Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t1mlvsaz3EhYlSLoC2HOmxrWVEg.roa
File: t1mlvsaz3EhYlSLoC2HOmxrWVEg.roa (raw, json)
Hash identifier: fejOlf2UaBdwptvs5H3R8gvVvPiqOemKqFFQMgjyywU=
Subject key identifier: B7:59:A5:BE:C6:B3:DC:48:58:95:22:E8:0B:61:CE:9B:1A:D6:54:48
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018461C971EEF0DD6D64441941CDD5332825
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t1mlvsaz3EhYlSLoC2HOmxrWVEg.roa
Signing time: Thu 10 Nov 2022 13:45:02 +0000
ROA not before: Thu 10 Nov 2022 13:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.110.62.0/23 maxlen: 23
45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:c9:71:ee:f0:dd:6d:64:44:19:41:cd:d5:33:28:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 10 13:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b759a5bec6b3dc48589522e80b61ce9b1ad65448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:57:e4:73:03:4d:f3:99:f0:a6:5e:c7:3d:
6d:7e:3b:8c:00:70:80:69:95:54:d8:e3:d4:cb:e1:
dd:15:2c:2a:f4:f6:d0:a1:36:62:a4:cb:d3:81:c7:
91:d1:a8:2d:fd:77:3c:1c:28:92:16:44:bc:c3:ee:
ad:89:41:6d:0d:b0:58:5f:3e:db:26:c8:9a:c1:80:
59:03:91:12:ac:b9:f1:9c:02:7f:bd:e5:a8:e1:9c:
e5:df:41:15:a8:cc:48:77:5f:59:4c:fd:d3:c6:a5:
fa:9e:cc:53:97:2d:9e:2c:5b:bb:f6:9e:52:62:9b:
7a:e0:91:14:c4:af:93:e1:b8:43:91:e0:72:ba:63:
fd:a8:cb:a9:9f:7c:c7:ba:ff:e9:55:64:1a:45:a3:
6f:57:44:12:4e:4a:80:ec:3b:01:55:0b:26:e0:b4:
91:86:b2:09:ce:66:5e:90:63:9f:10:e3:bb:65:31:
b7:61:5f:1d:69:82:29:f5:56:09:23:ae:99:49:90:
61:a8:47:11:36:f1:c6:cc:3a:f5:c0:12:69:98:e2:
7a:ed:70:f7:7a:b4:39:6b:ca:36:04:06:61:0d:26:
99:43:e0:87:63:8a:62:f1:85:ed:fc:21:88:6e:ed:
d6:50:8a:87:b4:53:de:3d:44:02:d9:1e:52:8f:ab:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:A5:BE:C6:B3:DC:48:58:95:22:E8:0B:61:CE:9B:1A:D6:54:48
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t1mlvsaz3EhYlSLoC2HOmxrWVEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
185.110.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:56:a9:3c:16:11:7e:dd:18:70:50:75:c0:ae:fb:63:f1:c6:
6d:e8:16:dd:10:68:4e:9a:03:a2:07:a9:4f:8e:81:d1:07:7d:
39:2e:bf:e1:08:e2:02:59:c2:9e:89:ae:ef:b7:c6:09:a3:e9:
a8:39:94:9a:5d:03:b9:4d:d0:bd:4e:38:f0:15:05:2e:ca:fb:
b9:e2:7a:60:27:ed:5f:6d:e3:b7:6a:e3:5a:b1:d7:1c:33:3b:
d2:6c:fd:ea:18:6d:aa:73:ae:53:dc:0f:ee:e6:c9:f2:5a:d5:
6f:9a:93:06:3c:8e:ea:c5:6d:af:45:d7:f0:60:a9:7c:a0:fb:
b9:d5:bc:7f:d6:a7:9e:84:e6:9a:da:06:3f:6d:95:ef:a4:af:
ac:15:94:74:87:e0:4e:62:3f:8c:ed:31:3b:9d:8a:9b:90:1d:
70:ec:30:dd:e8:07:49:d5:c5:6b:95:ab:04:da:c3:ff:cc:1e:
20:cd:12:a1:a7:36:1a:7b:ca:a9:f8:1d:94:08:07:3a:49:01:
e6:ae:32:cf:05:79:c7:97:43:4c:95:82:7c:7e:44:e0:0d:7f:
83:c2:16:dd:42:12:7a:82:09:5f:d1:d5:e0:60:a4:49:d4:89:
90:d6:e5:d6:5f:98:03:47:4a:40:49:86:e0:c5:15:91:9a:75:
bc:cd:88:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRhyXHu8N1tZEQZQc3VMyglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjIxMTEwMTM0NTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzU5YTViZWM2YjNkYzQ4NTg5NTIyZTgwYjYxY2U5YjFhZDY1NDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbBX5HMDTfOZ8KZexz1tfjuMAHCA
aZVU2OPUy+HdFSwq9PbQoTZipMvTgceR0agt/Xc8HCiSFkS8w+6tiUFtDbBYXz7b
JsiawYBZA5ESrLnxnAJ/veWo4Zzl30EVqMxId19ZTP3TxqX6nsxTly2eLFu79p5S
Ypt64JEUxK+T4bhDkeByumP9qMupn3zHuv/pVWQaRaNvV0QSTkqA7DsBVQsm4LSR
hrIJzmZekGOfEOO7ZTG3YV8daYIp9VYJI66ZSZBhqEcRNvHGzDr1wBJpmOJ67XD3
erQ5a8o2BAZhDSaZQ+CHY4pi8YXt/CGIbu3WUIqHtFPePUQC2R5Sj6vXeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLdZpb7Gs9xIWJUi6Athzpsa1lRIMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvdDFtbHZzYXozRWhZbFNMb0MySE9teHJXVkVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYFcAwQB
uW4+MA0GCSqGSIb3DQEBCwUAA4IBAQAfVqk8FhF+3RhwUHXArvtj8cZt6BbdEGhO
mgOiB6lPjoHRB305Lr/hCOICWcKeia7vt8YJo+moOZSaXQO5TdC9TjjwFQUuyvu5
4npgJ+1fbeO3auNasdccMzvSbP3qGG2qc65T3A/u5snyWtVvmpMGPI7qxW2vRdfw
YKl8oPu51bx/1qeehOaa2gY/bZXvpK+sFZR0h+BOYj+M7TE7nYqbkB1w7DDd6AdJ
1cVrlasE2sP/zB4gzRKhpzYae8qp+B2UCAc6SQHmrjLPBXnHl0NMlYJ8fkTgDX+D
whbdQhJ6gglf0dXgYKRJ1ImQ1uXWX5gDR0pASYbgxRWRmnW8zYhz
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:27:33 2025 by rpki-client