Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/b9Vl3ChOMAx-clkHItXyX-uPyMQ.roa
File: b9Vl3ChOMAx-clkHItXyX-uPyMQ.roa (raw, json)
Hash identifier: ahVtuKEypkpmripB12CB4+fPa5M9auaN53K9hnuJ6OQ=
Subject key identifier: 6F:D5:65:DC:28:4E:30:0C:7E:72:59:07:22:D5:F2:5F:EB:8F:C8:C4
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0183A70DFC0C3795E1FD02E3072FB4E35C0F
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/b9Vl3ChOMAx-clkHItXyX-uPyMQ.roa
Signing time: Wed 05 Oct 2022 07:30:55 +0000
ROA not before: Wed 05 Oct 2022 07:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 45.156.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:0d:fc:0c:37:95:e1:fd:02:e3:07:2f:b4:e3:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 5 07:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd565dc284e300c7e72590722d5f25feb8fc8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:df:26:e0:46:90:7a:ed:ef:00:97:c7:dc:
d6:b8:62:25:f6:4c:a9:9e:59:0f:ff:2f:1a:cb:79:
cf:fb:67:d0:fc:ad:c9:cb:46:72:3f:95:59:40:17:
b8:41:b1:29:47:59:ea:92:b8:42:d2:4f:68:e3:00:
cf:c8:8d:48:45:c8:ec:ce:72:ab:95:60:94:fb:d4:
3a:37:07:21:65:85:a1:6e:94:36:f8:35:8c:d8:5e:
0e:80:70:19:5b:b5:25:d1:f8:4f:4e:45:78:77:6b:
70:98:bc:b7:9a:e3:6f:8b:83:18:56:a8:ae:a2:6d:
2d:7e:93:c6:1f:74:7b:9f:f3:54:70:d0:5c:52:cf:
b4:55:9e:99:24:cf:76:6c:10:ec:b4:ee:a7:94:0f:
4b:27:b7:25:61:bc:0a:98:d8:32:8b:0d:b2:78:e8:
48:ed:a8:ea:c9:04:9a:80:41:89:2d:7e:40:95:a0:
6a:11:bd:a2:dd:43:b8:4f:8d:0d:f1:0a:e2:d5:5a:
d5:d8:6d:2d:2b:f3:d0:0d:6a:c5:1a:6c:a4:5d:99:
e3:da:a8:70:9d:bb:c6:25:e6:00:02:08:0b:35:47:
4f:46:b6:97:5a:5b:6f:82:1f:93:97:2e:de:4c:54:
8d:94:66:66:64:3c:17:59:d5:24:22:e7:24:35:61:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:65:DC:28:4E:30:0C:7E:72:59:07:22:D5:F2:5F:EB:8F:C8:C4
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/b9Vl3ChOMAx-clkHItXyX-uPyMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5f:70:bc:a5:93:f3:61:ae:81:73:55:55:34:f0:74:26:ca:
24:2d:c4:34:ec:e5:18:d4:ce:8d:e6:47:45:8e:54:8d:be:36:
b7:e9:31:6f:ec:9a:2c:00:d7:cd:d9:4d:d5:91:26:00:34:36:
35:a7:37:53:18:b4:39:6c:55:d3:2b:de:43:23:0f:65:ff:6b:
68:95:af:9d:81:96:aa:5a:a1:00:14:13:bd:27:20:ec:26:99:
67:7d:ee:c3:9f:15:21:31:4e:df:97:fe:77:7a:a8:95:39:c7:
ad:4c:25:ab:2d:30:fa:14:55:1d:b6:61:01:1a:0b:f2:89:a1:
a2:7b:f2:e7:75:32:6b:bc:12:e0:94:08:d6:24:e1:5a:4e:1c:
6f:ee:fd:6a:a7:8e:00:01:dc:8b:d0:41:0e:4d:7c:e9:be:ce:
e9:f3:85:fd:56:67:c8:4a:f7:64:31:77:2e:8f:ed:70:91:99:
89:f3:6a:e5:0d:ba:3d:1a:15:d8:6c:25:d6:ee:70:53:19:22:
19:fe:78:ec:c6:46:03:e4:91:48:0d:dd:15:e0:09:db:f3:e5:
f3:0e:4b:80:20:e7:a8:10:c3:9e:b0:cf:5b:be:11:11:08:1e:
aa:b9:2d:1d:79:ee:20:be:9f:82:bf:47:48:da:43:57:b3:bd:
48:04:25:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOnDfwMN5Xh/QLjBy+041wPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjIxMDA1MDczMDU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ1NjVkYzI4NGUzMDBjN2U3MjU5MDcyMmQ1ZjI1ZmViOGZjOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/fJuBGkHrt7wCXx9zWuGIl9kyp
nlkP/y8ay3nP+2fQ/K3Jy0ZyP5VZQBe4QbEpR1nqkrhC0k9o4wDPyI1IRcjsznKr
lWCU+9Q6NwchZYWhbpQ2+DWM2F4OgHAZW7Ul0fhPTkV4d2twmLy3muNvi4MYVqiu
om0tfpPGH3R7n/NUcNBcUs+0VZ6ZJM92bBDstO6nlA9LJ7clYbwKmNgyiw2yeOhI
7ajqyQSagEGJLX5AlaBqEb2i3UO4T40N8Qri1VrV2G0tK/PQDWrFGmykXZnj2qhw
nbvGJeYAAggLNUdPRraXWltvgh+Tly7eTFSNlGZmZDwXWdUkIuckNWGSuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/VZdwoTjAMfnJZByLV8l/rj8jEMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvYjlWbDNDaE9NQXgtY2xrSEl0WHlYLXVQeU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZySMA0G
CSqGSIb3DQEBCwUAA4IBAQC+X3C8pZPzYa6Bc1VVNPB0JsokLcQ07OUY1M6N5kdF
jlSNvja36TFv7JosANfN2U3VkSYANDY1pzdTGLQ5bFXTK95DIw9l/2tola+dgZaq
WqEAFBO9JyDsJplnfe7DnxUhMU7fl/53eqiVOcetTCWrLTD6FFUdtmEBGgvyiaGi
e/LndTJrvBLglAjWJOFaThxv7v1qp44AAdyL0EEOTXzpvs7p84X9VmfISvdkMXcu
j+1wkZmJ82rlDbo9GhXYbCXW7nBTGSIZ/njsxkYD5JFIDd0V4Anb8+XzDkuAIOeo
EMOesM9bvhERCB6quS0dee4gvp+Cv0dI2kNXs71IBCX5
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:30 2025 by rpki-client