Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/1ycSX1S8GXe51a1vqRYgfJopZVo.roa
File: 1ycSX1S8GXe51a1vqRYgfJopZVo.roa (raw, json)
Hash identifier: hWa5RZYSy8u5E78BDS6yM5w2vNRrg0f5cpczQQmHJHc=
Subject key identifier: D7:27:12:5F:54:BC:19:77:B9:D5:AD:6F:A9:16:20:7C:9A:29:65:5A
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 01856B77C1A27C3C88B3D1BEDBFEAE48D19B
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/1ycSX1S8GXe51a1vqRYgfJopZVo.roa
Signing time: Sun 01 Jan 2023 03:54:48 +0000
ROA not before: Sun 01 Jan 2023 03:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47373
IP address blocks: 45.134.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:c1:a2:7c:3c:88:b3:d1:be:db:fe:ae:48:d1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Jan 1 03:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d727125f54bc1977b9d5ad6fa916207c9a29655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:b6:83:f3:90:6d:1f:a7:c5:81:89:11:03:
59:30:3c:6b:53:1b:06:c4:ce:7e:e7:3c:f0:ce:62:
e4:48:eb:22:f5:72:fd:81:bc:07:f8:ba:bc:e4:4a:
db:f0:df:d1:2b:20:e1:1d:ee:61:13:df:f3:e9:aa:
41:d2:f6:c6:fa:96:fa:0f:70:26:aa:7d:48:1d:af:
18:5b:dc:db:eb:fd:8d:ac:a2:e7:3e:05:41:be:7e:
3b:59:ca:5f:47:7b:1d:76:91:78:56:a0:65:80:4b:
4c:d9:d1:04:4e:ab:1b:cd:21:fe:c5:9c:db:f6:31:
b5:49:8c:47:cb:5b:66:0b:3d:e2:66:c2:bd:35:54:
e8:76:04:f3:0e:d7:c9:c6:6d:74:b4:c0:93:5c:df:
03:77:ab:1c:22:c0:25:6d:f3:c5:ae:c0:44:88:6f:
88:ab:af:48:f3:d4:dc:2d:2a:65:59:c0:c7:88:23:
10:59:f0:4c:1c:c2:84:bb:7a:2e:a6:a3:3d:04:96:
35:cd:a7:c6:59:cf:ff:7a:dd:a5:a2:45:e7:16:0b:
7c:3c:96:9f:f3:f8:e6:43:a9:b0:eb:a6:28:6c:f7:
f6:3a:b0:d2:f2:08:28:c1:14:5c:6a:56:91:7d:47:
8e:76:ce:82:ff:71:2f:f4:90:3f:47:46:e8:da:ea:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:12:5F:54:BC:19:77:B9:D5:AD:6F:A9:16:20:7C:9A:29:65:5A
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/1ycSX1S8GXe51a1vqRYgfJopZVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
47:46:c8:a9:43:d9:4b:40:f5:4c:ea:ea:23:c6:1f:dc:28:d0:
5f:75:03:19:bf:f1:44:98:3b:0d:b1:a5:61:c5:cd:89:7c:98:
ca:25:f5:55:7a:c9:11:9f:37:44:f1:77:a9:04:59:33:12:0c:
a5:6f:70:2d:e8:5a:4f:2c:54:96:32:aa:83:4b:be:2f:9c:6e:
13:e0:a6:13:4b:ef:83:04:7b:1b:3e:fc:4a:e6:19:db:4c:7b:
7a:3a:65:90:dd:8b:fd:35:2c:e8:c5:34:7f:a4:78:c6:94:58:
68:40:31:f5:5e:af:23:a8:39:e0:bb:d6:7b:bc:17:ec:80:a8:
8d:b4:b1:b8:00:67:66:92:93:93:53:5f:0d:85:cf:f2:54:06:
90:4e:30:15:73:60:af:b5:02:e7:c2:c4:7c:9f:aa:82:20:04:
38:7f:c5:66:d8:79:e4:01:ac:8b:f6:7e:0d:41:b9:07:c9:0b:
fc:f4:7e:ff:96:bf:cd:87:01:f5:64:a8:0a:58:7e:e8:7a:1d:
91:0d:07:0a:2e:b4:90:30:50:76:5f:d9:bc:6c:38:65:62:ec:
fb:74:2b:4e:79:04:1b:51:5b:ec:f1:ba:49:4b:ad:e3:11:6b:
bc:e0:75:d9:07:cd:23:93:06:2c:da:e1:a1:c6:57:ac:10:a3:
e5:eb:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:27 2025 by rpki-client