Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/w3ZAGFEeRqNkkipeRIyB_DHvclM.roa
File: w3ZAGFEeRqNkkipeRIyB_DHvclM.roa (raw, json)
Hash identifier: dDoMm9Kp6x2tJcWwSZ39fJUieMC8Qzwzjs/wKCGvqLg=
Subject key identifier: C3:76:40:18:51:1E:46:A3:64:92:2A:5E:44:8C:81:FC:31:EF:72:53
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0189FA863C09A10209A68BBC5CE177973429
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/w3ZAGFEeRqNkkipeRIyB_DHvclM.roa
Signing time: Tue 15 Aug 2023 18:47:28 +0000
ROA not before: Tue 15 Aug 2023 18:47:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207919
IP address blocks: 45.133.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fa:86:3c:09:a1:02:09:a6:8b:bc:5c:e1:77:97:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Aug 15 18:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3764018511e46a364922a5e448c81fc31ef7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:77:d3:82:d5:33:b2:ed:89:44:ce:3a:84:
17:8b:63:fa:01:a3:26:6a:59:bd:f9:4f:26:45:b0:
b0:a1:5c:c8:c7:d4:78:54:a4:08:bc:4a:a0:8b:7b:
d7:b4:26:4c:fa:29:8a:10:24:21:a0:4b:7d:dc:fe:
8c:6f:fd:7a:ba:0b:9b:15:db:ab:66:3b:23:6f:f9:
8e:6c:1c:64:59:6e:30:01:aa:32:e1:71:af:21:0f:
72:b9:c6:d7:cc:41:03:76:a1:be:07:84:c5:10:6c:
a2:54:40:ea:2f:bd:47:d7:45:b5:6b:40:46:60:9e:
e4:23:9a:19:72:36:85:37:84:ef:be:4a:dd:e0:15:
da:b4:1a:9c:91:8e:cf:5b:92:08:f0:97:82:40:a7:
21:1a:62:c8:f0:0c:b2:db:48:24:63:01:cf:29:20:
6b:fa:37:b5:bc:5d:85:5f:02:b0:00:f8:39:98:1b:
81:93:82:c9:5b:b7:49:4e:7e:b5:79:8b:09:c5:64:
f6:87:15:9f:1a:e9:82:4a:dd:b9:7d:7f:54:be:29:
4b:25:61:77:c0:ee:10:b2:8e:a0:fd:40:78:3d:53:
36:1b:e8:a9:db:a1:16:12:6f:bb:8a:1c:b4:80:f0:
f9:34:21:9f:f2:fe:61:8e:b8:cb:5e:7c:fa:82:a9:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:40:18:51:1E:46:A3:64:92:2A:5E:44:8C:81:FC:31:EF:72:53
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/w3ZAGFEeRqNkkipeRIyB_DHvclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.52.0/22
Signature Algorithm: sha256WithRSAEncryption
73:a9:cf:cf:84:c0:10:02:f2:e1:38:ba:86:57:0b:24:ed:07:
47:3e:ab:ce:2d:86:cb:fa:cd:5d:6e:46:49:d5:9f:8d:3e:fb:
d6:83:32:0e:93:18:3f:7b:67:d8:16:ed:ea:85:92:7f:f0:8f:
22:f1:9b:69:5b:c7:52:dc:32:8c:56:f3:81:12:bc:1b:03:5c:
3d:86:c6:eb:37:f0:c0:e8:dd:4f:2b:11:03:92:3e:70:72:56:
09:f8:1a:63:7a:78:ea:46:94:19:c3:b9:cf:69:5f:2c:29:ca:
09:64:29:16:34:ad:bf:d0:71:58:03:9e:c6:13:e4:62:44:d9:
86:7f:af:29:70:fc:9a:7d:8a:e1:ec:ad:c2:b4:eb:ca:bc:84:
e9:dc:6e:7a:e5:1f:0c:c6:13:3e:54:d8:dc:df:a1:85:60:1f:
b8:f1:39:0c:c4:c8:97:47:38:97:60:0d:a9:cd:5f:82:a4:86:
3c:e3:d0:24:4a:95:da:db:57:c6:45:4c:12:1d:08:62:20:c5:
a2:97:8f:cc:35:23:4f:fa:4a:ea:59:60:25:8e:21:d8:c5:c0:
5f:d4:2f:61:95:27:4e:39:f1:5d:e6:23:fa:c7:7a:03:a0:12:
0d:4e:bd:a0:08:95:6f:e3:1d:f9:2a:60:97:4d:d6:ac:d1:51:
99:93:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:15:55 2025 by rpki-client