Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9MupgU92d4Ov_VHY4xqn9-chfas.roa
File: 9MupgU92d4Ov_VHY4xqn9-chfas.roa (raw, json)
Hash identifier: a4Z+fKfUk6HAGxtBsNyCwiOtxonkdSJMirVgqOUxscs=
Subject key identifier: F4:CB:A9:81:4F:76:77:83:AF:FD:51:D8:E3:1A:A7:F7:E7:21:7D:AB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0188860A1DA98A5FABD13103EF48E2C28FD3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9MupgU92d4Ov_VHY4xqn9-chfas.roa
Signing time: Sun 04 Jun 2023 10:53:09 +0000
ROA not before: Sun 04 Jun 2023 10:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:0a:1d:a9:8a:5f:ab:d1:31:03:ef:48:e2:c2:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 4 10:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4cba9814f767783affd51d8e31aa7f7e7217dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:15:05:a5:07:d9:85:b8:4c:0b:c3:71:e2:
7e:db:4d:59:57:49:9f:66:b8:dc:db:94:02:7e:b1:
3f:92:1f:4f:e9:ac:53:d5:6f:93:e7:fb:a8:77:0d:
be:87:63:83:2c:d8:a0:93:3a:60:ca:b8:d6:eb:7d:
aa:90:b8:8b:7e:e6:ed:a9:5c:f0:17:42:d8:47:74:
ba:28:b5:07:2d:28:93:fb:2b:03:06:47:f9:d3:9f:
28:71:49:59:42:09:86:1a:03:7e:57:ae:30:80:9b:
3d:55:84:88:3e:bf:62:7f:b0:a5:b1:ec:8f:39:8d:
d5:e9:e3:38:b2:f7:6a:1d:23:57:b8:c5:d6:a0:94:
24:e2:0a:aa:81:94:9e:c3:d7:10:af:7f:f6:ae:a3:
c1:5c:a2:de:e6:75:b8:80:cc:20:29:26:f9:ae:9d:
25:79:14:b1:ab:68:f1:f2:d1:58:96:ef:32:72:67:
21:98:15:22:ff:1b:76:2c:1f:02:6b:46:31:48:d4:
fb:5c:51:46:9e:6b:70:f5:64:96:aa:09:28:30:65:
b9:16:2a:76:73:14:b9:65:d4:77:65:e6:96:7c:8f:
55:76:f7:5c:8e:21:88:d9:6f:c5:4e:fa:ba:27:7a:
4a:ba:0f:43:be:e6:56:c9:71:19:1e:21:11:d4:fb:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:A9:81:4F:76:77:83:AF:FD:51:D8:E3:1A:A7:F7:E7:21:7D:AB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9MupgU92d4Ov_VHY4xqn9-chfas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/23
45.136.7.0/24
45.141.148.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7c:66:44:24:58:98:da:6c:7f:9d:23:d4:f3:ed:46:68:d5:
68:60:02:4f:33:0b:0f:fd:c2:af:ea:89:95:03:dd:11:20:a3:
dd:79:1f:ae:7e:d8:25:d1:a6:f7:84:db:6e:5f:88:11:5d:24:
4f:82:51:3d:d0:21:48:a7:a5:50:22:cf:1a:1a:f7:ef:79:c2:
5e:60:61:85:63:4b:f4:ce:32:0b:03:d4:bf:a7:e6:52:96:85:
92:fa:48:65:58:8a:8d:8a:f5:f6:01:fa:79:39:8b:bb:eb:32:
ab:86:0f:26:19:7c:8b:a6:90:1b:3a:d0:92:7a:d1:c4:03:ab:
a7:2a:fb:65:b4:98:4b:17:3e:0c:c2:65:06:13:7d:a4:f6:1e:
67:17:d9:30:2f:18:d4:3d:75:c7:ca:92:a7:30:34:bd:29:0d:
22:e2:9c:d9:50:ac:66:aa:28:b5:c4:5a:db:76:59:52:58:b4:
60:b9:58:89:34:54:53:6a:55:81:56:36:b9:d2:7d:7b:84:2a:
56:19:c3:96:f6:31:15:22:59:1d:90:61:45:ab:85:d4:67:21:
b8:c8:1e:64:8b:33:5d:bf:49:0c:7d:30:e4:59:48:9b:2d:68:
73:69:fc:3e:f1:46:a7:de:48:bc:7d:96:f4:18:47:e8:cc:38:
24:68:d0:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiGCh2pil+r0TED70jiwo/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwNjA0MTA1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNiYTk4MTRmNzY3NzgzYWZmZDUxZDhlMzFhYTdmN2U3MjE3ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRMVBaUH2YW4TAvDceJ+201ZV0mf
Zrjc25QCfrE/kh9P6axT1W+T5/uodw2+h2ODLNigkzpgyrjW632qkLiLfubtqVzw
F0LYR3S6KLUHLSiT+ysDBkf5058ocUlZQgmGGgN+V64wgJs9VYSIPr9if7ClseyP
OY3V6eM4svdqHSNXuMXWoJQk4gqqgZSew9cQr3/2rqPBXKLe5nW4gMwgKSb5rp0l
eRSxq2jx8tFYlu8ycmchmBUi/xt2LB8Ca0YxSNT7XFFGnmtw9WSWqgkoMGW5Fip2
cxS5ZdR3ZeaWfI9VdvdcjiGI2W/FTvq6J3pKug9DvuZWyXEZHiER1PurdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPTLqYFPdneDr/1R2OMap/fnIX2rMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvOU11cGdVOTJkNE92X1ZIWTR4cW45LWNoZmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYMCAwQA
LYgHAwQALY2UMA0GCSqGSIb3DQEBCwUAA4IBAQAYfGZEJFiY2mx/nSPU8+1GaNVo
YAJPMwsP/cKv6omVA90RIKPdeR+uftgl0ab3hNtuX4gRXSRPglE90CFIp6VQIs8a
GvfvecJeYGGFY0v0zjILA9S/p+ZSloWS+khlWIqNivX2Afp5OYu76zKrhg8mGXyL
ppAbOtCSetHEA6unKvtltJhLFz4MwmUGE32k9h5nF9kwLxjUPXXHypKnMDS9KQ0i
4pzZUKxmqii1xFrbdllSWLRguViJNFRTalWBVja50n17hCpWGcOW9jEVIlkdkGFF
q4XUZyG4yB5kizNdv0kMfTDkWUibLWhzafw+8Uan3ki8fZb0GEfozDgkaNCT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:58 2025 by rpki-client