Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/4HKiFZKqqQdHaDo-GPsx9NYDNZI.roa
File: 4HKiFZKqqQdHaDo-GPsx9NYDNZI.roa (raw, json)
Hash identifier: 0kvvj16o6SC0zENxZPONx9ZZrKmgnZF5wHyWdEU4q9w=
Subject key identifier: E0:72:A2:15:92:AA:A9:07:47:68:3A:3E:18:FB:31:F4:D6:03:35:92
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 04019C22
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/4HKiFZKqqQdHaDo-GPsx9NYDNZI.roa
Signing time: Sat 01 Jan 2022 15:01:14 +0000
ROA not before: Sat 01 Jan 2022 15:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8132
IP address blocks: 155.45.0.0/17 maxlen: 17
155.45.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67214370 (0x4019c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 15:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e072a21592aaa90747683a3e18fb31f4d6033592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:4d:f2:f8:d2:7a:a6:39:0b:42:f6:f3:5e:
56:37:ad:fb:e0:e5:cb:04:7d:2e:8b:19:b9:9e:db:
fb:ff:9b:28:53:11:21:ca:b8:28:c8:9c:96:c8:f0:
27:b6:ed:3e:f0:bd:ae:8c:61:cc:5e:7a:bf:e9:bb:
c1:6d:da:66:86:e4:6d:9b:28:02:b3:d1:d8:ad:b5:
36:c3:6f:59:ae:f4:8b:f2:a1:eb:03:ec:e2:8b:88:
02:a1:f8:b2:d0:0c:ee:0b:1b:59:b3:91:31:50:9d:
2e:30:f1:d0:85:e4:89:52:64:05:50:79:1c:70:6b:
70:79:71:b1:49:47:7d:b2:fe:72:c0:84:76:bf:8c:
14:92:90:8c:b8:57:b4:ec:e4:e8:66:ed:77:bc:f0:
02:ac:db:02:af:0c:99:20:4c:b0:f2:1c:a9:a1:3e:
51:07:24:40:d5:d7:67:6b:20:06:1c:1b:46:32:d4:
23:cf:fc:b7:74:72:70:95:b2:99:32:83:be:08:d2:
96:bc:c5:2b:38:0f:4a:15:e6:dc:8d:04:7c:4b:e6:
90:b0:b7:8a:a0:21:a8:0a:28:b6:dd:cf:9e:41:56:
ca:50:45:5e:1f:69:5d:a1:31:3e:64:6a:d8:de:0d:
2c:45:e9:cf:da:2a:57:f0:d5:3f:1e:8c:ff:2c:02:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:A2:15:92:AA:A9:07:47:68:3A:3E:18:FB:31:F4:D6:03:35:92
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/4HKiFZKqqQdHaDo-GPsx9NYDNZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.0.0/17
155.45.249.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fc:34:d4:c1:71:8e:f6:81:77:14:86:68:cd:63:64:e1:58:
1b:9d:dd:40:c0:0b:90:ba:cd:6e:5c:89:1f:0f:a0:29:51:ef:
b6:c1:5d:52:88:c2:b8:3f:c2:a2:c0:19:17:43:bc:6e:c7:95:
ad:b8:de:f1:be:0e:6c:95:e2:8c:0a:e0:d5:76:7d:02:26:9b:
29:da:2d:d4:1b:d2:5a:d2:6d:ac:64:68:f5:46:2c:89:16:20:
fc:19:9f:ca:ea:87:15:e3:af:fb:5d:63:86:db:0b:47:24:65:
94:c1:bd:e6:a8:fd:ee:52:cc:cb:d3:90:36:30:7b:5a:f9:b4:
56:b2:c2:e9:d9:84:53:92:df:55:23:12:1a:e8:fd:21:cb:37:
27:8b:37:65:18:4b:c6:6b:70:61:83:c8:9e:8b:e0:61:76:86:
57:b0:13:81:13:0c:2a:52:81:78:11:46:23:07:f2:ee:23:9a:
70:da:f0:98:b5:83:aa:dd:90:a1:40:4d:8f:7d:51:1a:60:1c:
6b:84:13:d1:76:d8:bc:c0:21:22:83:80:3c:ec:a5:d2:67:6f:
6a:53:ad:60:43:89:44:51:0c:6a:a0:49:08:78:e8:9c:97:e0:
4c:9d:bb:a8:1f:e9:0d:5d:47:00:b6:c1:8f:e1:01:ff:e5:2f:
ca:72:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:54:47 2025 by rpki-client