Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/AXodcknA2i6jgxBNHN37EqJpAXQ.roa
File: AXodcknA2i6jgxBNHN37EqJpAXQ.roa (raw, json)
Hash identifier: X490r4Fakd0tK1O6howApoWhWjLSsaREQ5ZS5BTiEcI=
Subject key identifier: 01:7A:1D:72:49:C0:DA:2E:A3:83:10:4D:1C:DD:FB:12:A2:69:01:74
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 018571B0B9301D56EE8000E3C11360AE4E67
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/AXodcknA2i6jgxBNHN37EqJpAXQ.roa
Signing time: Mon 02 Jan 2023 08:54:45 +0000
ROA not before: Mon 02 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 45.15.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:b9:30:1d:56:ee:80:00:e3:c1:13:60:ae:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jan 2 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=017a1d7249c0da2ea383104d1cddfb12a2690174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:84:df:69:15:40:49:e5:6d:db:27:a4:68:
9e:46:5e:10:f1:e0:9c:aa:24:46:df:5e:42:42:e0:
fe:0c:4c:48:c0:75:e2:36:0a:5e:f2:fc:58:fe:86:
5e:f3:06:f5:ce:71:bd:d4:03:9a:52:cf:a8:58:0e:
7f:22:fb:e1:1c:71:99:ec:c4:8b:f2:28:12:ba:60:
04:65:6a:46:15:04:6b:b4:6e:49:aa:3b:25:a9:e4:
27:d4:4e:71:d7:50:be:b6:01:13:39:cb:37:28:29:
73:3f:36:0d:c4:03:6f:87:06:72:cb:43:20:78:c7:
5f:18:11:0e:7b:9b:7e:d4:85:ea:a8:b4:d9:a3:9f:
23:b1:a4:7f:5c:35:95:2a:1d:80:00:84:94:98:4b:
e1:37:bf:3e:88:ae:38:85:03:c2:4a:eb:4b:2c:91:
7d:52:7f:1c:c6:f7:8b:50:2a:3c:63:26:a5:7f:f2:
42:3f:24:0d:80:37:12:9f:8e:5b:ea:41:fb:2a:b2:
ae:02:8b:eb:47:d2:c7:14:e3:8c:2b:7a:c1:31:1e:
b4:e9:9b:18:dc:ea:fd:97:d6:b3:3b:91:b9:49:b9:
5e:8c:dc:68:00:a8:15:39:d2:47:45:a5:9e:88:b1:
c2:a7:be:c8:9a:81:b8:5b:8c:3e:85:b5:cd:48:21:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:1D:72:49:C0:DA:2E:A3:83:10:4D:1C:DD:FB:12:A2:69:01:74
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/AXodcknA2i6jgxBNHN37EqJpAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4c:4b:5b:39:40:20:93:24:05:8f:2e:7f:0b:ff:2b:6d:c7:
96:97:5e:4d:8c:59:19:62:54:a6:0b:7c:9d:3d:dd:ed:51:ac:
73:89:9f:7d:fa:53:c8:29:77:0f:64:fe:ef:0f:91:23:05:c1:
b1:ec:79:ee:4a:79:64:32:4c:57:40:c9:9b:13:1a:22:58:49:
63:7a:96:04:d2:c7:4e:35:d8:3c:c9:08:fc:29:52:3f:ba:7a:
28:e2:5c:7c:77:1d:eb:c1:1a:d0:b3:34:05:ce:71:63:bf:49:
96:c2:c6:57:4e:37:f3:f7:b7:ac:19:d6:7c:25:cd:77:7f:b4:
fe:9b:94:2e:4e:e1:7e:c3:3d:33:88:19:45:1f:f7:0f:6f:42:
08:54:60:c3:92:68:3e:40:d8:32:56:d9:ec:56:2c:4b:cd:84:
25:cb:4f:90:e8:6c:85:10:3b:20:47:4e:2e:7a:dd:41:fd:9f:
b3:d1:39:b8:92:cb:c3:61:bd:3e:3e:13:b6:08:3b:a7:d5:4e:
d7:c2:3e:05:8b:34:98:30:fe:33:9a:a6:e7:e6:13:a8:7b:21:
13:b5:e8:5e:09:59:b6:34:41:bd:b1:ff:d5:84:dd:44:96:c0:
0a:3e:3d:84:fb:9a:e2:2e:5e:47:68:ad:60:cf:12:94:92:01:
d9:81:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:01 2025 by rpki-client