Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/q45FwEjg6-NxptCrWvOwHIpIxac.roa
File: q45FwEjg6-NxptCrWvOwHIpIxac.roa (raw, json)
Hash identifier: YoabDHxKnflfsVMCUMCvyFUX9QvFSKlCQRcLMdnm/VA=
Subject key identifier: AB:8E:45:C0:48:E0:EB:E3:71:A6:D0:AB:5A:F3:B0:1C:8A:48:C5:A7
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C8138B1512F61B703121F297947CB4A
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/q45FwEjg6-NxptCrWvOwHIpIxac.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34000
IP address blocks: 92.103.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:38:b1:51:2f:61:b7:03:12:1f:29:79:47:cb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab8e45c048e0ebe371a6d0ab5af3b01c8a48c5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:85:f1:7f:10:fd:c4:d9:75:5e:e4:46:b8:
49:8c:f3:e5:a0:84:90:69:cf:1a:54:a9:4a:43:99:
0a:de:47:47:b9:7a:1f:2d:9c:8d:f2:34:1f:67:de:
71:63:ba:d1:70:d8:2d:f3:27:fa:24:40:e9:c0:cf:
bf:01:c8:ad:8f:ab:76:3a:f8:2c:ce:90:e1:b4:05:
bc:3e:09:28:be:dd:89:70:c3:2f:bb:82:99:22:4b:
7d:2b:be:58:64:da:9a:6e:9f:c3:68:2c:96:a3:7e:
40:be:1d:7c:9b:66:78:7a:3a:1b:6e:44:18:63:58:
58:7a:3d:b2:dd:c6:5e:81:9b:f3:b0:26:df:a2:e8:
09:ae:af:f9:67:f0:40:1f:a8:91:1a:f1:61:df:84:
4d:74:e2:16:f7:de:ae:ea:94:96:48:7b:0d:43:db:
9d:13:b6:eb:2a:0a:a8:7c:8b:9f:88:68:dc:c2:1e:
80:8a:49:d8:90:ba:7d:6b:f3:ec:3b:9c:16:5b:4b:
d9:23:bf:75:04:78:b5:16:50:75:c5:de:ac:15:78:
0b:2c:53:01:4f:45:aa:19:9e:0b:3c:c0:fb:ba:06:
84:47:e9:e5:de:b3:2b:65:34:ad:3d:78:05:1d:77:
33:c3:77:e3:84:c1:ee:55:1b:15:9d:19:20:02:38:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:45:C0:48:E0:EB:E3:71:A6:D0:AB:5A:F3:B0:1C:8A:48:C5:A7
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/q45FwEjg6-NxptCrWvOwHIpIxac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.103.224.0/24
Signature Algorithm: sha256WithRSAEncryption
65:85:d4:63:b6:e5:78:2a:55:aa:22:e9:c1:17:af:51:6f:d3:
0e:4b:dc:b7:c4:ce:73:84:da:8a:ed:b2:3e:f8:63:9a:36:f6:
b1:7e:de:0a:da:7f:f2:da:e6:e9:d1:8e:ef:d7:97:a6:15:74:
ac:ee:5e:85:6d:52:01:ee:fc:f6:08:03:4d:d5:00:49:9a:41:
96:c3:6f:3e:f2:20:60:7b:47:5e:eb:00:50:7b:ba:b2:ad:57:
e6:a4:46:ff:b7:5c:13:0c:6d:98:c9:30:cc:80:0f:39:57:b1:
c9:0c:31:51:87:bb:40:36:44:40:42:9b:43:4a:b5:47:35:af:
75:5c:6a:32:f0:00:9f:74:d6:1a:40:7c:69:2f:2d:ce:e7:c6:
ee:3e:5e:7e:58:de:ca:dd:48:26:fe:aa:6d:29:c6:99:ca:73:
a8:1e:3d:36:72:2a:ea:88:24:0f:83:5e:02:9d:71:07:cb:3b:
a6:61:fd:d9:53:ad:fe:03:8c:b9:28:6b:76:62:dd:9e:c2:b4:
03:1f:40:09:31:7a:23:bc:6b:4a:d3:cc:55:f9:09:e2:e2:30:
3f:06:01:5f:53:1a:52:14:e0:e5:95:47:65:27:ca:30:e6:d3:
4b:f1:7a:ef:42:af:07:0a:24:f4:23:c6:f7:12:ca:f5:fe:20:
03:08:2d:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsgTixUS9htwMSHyl5R8tKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy
OGIwNDYwHhcNMjMwMTAxMDg0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjhlNDVjMDQ4ZTBlYmUzNzFhNmQwYWI1YWYzYjAxYzhhNDhjNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmGF8X8Q/cTZdV7kRrhJjPPloISQ
ac8aVKlKQ5kK3kdHuXofLZyN8jQfZ95xY7rRcNgt8yf6JEDpwM+/Acitj6t2Ovgs
zpDhtAW8Pgkovt2JcMMvu4KZIkt9K75YZNqabp/DaCyWo35Avh18m2Z4ejobbkQY
Y1hYej2y3cZegZvzsCbfougJrq/5Z/BAH6iRGvFh34RNdOIW996u6pSWSHsNQ9ud
E7brKgqofIufiGjcwh6AiknYkLp9a/PsO5wWW0vZI791BHi1FlB1xd6sFXgLLFMB
T0WqGZ4LPMD7ugaER+nl3rMrZTStPXgFHXczw3fjhMHuVRsVnRkgAjhxMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuORcBI4OvjcabQq1rzsByKSMWnMB8GA1UdIwQY
MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt
NTBkMmI3MGJjZjMxLzEvcTQ1RndFamc2LU54cHRDcld2T3dISXBJeGFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx
LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXGfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBlhdRjtuV4KlWqIunBF69Rb9MOS9y3xM5zhNqK7bI+
+GOaNvaxft4K2n/y2ubp0Y7v15emFXSs7l6FbVIB7vz2CANN1QBJmkGWw28+8iBg
e0de6wBQe7qyrVfmpEb/t1wTDG2YyTDMgA85V7HJDDFRh7tANkRAQptDSrVHNa91
XGoy8ACfdNYaQHxpLy3O58buPl5+WN7K3Ugm/qptKcaZynOoHj02cirqiCQPg14C
nXEHyzumYf3ZU63+A4y5KGt2Yt2ewrQDH0AJMXojvGtK08xV+Qni4jA/BgFfUxpS
FODllUdlJ8ow5tNL8XrvQq8HCiT0I8b3Esr1/iADCC0M
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:10:34 2025 by rpki-client