Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Oy4HdoNr8Dqjl0qwWdKdr_iQFIU.roa
File: Oy4HdoNr8Dqjl0qwWdKdr_iQFIU.roa (raw, json)
Hash identifier: XqPnfwdZG2JRyvZeHzR21TQCvzK/Cm/P8f7j5bZ5zdI=
Subject key identifier: 3B:2E:07:76:83:6B:F0:3A:A3:97:4A:B0:59:D2:9D:AF:F8:90:14:85
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0730E016
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Oy4HdoNr8Dqjl0qwWdKdr_iQFIU.roa
Signing time: Sat 01 Jan 2022 14:08:18 +0000
ROA not before: Sat 01 Jan 2022 14:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.45.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120643606 (0x730e016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b2e0776836bf03aa3974ab059d29daff8901485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:d2:6a:c5:68:cc:13:11:8f:ff:e7:90:d4:
5c:20:61:ba:9e:5e:f0:21:c8:80:23:24:fe:ef:55:
4f:25:f3:3d:4b:4c:f7:15:cd:9f:26:a8:40:4e:8e:
25:3c:65:96:28:35:1f:f9:0b:9c:4c:d0:1f:92:51:
f1:20:d4:30:1c:60:12:5e:99:93:97:f4:80:d0:b0:
65:5f:c6:0a:af:3d:06:36:91:f6:a4:23:1c:57:01:
ab:a0:5a:98:04:1a:03:ee:dc:5c:bb:0f:3a:8e:61:
c9:b7:ab:b7:37:7e:e7:e5:3d:e9:96:18:f6:f2:f3:
14:73:b9:74:6d:53:bd:1a:c4:3b:11:6b:79:93:6f:
f1:70:7e:4f:b5:5e:3b:73:d0:7e:5c:c8:cc:31:55:
ec:26:93:86:58:d6:b6:85:09:56:07:ec:ef:1b:a7:
9e:01:8d:d2:84:30:97:10:ca:ea:96:86:5b:cb:d8:
cb:e8:a8:08:cd:b9:2b:89:09:e1:fc:8b:b9:06:20:
7f:20:f1:02:c5:ea:e9:62:45:82:c7:dc:78:c1:58:
96:72:c6:16:4f:04:1f:1e:8d:83:1d:06:de:d3:41:
ba:b9:50:6c:24:91:b2:aa:5c:2d:1c:fd:e7:96:8e:
48:f2:61:b3:ee:82:17:ba:71:ca:e3:e0:9e:34:ed:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:07:76:83:6B:F0:3A:A3:97:4A:B0:59:D2:9D:AF:F8:90:14:85
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Oy4HdoNr8Dqjl0qwWdKdr_iQFIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7a:89:84:e0:42:ff:55:d0:88:54:88:29:df:1f:f0:57:3d:
10:a7:c7:97:22:31:d3:cf:e2:c8:13:d8:1d:22:e6:ce:a4:01:
32:03:78:03:e7:77:ee:7a:6a:8e:4e:2d:5c:95:02:ef:ce:46:
c9:a6:bd:64:93:42:9d:44:86:85:2f:db:b5:82:0d:c3:b3:7d:
0c:8e:24:1d:f3:59:54:a9:81:21:fe:2e:06:f6:5c:f9:fa:44:
05:0c:0e:39:00:47:be:4c:48:7d:dc:40:98:36:27:ca:41:6d:
5d:31:38:c3:60:d9:7f:18:58:b4:86:84:35:2f:2d:1b:a2:3e:
96:98:1a:5a:1d:d8:86:78:43:4d:27:f0:8a:7a:a7:57:0f:35:
99:d7:ea:ff:4f:a2:78:45:ab:eb:93:ba:32:d1:fc:4e:d6:4b:
b6:7f:fe:7e:5e:dc:cd:57:56:e7:bf:d4:e7:be:98:3b:00:01:
d8:03:1f:57:51:18:24:02:00:98:49:eb:c3:9c:53:bf:88:0a:
0e:c6:c6:d1:e1:48:b4:79:13:5c:ac:35:2e:83:b8:9b:ba:ec:
5c:d5:2a:68:9a:48:27:75:6d:e5:cf:9e:c2:c2:73:18:f8:ad:
af:09:fa:d1:01:66:03:0c:76:a1:c0:63:27:5e:15:a8:93:c1:
4f:bf:da:96
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBzDgFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDEw
MTE0MDgxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2IyZTA3NzY4MzZi
ZjAzYWEzOTc0YWIwNTlkMjlkYWZmODkwMTQ4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKUF0mrFaMwTEY//55DUXCBhup5e8CHIgCMk/u9VTyXzPUtM
9xXNnyaoQE6OJTxllig1H/kLnEzQH5JR8SDUMBxgEl6Zk5f0gNCwZV/GCq89BjaR
9qQjHFcBq6BamAQaA+7cXLsPOo5hybertzd+5+U96ZYY9vLzFHO5dG1TvRrEOxFr
eZNv8XB+T7VeO3PQflzIzDFV7CaThljWtoUJVgfs7xunngGN0oQwlxDK6paGW8vY
y+ioCM25K4kJ4fyLuQYgfyDxAsXq6WJFgsfceMFYlnLGFk8EHx6Ngx0G3tNBurlQ
bCSRsqpcLRz955aOSPJhs+6CF7pxyuPgnjTtrG0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ7Lgd2g2vwOqOXSrBZ0p2v+JAUhTAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L095NEhkb05yOERxamwwcXdXZEtkcl9pUUZJVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAW0aAMEAC2TLTANBgkqhkiG9w0B
AQsFAAOCAQEAmXqJhOBC/1XQiFSIKd8f8Fc9EKfHlyIx08/iyBPYHSLmzqQBMgN4
A+d37npqjk4tXJUC785Gyaa9ZJNCnUSGhS/btYINw7N9DI4kHfNZVKmBIf4uBvZc
+fpEBQwOOQBHvkxIfdxAmDYnykFtXTE4w2DZfxhYtIaENS8tG6I+lpgaWh3YhnhD
TSfwinqnVw81mdfq/0+ieEWr65O6MtH8TtZLtn/+fl7czVdW57/U576YOwAB2AMf
V1EYJAIAmEnrw5xTv4gKDsbG0eFItHkTXKw1LoO4m7rsXNUqaJpIJ3Vt5c+ewsJz
GPitrwn60QFmAwx2ocBjJ14VqJPBT7/alg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:48 2025 by rpki-client