Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfcW9mFesMdGUAOPSbLOxlrzX_w.roa
File: FfcW9mFesMdGUAOPSbLOxlrzX_w.roa (raw, json)
Hash identifier: BVm579Jl9jQ+sga1OOpLGFgpC9s83q7RzYLKSjaJJIc=
Subject key identifier: 15:F7:16:F6:61:5E:B0:C7:46:50:03:8F:49:B2:CE:C6:5A:F3:5F:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02A22BCF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfcW9mFesMdGUAOPSbLOxlrzX_w.roa
Signing time: Tue 05 Apr 2022 06:05:55 +0000
ROA not before: Tue 05 Apr 2022 06:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35916
IP address blocks: 45.157.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44182479 (0x2a22bcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 5 06:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f716f6615eb0c74650038f49b2cec65af35ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:30:73:cb:9b:d5:31:f2:ef:93:78:f9:a8:
05:22:96:0f:7b:c0:ce:4d:25:c7:4c:e3:97:0e:c8:
b5:ee:9c:1f:42:b2:4d:85:20:49:64:76:35:4d:70:
92:47:af:2d:c1:6d:46:7a:c5:3f:37:27:d0:98:ea:
7f:26:cc:fd:e9:c1:a6:fa:e2:11:f3:63:05:5f:36:
f1:3a:1e:19:0c:fd:69:aa:2d:98:8a:08:bc:70:7d:
30:75:c5:68:3e:89:fe:5a:b7:a2:5a:2f:0d:83:0a:
5e:45:6f:5d:13:24:e0:d1:fc:91:62:0d:80:94:43:
55:f7:e1:45:ad:68:cb:68:59:69:dc:6b:9e:c2:e7:
0a:0e:3f:ea:2c:71:54:9d:6d:52:03:a5:e2:49:51:
90:1d:d4:1b:e6:97:0e:76:64:b1:14:ca:08:fc:de:
da:8b:3a:76:c3:3f:ae:94:51:13:61:fa:32:cb:8f:
54:72:48:81:a7:aa:c4:23:9a:6e:4f:f8:26:f3:b6:
5f:3d:2b:54:ae:d4:1e:f1:09:f2:60:6d:91:10:79:
e1:f7:17:5b:84:fe:8b:99:86:e0:cd:bb:f1:91:a8:
da:e2:0b:31:df:e6:a4:cb:39:f2:99:6e:fe:82:8b:
43:1d:8f:41:ff:41:46:93:d8:73:29:fb:7e:d1:9b:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:16:F6:61:5E:B0:C7:46:50:03:8F:49:B2:CE:C6:5A:F3:5F:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfcW9mFesMdGUAOPSbLOxlrzX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0b:6b:b1:86:72:47:9e:a3:10:c4:59:07:84:ad:cf:58:ad:
7b:8b:24:ef:d0:7f:6f:68:2d:8e:da:6e:90:89:be:14:1e:92:
0f:04:b0:39:e6:18:cc:4f:b6:57:1c:2b:ba:b0:c8:ce:68:88:
c8:cb:b7:71:44:e2:0e:09:95:65:d3:58:88:b2:5c:51:50:c7:
bc:5a:76:9f:8d:92:82:e9:61:24:bc:ca:ef:5c:66:0e:ef:cf:
7f:0e:ae:27:a9:ab:1d:32:a5:9f:da:98:08:13:40:f5:78:d7:
4d:35:d6:40:6a:fe:3c:a8:02:84:7a:1f:55:cd:ed:70:99:03:
47:91:a4:2c:b5:7b:ea:8b:d5:bf:17:4f:fc:26:0e:a9:94:f3:
cc:0d:e7:b7:e9:6c:6b:29:4d:b8:da:a4:82:19:c2:15:2a:0b:
c8:54:e6:2c:8d:5a:13:dc:c1:b9:4f:7c:4a:36:15:23:e7:3e:
87:bb:37:94:64:75:76:fb:1b:30:04:1b:82:4e:51:5c:55:99:
3f:3e:9b:50:89:21:50:44:bf:15:ab:f1:f1:4f:f8:65:70:56:
80:7e:18:54:68:23:74:3f:36:97:6b:b7:33:0e:b0:72:89:9a:
4e:6b:fa:0e:11:94:f7:0e:07:31:d3:50:cc:7a:db:6a:96:64:
0f:d4:eb:be
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAqIrzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDQw
NTA2MDU1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVmNzE2ZjY2MTVl
YjBjNzQ2NTAwMzhmNDliMmNlYzY1YWYzNWZmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1KMHPLm9Ux8u+TePmoBSKWD3vAzk0lx0zjlw7Ite6cH0Ky
TYUgSWR2NU1wkkevLcFtRnrFPzcn0JjqfybM/enBpvriEfNjBV828ToeGQz9aaot
mIoIvHB9MHXFaD6J/lq3olovDYMKXkVvXRMk4NH8kWINgJRDVffhRa1oy2hZadxr
nsLnCg4/6ixxVJ1tUgOl4klRkB3UG+aXDnZksRTKCPze2os6dsM/rpRRE2H6MsuP
VHJIgaeqxCOabk/4JvO2Xz0rVK7UHvEJ8mBtkRB54fcXW4T+i5mG4M278ZGo2uIL
Md/mpMs58plu/oKLQx2PQf9BRpPYcyn7ftGbmb0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQV9xb2YV6wx0ZQA49Jss7GWvNf/DAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L0ZmY1c5bUZlc01kR1VBT1BTYkxPeGxyelhfdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2dJDANBgkqhkiG9w0BAQsFAAOC
AQEASgtrsYZyR56jEMRZB4Stz1ite4sk79B/b2gtjtpukIm+FB6SDwSwOeYYzE+2
VxwrurDIzmiIyMu3cUTiDgmVZdNYiLJcUVDHvFp2n42SgulhJLzK71xmDu/Pfw6u
J6mrHTKln9qYCBNA9XjXTTXWQGr+PKgChHofVc3tcJkDR5GkLLV76ovVvxdP/CYO
qZTzzA3nt+lsaylNuNqkghnCFSoLyFTmLI1aE9zBuU98SjYVI+c+h7s3lGR1dvsb
MAQbgk5RXFWZPz6bUIkhUES/Favx8U/4ZXBWgH4YVGgjdD82l2u3Mw6wcomaTmv6
DhGU9w4HMdNQzHrbapZkD9Trvg==
-----END CERTIFICATE-----
Generated at Fri May 9 13:05:59 2025 by rpki-client