Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/UTILq8yQJ1wrFSgx68KBonQC-oQ.roa
File: UTILq8yQJ1wrFSgx68KBonQC-oQ.roa (raw, json)
Hash identifier: Ke41aXJjIqoc5mp9a4c/PQLC8DWzw9U3oUKHtbaFHFQ=
Subject key identifier: 51:32:0B:AB:CC:90:27:5C:2B:15:28:31:EB:C2:81:A2:74:02:FA:84
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 08E13671
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/UTILq8yQJ1wrFSgx68KBonQC-oQ.roa
Signing time: Sat 01 Jan 2022 11:55:04 +0000
ROA not before: Sat 01 Jan 2022 11:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208978
IP address blocks: 45.10.34.0/23 maxlen: 23
45.10.32.0/22 maxlen: 22
45.10.32.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148977265 (0x8e13671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jan 1 11:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51320babcc90275c2b152831ebc281a27402fa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:cb:af:7b:15:5b:80:3c:77:95:9f:d5:cb:
07:07:3d:29:3b:52:89:9c:1a:f4:34:cb:6a:24:2a:
d5:14:6b:c8:4a:03:e7:4d:57:5f:c5:ac:aa:7c:fd:
ea:b2:5a:69:2f:14:65:a4:0c:8b:b8:a0:03:86:a5:
37:5b:53:e2:b9:28:22:c8:86:29:5f:9e:b9:f4:e0:
de:a6:7b:00:3b:92:74:5c:3c:67:39:49:6b:f7:ba:
5e:c5:d8:da:22:ae:b2:e1:d3:4d:78:ed:68:28:01:
5b:81:75:41:b2:41:56:24:08:54:d6:16:0c:71:33:
97:17:3d:40:28:96:c5:d7:81:b6:14:66:26:5e:2e:
69:e7:0e:78:1d:4a:ea:6e:cd:de:36:8b:28:a3:1b:
97:56:bd:9d:de:e6:59:57:d6:c3:e2:98:c7:2e:77:
98:02:c2:62:b6:fb:ff:a2:08:a7:02:1c:c2:4a:12:
66:51:04:3a:38:66:1f:f2:87:d1:ab:86:e2:54:1c:
89:7c:3c:46:45:18:63:44:d6:ce:95:e4:2b:66:10:
e6:e6:71:55:b0:48:2f:cb:b5:4f:55:5d:64:21:5e:
aa:4d:0f:df:8a:b0:25:5d:48:c3:b5:ea:07:8f:4d:
d7:3a:17:57:c2:e8:ab:16:c2:3c:fa:8f:40:fe:e7:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:0B:AB:CC:90:27:5C:2B:15:28:31:EB:C2:81:A2:74:02:FA:84
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/UTILq8yQJ1wrFSgx68KBonQC-oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.32.0/22
Signature Algorithm: sha256WithRSAEncryption
60:69:d1:fa:4c:9b:6e:05:38:97:67:c1:44:8c:4e:95:51:33:
46:6f:b4:09:a8:c5:ec:30:70:4b:90:79:ae:c3:a8:f4:e9:6f:
9f:ac:29:31:0c:40:5c:7a:8e:75:ef:4e:68:45:08:df:20:e4:
9b:b7:f2:2d:73:94:6e:c5:35:5e:45:bf:87:09:13:85:85:e3:
a3:4f:08:0c:44:80:b9:6f:9a:1a:cd:93:af:95:58:b0:4b:01:
ec:e9:f0:49:8e:49:d2:cf:c0:96:de:a9:ef:0d:24:0b:f7:c7:
5b:6f:2b:35:6d:e8:84:7c:be:dc:6b:e1:5c:39:15:5a:73:0d:
26:00:42:93:31:d7:67:12:55:a1:61:47:53:73:02:de:cd:05:
59:66:5b:9e:fe:8c:a6:ca:7b:b0:a8:0f:1b:6d:b6:17:88:0e:
51:48:bc:e9:69:f2:ed:d4:10:77:8d:95:d5:66:9f:1b:70:a9:
a8:1a:c9:46:25:6d:93:a3:93:0a:0c:e1:03:d5:08:68:81:ec:
51:81:56:32:81:20:4e:6f:bd:24:af:98:d4:84:5b:f9:bc:74:
13:90:8d:b7:32:c5:43:95:36:bc:06:1f:b1:5b:55:57:9c:7b:
ba:df:7a:7b:a9:f7:c8:56:7f:d1:22:15:e7:56:4e:69:ff:a1:
35:80:a9:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOE2cTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDEyNDJlNmM3ZWJkODJhMjNmYTFhMDhmMzk2ZWJlNWFiMzRjZjZiMB4XDTIyMDEw
MTExNTUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTEzMjBiYWJjYzkw
Mjc1YzJiMTUyODMxZWJjMjgxYTI3NDAyZmE4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbFy697FVuAPHeVn9XLBwc9KTtSiZwa9DTLaiQq1RRryEoD
501XX8Wsqnz96rJaaS8UZaQMi7igA4alN1tT4rkoIsiGKV+eufTg3qZ7ADuSdFw8
ZzlJa/e6XsXY2iKusuHTTXjtaCgBW4F1QbJBViQIVNYWDHEzlxc9QCiWxdeBthRm
Jl4uaecOeB1K6m7N3jaLKKMbl1a9nd7mWVfWw+KYxy53mALCYrb7/6IIpwIcwkoS
ZlEEOjhmH/KH0auG4lQciXw8RkUYY0TWzpXkK2YQ5uZxVbBIL8u1T1VdZCFeqk0P
34qwJV1Iw7XqB49N1zoXV8LoqxbCPPqPQP7n68sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRRMgurzJAnXCsVKDHrwoGidAL6hDAfBgNVHSMEGDAWgBTNEkLmx+vYKiP6
GgjzluvlqzTPazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pSSkM1c2ZyMkNvai1ob0k4NWJyNWFzMHoycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNGE3NTdjLWFkZGUtNDg1Yy05MTcxLWY2MDM1Mzg0MTJjOC8x
L1VUSUxxOHlRSjF3ckZTZ3g2OEtCb25RQy1vUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NGE3NTdjLWFkZGUtNDg1Yy05MTcxLWY2MDM1Mzg0MTJjOC8xL3pSSkM1c2ZyMkNv
ai1ob0k4NWJyNWFzMHoycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0KIDANBgkqhkiG9w0BAQsFAAOC
AQEAYGnR+kybbgU4l2fBRIxOlVEzRm+0CajF7DBwS5B5rsOo9Olvn6wpMQxAXHqO
de9OaEUI3yDkm7fyLXOUbsU1XkW/hwkThYXjo08IDESAuW+aGs2Tr5VYsEsB7Onw
SY5J0s/Alt6p7w0kC/fHW28rNW3ohHy+3GvhXDkVWnMNJgBCkzHXZxJVoWFHU3MC
3s0FWWZbnv6Mpsp7sKgPG222F4gOUUi86Wny7dQQd42V1WafG3CpqBrJRiVtk6OT
CgzhA9UIaIHsUYFWMoEgTm+9JK+Y1IRb+bx0E5CNtzLFQ5U2vAYfsVtVV5x7ut96
e6n3yFZ/0SIV51ZOaf+hNYCpew==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:16:54 2025 by rpki-client