Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/fL2OfNInGlTPvQ1PaWlFPKUr1lc.roa
File: fL2OfNInGlTPvQ1PaWlFPKUr1lc.roa (raw, json)
Hash identifier: h34lxnHfigqHeRz5XlDIR0xRW4SZ7T0WnVtRjl3H5sM=
Subject key identifier: 7C:BD:8E:7C:D2:27:1A:54:CF:BD:0D:4F:69:69:45:3C:A5:2B:D6:57
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 01865A528262A7FA30A25E85D4B9543CC9E6
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/fL2OfNInGlTPvQ1PaWlFPKUr1lc.roa
Signing time: Thu 16 Feb 2023 13:03:22 +0000
ROA not before: Thu 16 Feb 2023 13:03:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57614
IP address blocks: 81.162.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:52:82:62:a7:fa:30:a2:5e:85:d4:b9:54:3c:c9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Feb 16 13:03:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbd8e7cd2271a54cfbd0d4f6969453ca52bd657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:60:4a:78:ba:5c:42:e1:0d:fa:58:aa:f2:
74:c5:c6:92:35:4b:a0:d3:81:a2:59:31:56:c7:9e:
49:a9:a6:1a:eb:52:31:f3:84:54:3a:32:0d:48:ee:
7e:a3:2c:19:99:82:c2:f2:b3:e0:46:20:cc:b8:c9:
4a:5e:32:65:80:12:d1:01:ee:95:91:f7:5c:d7:2c:
19:0c:58:71:0d:db:27:d1:55:e3:38:f1:32:54:21:
d7:8b:16:71:ed:26:57:8b:2b:e5:9c:f0:92:a8:da:
61:5e:69:17:60:8a:73:e1:c7:d5:32:42:32:d0:dc:
a0:ce:9b:5b:8a:9b:e8:99:41:85:bd:1a:20:d9:14:
54:87:c8:c3:16:21:82:a9:71:3f:91:b2:e9:dd:11:
28:b0:74:91:e6:5d:5b:72:08:83:4c:09:73:ac:76:
6d:57:62:17:ec:f1:7f:4e:d9:ee:03:f7:17:27:83:
48:59:74:0a:8e:00:db:c8:6e:0a:d6:36:f6:f1:a3:
ff:98:ad:ee:3b:15:a1:d1:9a:0e:07:bf:56:eb:6c:
a1:fc:25:0d:d8:08:f7:25:39:d0:3a:eb:6d:4b:8d:
5d:04:b8:54:34:c1:6d:05:bd:7d:e8:2f:35:88:45:
65:43:0e:f4:02:a3:f7:78:0a:3b:62:c2:44:36:ff:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BD:8E:7C:D2:27:1A:54:CF:BD:0D:4F:69:69:45:3C:A5:2B:D6:57
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/fL2OfNInGlTPvQ1PaWlFPKUr1lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.48.0/22
Signature Algorithm: sha256WithRSAEncryption
51:f9:42:c2:c9:56:6a:ff:78:03:b5:04:9b:f6:e0:4c:59:5c:
14:04:3e:b9:a6:fe:d2:8e:55:df:18:3c:8a:2d:69:b8:c4:c2:
a6:b3:8f:c2:c6:5f:d7:48:ed:2e:5f:bc:b3:e9:ad:44:e2:ef:
56:da:f5:34:b3:e2:72:b1:b3:a0:b2:1e:76:0f:67:bf:18:77:
11:06:d4:f8:9f:3e:03:68:c5:24:04:2a:98:d3:db:81:0f:17:
95:d3:b2:36:a0:80:f2:8c:ff:e0:b7:81:11:d2:0f:76:e5:f9:
11:6b:f8:d2:78:4f:73:33:6f:71:bf:04:e6:d8:4c:96:c0:d7:
3a:f4:c5:8f:e1:bf:4f:4e:b6:07:f9:16:9b:52:07:df:39:95:
b1:bb:11:4f:8e:77:dc:cb:7f:a9:17:af:8e:f2:a7:86:9b:36:
4a:b2:6d:ad:b0:a5:c1:68:d2:2e:04:04:59:68:bf:90:d0:27:
f7:50:cc:2b:32:49:ba:8b:81:43:88:27:c3:26:ae:3e:00:e3:
fb:76:f9:74:40:c6:e3:70:5a:b0:23:30:b0:23:f6:1c:2a:b0:
a8:3b:04:9b:2c:a3:1f:e7:c1:8b:f8:e3:6a:58:e5:67:02:5f:
0d:92:86:52:bb:ec:17:ce:81:d8:1f:b4:d1:e3:24:05:ab:45:
5c:94:b0:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZaUoJip/owol6F1LlUPMnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1
ZDJiYzAwHhcNMjMwMjE2MTMwMzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JkOGU3Y2QyMjcxYTU0Y2ZiZDBkNGY2OTY5NDUzY2E1MmJkNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KtgSni6XELhDfpYqvJ0xcaSNUug
04GiWTFWx55JqaYa61Ix84RUOjINSO5+oywZmYLC8rPgRiDMuMlKXjJlgBLRAe6V
kfdc1ywZDFhxDdsn0VXjOPEyVCHXixZx7SZXiyvlnPCSqNphXmkXYIpz4cfVMkIy
0NygzptbipvomUGFvRog2RRUh8jDFiGCqXE/kbLp3REosHSR5l1bcgiDTAlzrHZt
V2IX7PF/TtnuA/cXJ4NIWXQKjgDbyG4K1jb28aP/mK3uOxWh0ZoOB79W62yh/CUN
2Aj3JTnQOuttS41dBLhUNMFtBb196C81iEVlQw70AqP3eAo7YsJENv8rdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHy9jnzSJxpUz70NT2lpRTylK9ZXMB8GA1UdIwQY
MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt
MjRhOGQ5YmYzN2JjLzEvZkwyT2ZOSW5HbFRQdlExUGFXbEZQS1VyMWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj
LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUaIwMA0G
CSqGSIb3DQEBCwUAA4IBAQBR+ULCyVZq/3gDtQSb9uBMWVwUBD65pv7SjlXfGDyK
LWm4xMKms4/Cxl/XSO0uX7yz6a1E4u9W2vU0s+JysbOgsh52D2e/GHcRBtT4nz4D
aMUkBCqY09uBDxeV07I2oIDyjP/gt4ER0g925fkRa/jSeE9zM29xvwTm2EyWwNc6
9MWP4b9PTrYH+RabUgffOZWxuxFPjnfcy3+pF6+O8qeGmzZKsm2tsKXBaNIuBARZ
aL+Q0Cf3UMwrMkm6i4FDiCfDJq4+AOP7dvl0QMbjcFqwIzCwI/YcKrCoOwSbLKMf
58GL+ONqWOVnAl8NkoZSu+wXzoHYH7TR4yQFq0VclLB6
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:07 2025 by rpki-client