Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/P3PvKHOyWsxi6fBsPREND0u_Jq8.roa
File: P3PvKHOyWsxi6fBsPREND0u_Jq8.roa (raw, json)
Hash identifier: vcBoRDeAJ4zkENSCtZle5SQ0QOCG86CUmw/P5LCjYyc=
Subject key identifier: 3F:73:EF:28:73:B2:5A:CC:62:E9:F0:6C:3D:11:0D:0F:4B:BF:26:AF
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0B20C9FB
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/P3PvKHOyWsxi6fBsPREND0u_Jq8.roa
Signing time: Sat 01 Jan 2022 08:00:34 +0000
ROA not before: Sat 01 Jan 2022 08:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202808
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186698235 (0xb20c9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 08:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f73ef2873b25acc62e9f06c3d110d0f4bbf26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:e6:d6:74:c9:c9:07:e2:a6:fb:1d:38:b5:
19:af:47:9e:7d:40:be:bf:19:c9:dc:49:a0:7b:cc:
56:bd:f7:59:05:10:55:32:60:07:35:a5:eb:9d:b3:
d0:99:79:81:9b:0e:5e:ce:6c:28:58:7f:33:17:70:
d3:24:69:ec:c8:9d:11:a2:c6:b2:90:eb:3a:2b:e2:
89:29:44:94:dc:6d:89:f8:16:96:d6:92:cf:cb:5d:
f5:e9:5a:2b:54:92:f6:bc:72:13:ce:75:25:d9:0d:
31:2c:40:a2:d4:92:69:70:9b:ef:94:4f:02:cc:bf:
a2:73:43:00:1f:23:6c:93:93:82:ae:9d:4a:32:55:
4c:e1:61:a3:d2:96:8c:fd:8b:da:b9:f3:b9:37:d3:
22:bf:4c:c0:62:32:f0:78:a3:c8:eb:b2:ad:9d:b2:
2c:d7:3f:60:69:f5:6d:53:04:ad:83:0e:62:c1:41:
9c:12:9d:32:09:9e:c1:8f:da:de:d8:4a:62:ff:a0:
2c:1f:6e:61:96:9a:cf:e8:23:19:96:20:3a:fa:48:
27:c1:1e:ad:99:49:68:01:e3:a6:45:ae:40:2c:92:
c2:9b:75:4e:ee:cb:72:62:5d:d9:b7:ca:dc:3f:76:
b9:bf:68:de:b9:a7:89:44:06:75:35:cb:6d:2c:f5:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:EF:28:73:B2:5A:CC:62:E9:F0:6C:3D:11:0D:0F:4B:BF:26:AF
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/P3PvKHOyWsxi6fBsPREND0u_Jq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:58:75:22:3b:9e:87:e8:09:d9:19:96:f1:ad:78:41:d1:cf:
60:cd:03:8e:98:39:2d:54:d5:7e:13:f9:d5:74:60:42:59:3e:
54:31:f1:b8:7e:17:15:03:c7:57:6c:b8:37:8c:1f:d8:d0:4e:
0c:25:d3:b3:c2:26:8a:b8:bf:4d:3d:68:3b:ad:a8:be:a0:b4:
83:4c:0b:7a:a3:be:9e:f1:56:0f:19:c0:f9:25:c3:b6:56:3d:
10:44:33:6a:cc:7d:b2:d7:f8:a9:7b:4e:5e:40:9a:1d:66:9a:
27:d5:d4:9a:ca:58:2b:95:30:68:b2:24:71:5d:0d:cb:f7:38:
45:da:73:88:ed:dd:7e:71:cb:1c:ed:55:cd:c7:2a:02:87:0f:
4e:93:83:3f:ae:1a:f4:4f:7a:d5:5f:33:43:20:13:df:6b:84:
ac:67:e3:ca:67:f9:f6:ac:07:bf:cf:37:0a:f4:4a:3f:c7:f8:
5d:8e:20:4a:36:8f:d0:0e:0a:df:a1:37:1a:0b:6e:3e:12:93:
50:ad:c7:2a:00:d0:34:78:e4:b2:24:5e:0b:21:ca:3a:21:65:
c9:f6:a9:e6:fd:87:ce:34:3f:4e:2e:4b:b0:46:ed:09:4d:b7:
73:76:1d:93:2d:8e:e6:b3:8c:8f:e5:0b:d9:b2:34:b3:93:87:
7a:e6:64:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECyDJ+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTFmMGI3M2U2N2Q2M2M1YTRjOTA0NjgxNDE2NmE5ZTIxNjI1ZjI4MB4XDTIyMDEw
MTA4MDAzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y3M2VmMjg3M2Iy
NWFjYzYyZTlmMDZjM2QxMTBkMGY0YmJmMjZhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZZ5tZ0yckH4qb7HTi1Ga9Hnn1Avr8ZydxJoHvMVr33WQUQ
VTJgBzWl652z0Jl5gZsOXs5sKFh/Mxdw0yRp7MidEaLGspDrOiviiSlElNxtifgW
ltaSz8td9elaK1SS9rxyE851JdkNMSxAotSSaXCb75RPAsy/onNDAB8jbJOTgq6d
SjJVTOFho9KWjP2L2rnzuTfTIr9MwGIy8HijyOuyrZ2yLNc/YGn1bVMErYMOYsFB
nBKdMgmewY/a3thKYv+gLB9uYZaaz+gjGZYgOvpIJ8EerZlJaAHjpkWuQCySwpt1
Tu7LcmJd2bfK3D92ub9o3rmniUQGdTXLbSz1HSECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/c+8oc7JazGLp8Gw9EQ0PS78mrzAfBgNVHSMEGDAWgBQpHwtz5n1jxaTJ
BGgUFmqeIWJfKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tSOExjLVo5WThXa3lRUm9GQlpxbmlGaVh5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvNDhkNjA5LTA4OGQtNDFlNC1iZWM0LTM4ZWU4ZmQ2NGU3ZC8x
L1AzUHZLSE95V3N4aTZmQnNQUkVORDB1X0pxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
NDhkNjA5LTA4OGQtNDFlNC1iZWM0LTM4ZWU4ZmQ2NGU3ZC8xL0tSOExjLVo5WThX
a3lRUm9GQlpxbmlGaVh5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMY0LTANBgkqhkiG9w0BAQsFAAOC
AQEAHVh1Ijueh+gJ2RmW8a14QdHPYM0Djpg5LVTVfhP51XRgQlk+VDHxuH4XFQPH
V2y4N4wf2NBODCXTs8Imiri/TT1oO62ovqC0g0wLeqO+nvFWDxnA+SXDtlY9EEQz
asx9stf4qXtOXkCaHWaaJ9XUmspYK5UwaLIkcV0Ny/c4RdpziO3dfnHLHO1Vzccq
AocPTpODP64a9E961V8zQyAT32uErGfjymf59qwHv883CvRKP8f4XY4gSjaP0A4K
36E3GgtuPhKTUK3HKgDQNHjksiReCyHKOiFlyfap5v2HzjQ/Ti5LsEbtCU23c3Yd
ky2O5rOMj+UL2bI0s5OHeuZkQw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:24 2025 by rpki-client