Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/x631cJeh3XOyek4OaYOtn7UHVtM.roa
File: x631cJeh3XOyek4OaYOtn7UHVtM.roa (raw, json)
Hash identifier: Xk2fn+j8ZFptKD1m3jG59+WdPw/op7HbvleiW4TSIiw=
Subject key identifier: C7:AD:F5:70:97:A1:DD:73:B2:7A:4E:0E:69:83:AD:9F:B5:07:56:D3
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01856D01D12C6C557FB58AA3A72722C25F2B
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/x631cJeh3XOyek4OaYOtn7UHVtM.roa
Signing time: Sun 01 Jan 2023 11:05:13 +0000
ROA not before: Sun 01 Jan 2023 11:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205404
IP address blocks: 145.14.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:d1:2c:6c:55:7f:b5:8a:a3:a7:27:22:c2:5f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 11:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7adf57097a1dd73b27a4e0e6983ad9fb50756d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:78:17:27:d3:7e:51:a3:74:45:dd:b5:f2:
0e:fe:75:85:66:6b:5f:94:8d:72:a4:ff:da:a1:fc:
fe:ec:9b:98:5a:2f:9c:d2:57:75:7c:6a:fb:bc:a3:
e6:22:56:6b:0b:07:d8:76:10:6c:e1:8e:e7:b4:f6:
70:5d:ab:28:3c:be:b0:a5:03:79:56:6f:a5:f2:ea:
06:22:f2:7c:7e:35:51:ce:ff:3d:06:98:5a:2b:22:
0e:b8:1d:cf:ea:70:a9:49:45:70:87:3f:d7:a2:21:
42:06:d6:6d:16:74:6b:33:84:f5:ab:87:8b:2e:f4:
c2:26:9c:ad:e3:72:3d:f9:1b:a3:48:6e:41:52:a5:
a7:3f:b6:6f:d2:88:d9:15:02:bc:ad:28:02:cd:38:
cf:cc:aa:dc:00:b3:e3:77:50:a8:96:fb:fd:79:db:
c3:7d:df:cc:d4:fe:e6:0c:f0:e9:2a:5c:a7:08:ed:
ab:ce:72:79:01:16:ac:82:43:c3:a4:bf:20:e1:ed:
e1:6c:64:7b:d2:9f:76:a4:05:eb:e4:fb:2b:36:1b:
24:e8:97:42:bf:fd:03:96:86:86:35:6c:66:af:20:
35:2a:40:4a:4f:b0:5a:d5:98:bf:6c:d6:39:7a:50:
8b:85:a1:f6:f9:46:68:4e:a0:a4:8c:5a:3d:56:00:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:F5:70:97:A1:DD:73:B2:7A:4E:0E:69:83:AD:9F:B5:07:56:D3
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/x631cJeh3XOyek4OaYOtn7UHVtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3b:f0:45:1f:a1:45:46:3d:bc:a2:29:9c:67:d4:11:40:0d:
cb:32:a0:1e:a5:43:50:82:82:e3:2f:ee:fd:f8:f3:9d:99:fd:
de:d3:18:5f:99:68:35:64:ad:86:cc:f6:df:0d:9b:52:da:aa:
bb:0c:9c:fc:eb:bf:f6:9b:12:de:d2:a6:d2:d0:9e:d2:b5:2d:
8f:6b:82:b5:3f:ef:8c:7d:85:59:fa:62:3c:d1:1c:2f:d9:d8:
cf:2b:0c:de:05:30:02:52:60:e4:4c:8f:12:d4:36:70:e6:41:
82:d7:d2:0e:a0:11:42:df:72:a7:21:bd:df:36:63:fb:04:35:
38:72:b5:5b:90:93:1c:19:41:52:c6:91:c2:73:18:1a:8a:0e:
81:e1:b9:d2:a2:68:c6:34:b9:d9:1e:c7:e1:6c:d0:55:06:35:
bd:f8:f3:55:3a:b5:d6:3f:f6:3d:ec:01:8f:63:7b:ac:46:56:
c6:59:c3:60:17:9f:07:41:55:88:59:2e:57:5e:fe:b9:52:a2:
fc:9e:b4:1d:d8:43:fa:b7:cc:33:53:18:aa:ac:2d:2b:30:a2:
9c:df:d2:19:cb:25:18:48:8f:14:9e:d9:08:35:87:aa:09:05:
d7:4f:78:65:87:b5:80:dc:f7:d1:d8:ba:eb:4b:cb:f6:97:6f:
89:f0:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:49:45 2025 by rpki-client