:c8:5b:5f:ab:5c:fb:a4:bd:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:68:17:67:E0:34:FB:D8:1C:D9:D0:4F:76:B0:D5:17:A6:60:59
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/mYRoF2fgNPvYHNnQT3aw1RemYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.8.180.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5a:97:d0:e3:8a:bf:25:d2:03:35:e4:f5:8e:bd:6d:9f:4c:
c7:1f:11:2a:b6:5a:0e:82:51:d2:db:9a:89:3a:15:92:9c:55:
56:96:15:0b:42:48:5e:43:08:61:2b:06:a4:cb:11:ad:f0:d0:
cf:f5:79:51:15:9b:55:23:42:c1:6b:2a:fe:b2:ef:f8:c5:48:
86:13:8f:ab:83:90:3b:1e:b8:59:33:92:f2:24:a3:ae:d1:1e:
0a:ee:4d:83:b2:1b:be:ae:f3:04:de:88:8b:dd:63:00:9f:63:
b4:32:34:f4:1c:18:e1:c4:34:1b:89:5b:73:58:89:90:28:fb:
cf:68:19:ef:46:5f:ab:e8:5a:e1:f5:97:5c:c4:5b:b3:d4:62:
45:79:6e:85:3a:94:63:5c:9e:fb:ff:df:64:7f:6d:e3:2c:3f:
b2:4d:fb:64:56:13:1c:ad:40:b4:2f:3a:a4:66:df:61:cb:db:
c4:73:48:61:7f:34:47:ed:84:a6:3a:fd:fa:a6:3a:b8:b0:4f:
6c:c1:ff:a6:c2:68:96:d0:80:3a:85:94:d5:08:31:1c:1d:11:
3d:d7:20:fb:d2:52:56:70:25:51:95:54:24:f7:ed:33:3b:d5:
3b:05:a0:67:15:14:06:92:71:32:36:50:a7:85:63:40:31:6a:
7c:6f:45:9b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAvxIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
YjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJiNWJlZWUwHhcNMjIwNTI1
MTU0NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5OTg0NjgxNzY3ZTAz
NGZiZDgxY2Q5ZDA0Zjc2YjBkNTE3YTY2MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwhh/Io3vxYOQMpjVQkd3AwE3mU1ICQ0tQeJyKbzzmAl6z6JU
GwIGnZseog8BwURCyDIdYvl4DRvBu0YLeStq4xoVJStMQRlax0y03tKjIKL9+GlI
jafh5pf+tEkrob89IA8KU3eoHjJH8m1aYAcvOao+FHljPGJs8k+CLQtEQqUTaaaS
YQQzlMQLBgg8nHgsXcmOgcTc8wyErqg+5CnzJmc8UXl08lYsWcz3b59uuuQUZdBK
+D0QCk+eub66Jy4PTZ9TRbgrHjq14Ew5OZ9pNbwVSTXV+otqL8rigsww102XcVsc
8k3ygr5FJOIhPQWOUYIdy04XyFtfq1z7pL1JqwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJmEaBdn4DT72BzZ0E92sNUXpmBZMB8GA1UdIwQYMBaAFN23FHE3O7BgPDVu
7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
M2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNiLzEv
bVlSb0YyZmdOUHZZSE5uUVQzYXcxUmVtWUZrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80
YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4
Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkQi0MA0GCSqGSIb3DQEBCwUAA4IB
AQCRWpfQ44q/JdIDNeT1jr1tn0zHHxEqtloOglHS25qJOhWSnFVWlhULQkheQwhh
KwakyxGt8NDP9XlRFZtVI0LBayr+su/4xUiGE4+rg5A7HrhZM5LyJKOu0R4K7k2D
shu+rvME3oiL3WMAn2O0MjT0HBjhxDQbiVtzWImQKPvPaBnvRl+r6Frh9ZdcxFuz
1GJFeW6FOpRjXJ77/99kf23jLD+yTftkVhMcrUC0LzqkZt9hy9vEc0hhfzRH7YSm
Ov36pjq4sE9swf+mwmiW0IA6hZTVCDEcHRE91yD70lJWcCVRlVQk9+0zO9U7BaBn
FRQGknEyNlCnhWNAMWp8b0Wb
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:51 2025 by rpki-client