Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/oWOWHey8lVuJTIee8i_VveKzyCk.roa
File: oWOWHey8lVuJTIee8i_VveKzyCk.roa (raw, json)
Hash identifier: aUemzyPIQ86k9q2oMsDzv0wZxYhkJdG9EomMrPCdunE=
Subject key identifier: A1:63:96:1D:EC:BC:95:5B:89:4C:87:9E:F2:2F:D5:BD:E2:B3:C8:29
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 01872D2E1B5F62A9B11C5A2674A84CAE9B87
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/oWOWHey8lVuJTIee8i_VveKzyCk.roa
Signing time: Wed 29 Mar 2023 11:43:28 +0000
ROA not before: Wed 29 Mar 2023 11:43:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204068
IP address blocks: 45.129.57.0/24 maxlen: 24
2a03:1b20:beee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:2e:1b:5f:62:a9:b1:1c:5a:26:74:a8:4c:ae:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Mar 29 11:43:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a163961decbc955b894c879ef22fd5bde2b3c829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9a:df:96:d9:aa:0f:51:4a:ad:70:46:79:d8:
8c:2e:b9:d4:9b:9c:24:3c:40:0e:81:bb:91:a2:7b:
00:5e:eb:05:21:87:11:aa:3b:c9:fb:d0:ce:3c:49:
e2:b2:14:99:2c:fb:a1:69:b3:73:cf:79:7c:ed:2a:
c0:13:46:6d:82:e8:2c:3d:bb:c4:28:49:40:97:e6:
2a:d9:39:bb:4e:5c:ee:1e:e3:c8:4a:6f:66:3c:26:
fe:c6:f6:42:34:43:b3:9c:a2:23:82:bb:4d:d9:91:
18:76:90:85:c5:f4:fc:68:40:f6:08:63:a3:fa:db:
9e:27:6e:26:4a:73:ee:d3:7d:33:0a:3b:ef:1f:36:
b9:31:66:94:49:48:b6:31:08:52:51:0f:ef:46:31:
fa:57:ce:8a:26:67:64:de:3a:22:1d:98:0d:af:ec:
7f:5a:10:d7:84:34:23:8f:83:b8:d4:b8:11:39:a1:
01:5e:73:37:30:1d:09:41:d9:4b:33:74:75:24:37:
df:a2:87:43:ff:06:81:3c:f8:f9:86:a2:b1:c8:1a:
70:f7:00:ec:1f:f9:53:3c:ba:22:33:f3:67:ad:aa:
53:40:f7:f9:3b:ba:98:d0:79:ea:0e:7c:d6:e9:ae:
57:ba:83:db:d6:de:aa:88:d2:d7:55:a4:e8:5a:47:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:96:1D:EC:BC:95:5B:89:4C:87:9E:F2:2F:D5:BD:E2:B3:C8:29
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/oWOWHey8lVuJTIee8i_VveKzyCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.57.0/24
IPv6:
2a03:1b20:beee::/48
Signature Algorithm: sha256WithRSAEncryption
55:66:b0:05:8e:74:a1:56:f4:7a:49:f4:03:93:24:66:c8:2a:
c2:41:84:75:15:05:86:f7:77:c3:d4:b0:e0:07:00:49:42:9e:
3a:10:29:ac:fb:4e:c4:63:94:2c:3a:7a:da:1b:c8:4f:ef:fc:
9e:96:dd:20:77:f5:c0:5d:a2:25:8b:30:07:eb:3e:c3:31:3b:
ac:26:3b:65:d2:ad:21:13:b1:5d:dd:c3:ba:62:4c:b7:9b:59:
10:c7:2f:08:36:ba:17:ef:30:d8:37:83:fb:ba:fa:9c:3d:d1:
0d:47:d0:5d:de:11:3e:5c:f9:71:41:d1:a0:5d:69:8e:6c:98:
ab:f8:6a:95:ad:10:30:3f:17:cf:03:86:63:5a:a0:05:fe:b1:
b9:73:40:b6:f0:49:f4:5c:e5:9d:69:ad:f9:3e:67:7a:0c:b8:
08:a8:60:10:2f:3d:c9:c8:46:7f:a2:5e:f9:21:b3:14:e8:eb:
26:ac:df:b3:63:07:7d:28:66:7a:51:35:d7:55:e8:d2:d9:31:
c7:46:9f:fe:53:9c:ee:f6:f0:d6:66:60:4f:bc:86:fd:d9:18:
91:fb:65:17:3d:68:b0:87:78:b1:ac:eb:d5:fe:10:92:72:34:
bc:40:c1:03:40:a4:59:92:cc:d4:0f:03:fd:a0:c1:5c:46:ff:
99:f7:1d:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYctLhtfYqmxHFomdKhMrpuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjMwMzI5MTE0MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTYzOTYxZGVjYmM5NTViODk0Yzg3OWVmMjJmZDViZGUyYjNjODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJrfltmqD1FKrXBGediMLrnUm5wk
PEAOgbuRonsAXusFIYcRqjvJ+9DOPEnishSZLPuhabNzz3l87SrAE0ZtgugsPbvE
KElAl+Yq2Tm7TlzuHuPISm9mPCb+xvZCNEOznKIjgrtN2ZEYdpCFxfT8aED2CGOj
+tueJ24mSnPu030zCjvvHza5MWaUSUi2MQhSUQ/vRjH6V86KJmdk3joiHZgNr+x/
WhDXhDQjj4O41LgROaEBXnM3MB0JQdlLM3R1JDffoodD/waBPPj5hqKxyBpw9wDs
H/lTPLoiM/NnrapTQPf5O7qY0HnqDnzW6a5XuoPb1t6qiNLXVaToWkdUfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKFjlh3svJVbiUyHnvIv1b3is8gpMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvb1dPV0hleThsVnVKVEllZThpX1Z2ZUt6eUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYE5MA8E
AgACMAkDBwAqAxsgvu4wDQYJKoZIhvcNAQELBQADggEBAFVmsAWOdKFW9HpJ9AOT
JGbIKsJBhHUVBYb3d8PUsOAHAElCnjoQKaz7TsRjlCw6etobyE/v/J6W3SB39cBd
oiWLMAfrPsMxO6wmO2XSrSETsV3dw7piTLebWRDHLwg2uhfvMNg3g/u6+pw90Q1H
0F3eET5c+XFB0aBdaY5smKv4apWtEDA/F88DhmNaoAX+sblzQLbwSfRc5Z1prfk+
Z3oMuAioYBAvPcnIRn+iXvkhsxTo6yas37NjB30oZnpRNddV6NLZMcdGn/5TnO72
8NZmYE+8hv3ZGJH7ZRc9aLCHeLGs69X+EJJyNLxAwQNApFmSzNQPA/2gwVxG/5n3
Hfk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:47:12 2025 by rpki-client