Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vi7B4Jk66d_KAyPLnu7F_04caYU.roa
File: Vi7B4Jk66d_KAyPLnu7F_04caYU.roa (raw, json)
Hash identifier: 2CQWKbwgAEticjjcQWOeZ4/h84fR3UEJ0o5yXAc1UF8=
Subject key identifier: 56:2E:C1:E0:99:3A:E9:DF:CA:03:23:CB:9E:EE:C5:FF:4E:1C:69:85
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BC5DEDADE7732761756DFF6234055939B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vi7B4Jk66d_KAyPLnu7F_04caYU.roa
Signing time: Sun 12 Nov 2023 23:29:58 +0000
ROA not before: Sun 12 Nov 2023 23:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207508
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:de:da:de:77:32:76:17:56:df:f6:23:40:55:93:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 12 23:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562ec1e0993ae9dfca0323cb9eeec5ff4e1c6985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:cc:ba:02:04:c5:07:b4:a2:59:54:22:a6:
61:e5:02:13:4c:a1:4e:19:4e:26:37:70:16:8c:f1:
78:92:28:ca:b1:33:5d:00:68:f3:a3:d6:87:c3:c3:
2a:d1:91:b6:46:3d:89:40:10:e9:83:0c:ca:cd:2f:
9a:ba:16:de:62:f2:10:78:dc:c3:d9:01:45:6d:2b:
4b:7d:79:36:98:39:c7:ff:26:ec:32:1c:7c:51:6b:
4c:28:50:e6:f8:fb:09:6e:de:8b:1c:4d:d5:88:6c:
c2:6e:1a:2c:6b:e8:37:f4:d4:b7:07:a7:4a:b1:5c:
bd:ab:94:93:23:60:df:ae:92:26:e0:19:54:09:77:
91:32:36:b2:ad:d9:11:15:fb:f5:c4:d3:7e:1a:db:
4c:81:c8:b4:84:db:b3:99:e8:3f:bf:8a:02:73:ea:
2e:2d:fb:60:99:32:36:17:d4:f1:52:5b:f6:93:c0:
78:49:b9:b8:68:95:22:b3:a6:89:3e:07:13:64:e1:
c5:09:74:59:af:4e:34:8b:ed:65:70:de:55:a4:d4:
31:f8:e9:dc:c8:30:46:73:35:ca:21:57:17:b8:b8:
91:bc:d5:a8:c4:2c:b9:dd:94:ff:54:3f:f0:30:75:
a0:bc:f9:aa:75:86:45:f5:03:d2:9a:14:37:3e:01:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:C1:E0:99:3A:E9:DF:CA:03:23:CB:9E:EE:C5:FF:4E:1C:69:85
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vi7B4Jk66d_KAyPLnu7F_04caYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
36:36:7b:40:7e:14:e2:a1:9d:12:ff:03:de:af:ac:6a:83:e1:
57:43:b1:fc:39:69:00:b2:a2:bc:2b:e9:ff:db:cd:3a:99:fb:
4b:73:26:6f:ff:53:43:ef:0e:f0:c9:42:95:ef:74:7e:a0:bf:
84:69:51:ea:5f:67:32:65:3e:7a:76:e6:d9:28:bb:00:3e:ba:
e0:90:17:0d:c2:7b:59:2a:b7:76:db:5d:b0:2c:c0:cb:d2:45:
47:12:6e:d3:be:22:f8:e0:de:af:ac:9a:b4:70:c5:fd:27:de:
d8:76:16:0d:eb:94:ac:f1:85:53:e3:a9:6c:3b:f9:ed:20:c5:
d5:c1:4c:c7:1a:7d:3e:d8:89:18:8a:b9:63:71:36:a5:65:7b:
d1:28:44:9b:58:ff:cb:48:a0:30:d7:56:bf:18:7b:a9:6b:91:
51:f3:df:15:e2:9e:b7:86:9c:8d:13:77:7d:a2:2e:0b:3f:e5:
35:f8:86:bc:23:4a:28:5a:36:c4:e8:ea:f9:78:46:44:2f:20:
9e:0b:25:ac:f7:97:36:b8:d2:8b:f5:d6:ef:9a:a6:48:56:c7:
28:c0:e0:56:a2:72:5b:52:4a:da:63:f2:29:f4:ed:2e:4b:d0:
63:eb:48:16:e9:c5:32:f8:83:9c:5a:09:21:66:5e:39:32:c1:
5e:05:08:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvF3tredzJ2F1bf9iNAVZObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMxMTEyMjMyOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJlYzFlMDk5M2FlOWRmY2EwMzIzY2I5ZWVlYzVmZjRlMWM2OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU/MugIExQe0ollUIqZh5QITTKFO
GU4mN3AWjPF4kijKsTNdAGjzo9aHw8Mq0ZG2Rj2JQBDpgwzKzS+auhbeYvIQeNzD
2QFFbStLfXk2mDnH/ybsMhx8UWtMKFDm+PsJbt6LHE3ViGzCbhosa+g39NS3B6dK
sVy9q5STI2DfrpIm4BlUCXeRMjayrdkRFfv1xNN+GttMgci0hNuzmeg/v4oCc+ou
LftgmTI2F9TxUlv2k8B4Sbm4aJUis6aJPgcTZOHFCXRZr040i+1lcN5VpNQx+Onc
yDBGczXKIVcXuLiRvNWoxCy53ZT/VD/wMHWgvPmqdYZF9QPSmhQ3PgEDEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYuweCZOunfygMjy57uxf9OHGmFMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvVmk3QjRKazY2ZF9LQXlQTG51N0ZfMDRjYVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgHMA0G
CSqGSIb3DQEBCwUAA4IBAQA2NntAfhTioZ0S/wPer6xqg+FXQ7H8OWkAsqK8K+n/
2806mftLcyZv/1ND7w7wyUKV73R+oL+EaVHqX2cyZT56dubZKLsAPrrgkBcNwntZ
Krd2212wLMDL0kVHEm7TviL44N6vrJq0cMX9J97YdhYN65Ss8YVT46lsO/ntIMXV
wUzHGn0+2IkYirljcTalZXvRKESbWP/LSKAw11a/GHupa5FR898V4p63hpyNE3d9
oi4LP+U1+Ia8I0ooWjbE6Or5eEZELyCeCyWs95c2uNKL9dbvmqZIVscowOBWonJb
UkraY/Ip9O0uS9Bj60gW6cUy+IOcWgkhZl45MsFeBQio
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:21 2025 by rpki-client