Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/J1bv1TlslqEeZUZxpYdLCuMSr_s.roa
File: J1bv1TlslqEeZUZxpYdLCuMSr_s.roa (raw, json)
Hash identifier: JZ3jqmQ4hAgJOgZNSU/yJfYAr4PM6eRXcYZjwUXDBbI=
Subject key identifier: 27:56:EF:D5:39:6C:96:A1:1E:65:46:71:A5:87:4B:0A:E3:12:AF:FB
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 070D7F87
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/J1bv1TlslqEeZUZxpYdLCuMSr_s.roa
Signing time: Tue 21 Jun 2022 07:24:47 +0000
ROA not before: Tue 21 Jun 2022 07:24:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208789
IP address blocks: 45.85.52.0/22 maxlen: 24
2a0e:b880::/29 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118325127 (0x70d7f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jun 21 07:24:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2756efd5396c96a11e654671a5874b0ae312affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:fb:a0:7a:bc:7a:9e:64:f4:62:ac:43:c9:
64:24:15:dd:31:b5:ca:68:53:fd:a6:1d:10:25:46:
d1:9c:3e:11:09:60:bd:cf:cf:4b:21:55:ee:e3:17:
f4:2a:6e:01:6a:42:ec:e5:a9:8d:08:99:9d:43:e8:
58:00:9e:8f:9a:7f:c7:d9:55:5f:55:23:43:d9:82:
3f:e7:39:f2:13:d7:0d:fe:c2:ed:e9:a1:db:04:1e:
5b:07:1b:c9:b2:5e:81:7e:95:4b:4f:cb:d4:2e:02:
32:f5:24:c3:5d:e4:e1:a4:48:da:0a:8d:9d:c7:46:
ed:fa:22:35:3e:e8:c0:63:8c:dd:38:29:fc:71:36:
b0:fe:c6:6e:5f:12:1d:f8:ef:17:94:0e:03:bd:53:
a7:1e:cb:70:b2:79:f5:b4:7a:d4:1d:76:87:99:f7:
3f:65:27:9f:b5:10:c3:fc:85:01:ed:23:46:e8:8e:
3a:87:06:4a:33:7f:f7:df:ed:0c:f5:12:78:54:0a:
74:ea:27:77:93:83:68:33:cc:99:6f:52:3a:cd:ce:
19:da:34:75:e6:2c:ec:1a:bc:5a:93:79:64:c7:09:
ec:46:6d:07:8f:ca:fc:36:57:07:2e:4a:63:97:f1:
c5:14:2d:27:bc:26:b2:1a:4b:36:57:aa:6f:ee:de:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:EF:D5:39:6C:96:A1:1E:65:46:71:A5:87:4B:0A:E3:12:AF:FB
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/J1bv1TlslqEeZUZxpYdLCuMSr_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.52.0/22
IPv6:
2a0e:b880::/29
Signature Algorithm: sha256WithRSAEncryption
1a:23:06:1b:3b:b2:8b:49:51:89:be:f1:56:af:59:08:cc:68:
0f:4e:d8:4e:b4:e6:ae:34:bd:66:88:8d:0e:5e:19:6d:28:e4:
db:57:c3:76:b7:65:89:77:ec:89:f8:ef:c4:08:8e:8f:4e:b9:
b2:be:ef:ec:ef:48:59:00:88:ee:ff:16:2c:71:a8:ca:b6:1b:
b0:d2:d2:cd:76:75:7e:a2:4a:22:12:a1:e3:76:fc:01:3c:46:
d1:db:42:72:f2:e9:0a:39:ac:a3:7a:cd:7b:02:83:a2:53:cf:
32:cc:8e:52:b5:64:81:c4:fd:fe:b0:fb:05:d2:e5:81:77:c5:
12:3a:a6:59:a5:9b:d3:ad:1c:ac:d3:61:70:03:8e:f9:e8:9b:
20:29:bb:27:f7:7a:e4:09:a4:4f:63:ab:f3:d4:1f:3f:d3:86:
b5:07:a6:7b:4c:18:d9:f3:f8:71:e3:09:03:4c:96:14:2b:d7:
93:5e:6b:b5:d5:c3:d1:d2:90:79:e3:c0:ca:7e:38:dd:2a:84:
2d:0f:c4:44:76:52:52:9b:79:35:bd:df:5f:90:9b:d9:80:1e:
7e:8d:83:0a:79:f2:e1:a2:4b:c7:09:3d:74:73:f0:c1:fa:bb:
e3:c9:7d:1a:cd:33:53:b6:5c:5f:33:4b:e0:02:c7:d0:f6:4c:
30:50:bd:32
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBw1/hzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OWYzOWQ2YzhiMjNmY2RjMjBlNTMxNzRlOTJmYjNmNTZjYWE4YjYxMB4XDTIyMDYy
MTA3MjQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc1NmVmZDUzOTZj
OTZhMTFlNjU0NjcxYTU4NzRiMGFlMzEyYWZmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6p+6B6vHqeZPRirEPJZCQV3TG1ymhT/aYdECVG0Zw+EQlg
vc/PSyFV7uMX9CpuAWpC7OWpjQiZnUPoWACej5p/x9lVX1UjQ9mCP+c58hPXDf7C
7emh2wQeWwcbybJegX6VS0/L1C4CMvUkw13k4aRI2gqNncdG7foiNT7owGOM3Tgp
/HE2sP7Gbl8SHfjvF5QOA71Tpx7LcLJ59bR61B12h5n3P2Unn7UQw/yFAe0jRuiO
OocGSjN/99/tDPUSeFQKdOond5ODaDPMmW9SOs3OGdo0deYs7Bq8WpN5ZMcJ7EZt
B4/K/DZXBy5KY5fxxRQtJ7wmshpLNleqb+7e5UkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQnVu/VOWyWoR5lRnGlh0sK4xKv+zAfBgNVHSMEGDAWgBRJ851siyP83CDl
MXTpL7P1bKqLYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NmT2RiSXNqX053ZzVURjA2Uy16OVd5cWkyRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvMTY0NjBmLWU0OTgtNGY3Yi05YjkwLTdhNTA0M2M5MThmOS8x
L0oxYnYxVGxzbHFFZVpVWnhwWWRMQ3VNU3Jfcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
MTY0NjBmLWU0OTgtNGY3Yi05YjkwLTdhNTA0M2M5MThmOS8xL1NmT2RiSXNqX053
ZzVURjA2Uy16OVd5cWkyRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1VNDANBAIAAjAHAwUDKg64gDAN
BgkqhkiG9w0BAQsFAAOCAQEAGiMGGzuyi0lRib7xVq9ZCMxoD07YTrTmrjS9ZoiN
Dl4ZbSjk21fDdrdliXfsifjvxAiOj065sr7v7O9IWQCI7v8WLHGoyrYbsNLSzXZ1
fqJKIhKh43b8ATxG0dtCcvLpCjmso3rNewKDolPPMsyOUrVkgcT9/rD7BdLlgXfF
EjqmWaWb060crNNhcAOO+eibICm7J/d65AmkT2Or89QfP9OGtQeme0wY2fP4ceMJ
A0yWFCvXk15rtdXD0dKQeePAyn443SqELQ/ERHZSUpt5Nb3fX5Cb2YAefo2DCnny
4aJLxwk9dHPwwfq748l9Gs0zU7ZcXzNL4ALH0PZMMFC9Mg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:52 2025 by rpki-client