Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/90aVgxCzWG-8rW7s2Vqqt5Sz1Xc.roa
File: 90aVgxCzWG-8rW7s2Vqqt5Sz1Xc.roa (raw, json)
Hash identifier: 3DuwWWvVxwLicBdwoxiVjOAP+ow4Nj3BpNqxi7iUZoA=
Subject key identifier: F7:46:95:83:10:B3:58:6F:BC:AD:6E:EC:D9:5A:AA:B7:94:B3:D5:77
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0188D35900C5C910F552FDE696654B7232DA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/90aVgxCzWG-8rW7s2Vqqt5Sz1Xc.roa
Signing time: Mon 19 Jun 2023 11:10:05 +0000
ROA not before: Mon 19 Jun 2023 11:10:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:59:00:c5:c9:10:f5:52:fd:e6:96:65:4b:72:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 19 11:10:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f746958310b3586fbcad6eecd95aaab794b3d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:41:6f:7c:df:fd:46:5e:fa:88:51:44:38:3a:
d0:b2:ba:0b:fe:cc:bc:69:8d:c7:09:a5:27:6b:1a:
3a:a8:b0:a1:42:46:39:60:ab:49:99:4a:d6:02:69:
e7:2a:82:f2:b2:2a:17:2c:95:6a:21:aa:4e:06:ab:
b1:a0:e4:c8:d9:6b:65:d3:6d:7c:bf:67:ab:fa:7f:
ab:0d:c2:03:76:60:c2:9b:a8:14:74:de:2c:47:1f:
09:2b:aa:fc:2d:a2:79:c2:8a:49:3e:ca:70:03:e7:
21:44:fe:c6:7f:f0:f9:03:bb:db:3a:e7:d2:d0:74:
09:ab:96:1b:f3:9b:73:16:cc:53:83:c3:46:42:a4:
11:3d:9e:0c:a7:07:18:b1:c0:e4:ca:74:60:ec:b0:
fb:21:98:9c:94:c3:8c:a1:56:c1:79:80:02:ef:b4:
7c:61:9e:74:b6:18:b2:c3:21:26:5d:75:ce:2c:a4:
48:07:48:f4:ad:e3:c0:cd:8f:5a:20:12:6d:cc:5b:
81:20:2f:a8:fd:91:01:fe:97:1e:b5:6d:ca:da:cd:
b8:6a:af:98:52:4c:a3:47:76:be:72:86:73:17:17:
0f:8e:7b:bc:67:aa:2f:ca:11:33:03:7d:6e:7d:cb:
47:1e:a7:37:ed:8b:20:74:b3:a2:92:06:cf:11:f3:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:95:83:10:B3:58:6F:BC:AD:6E:EC:D9:5A:AA:B7:94:B3:D5:77
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/90aVgxCzWG-8rW7s2Vqqt5Sz1Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5f:f3:31:9b:bc:87:cc:4a:88:8a:f8:e5:3c:ee:eb:a0:50:
34:15:43:e2:18:8c:94:9e:51:31:fb:9e:67:29:1f:e3:af:33:
25:75:76:e5:b3:92:a8:4a:9a:db:3e:d4:2b:90:61:f1:b0:dc:
45:fb:31:15:f1:c3:ca:de:aa:7f:36:d6:b2:22:9e:ec:d2:ab:
70:9c:32:23:36:c2:f6:b0:5a:d2:d9:e0:93:38:e1:a3:30:cf:
5f:cb:2f:96:09:3d:fb:25:e5:13:73:f0:36:d9:76:69:16:06:
0a:31:0e:45:9a:8c:a4:ef:88:3d:3f:ec:cd:34:a5:cc:8f:8b:
a3:8d:b0:d9:98:07:54:30:52:41:47:b5:ba:60:ec:00:89:61:
af:3b:7f:6d:8e:76:65:77:8c:c7:0c:09:33:17:ea:e5:93:a6:
68:c4:e5:10:a0:bd:19:eb:fb:7b:ff:93:a3:4b:92:d0:63:0e:
03:6f:47:a3:ce:2d:ae:44:08:57:95:c9:c9:5d:3d:73:0d:df:
53:47:29:0c:c8:f2:74:06:cc:4e:1d:af:b0:49:8b:3b:06:1d:
d9:fd:cd:fc:33:08:29:4b:d1:74:51:cb:18:35:fa:4c:03:47:
c4:2e:b4:5f:c0:2b:bd:82:22:ab:98:d2:79:86:bb:f0:cb:94:
43:69:bd:6c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjTWQDFyRD1Uv3mlmVLcjLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwNjE5MTExMDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzQ2OTU4MzEwYjM1ODZmYmNhZDZlZWNkOTVhYWFiNzk0YjNkNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEFvfN/9Rl76iFFEODrQsroL/sy8
aY3HCaUnaxo6qLChQkY5YKtJmUrWAmnnKoLysioXLJVqIapOBquxoOTI2Wtl0218
v2er+n+rDcIDdmDCm6gUdN4sRx8JK6r8LaJ5wopJPspwA+chRP7Gf/D5A7vbOufS
0HQJq5Yb85tzFsxTg8NGQqQRPZ4MpwcYscDkynRg7LD7IZiclMOMoVbBeYAC77R8
YZ50thiywyEmXXXOLKRIB0j0rePAzY9aIBJtzFuBIC+o/ZEB/pcetW3K2s24aq+Y
UkyjR3a+coZzFxcPjnu8Z6ovyhEzA31ufctHHqc37YsgdLOikgbPEfMlQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPdGlYMQs1hvvK1u7NlaqreUs9V3MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvOTBhVmd4Q3pXRy04clc3czJWcXF0NVN6MVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYMDAwQA
LYgHMA0GCSqGSIb3DQEBCwUAA4IBAQA6X/Mxm7yHzEqIivjlPO7roFA0FUPiGIyU
nlEx+55nKR/jrzMldXbls5KoSprbPtQrkGHxsNxF+zEV8cPK3qp/NtayIp7s0qtw
nDIjNsL2sFrS2eCTOOGjMM9fyy+WCT37JeUTc/A22XZpFgYKMQ5Fmoyk74g9P+zN
NKXMj4ujjbDZmAdUMFJBR7W6YOwAiWGvO39tjnZld4zHDAkzF+rlk6ZoxOUQoL0Z
6/t7/5OjS5LQYw4Db0ejzi2uRAhXlcnJXT1zDd9TRykMyPJ0BsxOHa+wSYs7Bh3Z
/c38MwgpS9F0UcsYNfpMA0fELrRfwCu9giKrmNJ5hrvwy5RDab1s
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:28 2025 by rpki-client