Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/zG9FKmAjdLXZT1-Dtpv1pSZiijc.roa
File: zG9FKmAjdLXZT1-Dtpv1pSZiijc.roa (raw, json)
Hash identifier: DQzgmIbq6qHB254MSpNvXD8TOmxwktocwLSzJ3GbN4c=
Subject key identifier: CC:6F:45:2A:60:23:74:B5:D9:4F:5F:83:B6:9B:F5:A5:26:62:8A:37
Certificate issuer: /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial: 01856D6F47F4D5832CED5884A4217B0E8008
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/zG9FKmAjdLXZT1-Dtpv1pSZiijc.roa
Signing time: Sun 01 Jan 2023 13:04:47 +0000
ROA not before: Sun 01 Jan 2023 13:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42189
IP address blocks: 45.82.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:47:f4:d5:83:2c:ed:58:84:a4:21:7b:0e:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Validity
Not Before: Jan 1 13:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc6f452a602374b5d94f5f83b69bf5a526628a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:2d:7c:90:3a:ca:04:50:86:22:95:18:98:
d1:6d:86:f4:1d:e7:47:9b:95:23:6e:0a:05:6a:2b:
03:5b:d0:a8:42:e2:34:9d:a2:ed:3a:84:e0:21:7b:
94:17:6e:5a:12:72:2c:34:1c:2a:d3:16:44:88:7e:
23:d4:6b:9e:43:41:04:cc:ea:07:60:91:96:7d:43:
16:d7:6b:e9:e5:ea:d4:cf:b9:60:c5:dd:c1:ce:61:
3b:7b:46:24:12:2a:ee:2a:a2:c7:aa:66:5f:a5:c4:
0f:fa:e5:cb:b3:86:f9:6f:c1:71:aa:0a:f4:a1:a7:
af:d2:1c:61:fb:df:f6:ab:97:ea:41:8a:38:be:29:
d3:10:f7:f5:ad:79:6c:5a:88:7e:d5:bb:71:57:4c:
44:e6:f3:05:4b:fe:cf:16:fd:8e:e1:18:98:50:f1:
bb:b6:a4:3d:6a:31:c9:33:ca:27:48:67:d8:21:13:
49:79:aa:79:3f:f7:f2:f3:0e:0f:d1:3f:b0:f6:79:
a2:1e:6f:46:f5:ec:f1:bc:7b:e7:28:2c:a2:87:3c:
51:32:0a:24:b1:8a:a5:41:53:b4:86:c2:35:98:4e:
3a:f2:0e:c4:d3:68:93:a7:8a:6f:fc:9c:6e:b1:18:
1d:2b:11:7d:d2:e5:6a:c6:de:70:a3:45:52:06:50:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:45:2A:60:23:74:B5:D9:4F:5F:83:B6:9B:F5:A5:26:62:8A:37
X509v3 Authority Key Identifier:
keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/zG9FKmAjdLXZT1-Dtpv1pSZiijc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e6:4f:cd:62:5a:cf:6b:46:8b:f9:2b:9a:c2:63:95:ea:bb:
c6:c6:05:cf:95:c4:4b:2c:72:e6:a3:97:24:05:66:66:a0:ea:
76:f5:2e:4c:23:cb:ab:04:3a:60:e6:26:4f:6d:2a:7d:18:69:
91:2a:90:74:24:05:a7:b8:a4:d6:e7:93:1d:81:4b:85:b9:1f:
1f:a3:36:34:4c:16:a6:81:d7:0b:8a:ea:b0:95:c6:b2:90:cd:
ea:76:a4:f6:ea:93:25:74:5b:be:5d:1f:f0:a3:4d:da:9d:8b:
1a:14:fb:e9:a5:bf:1b:6c:3d:18:8e:4e:a3:f1:52:7a:4f:55:
10:0f:1e:e3:88:69:16:9a:7f:12:20:d2:9f:aa:77:d2:c1:11:
27:b3:ac:77:e9:16:3e:b6:e5:49:3e:11:03:c5:6d:22:ab:ef:
a4:c6:c5:e1:5f:2f:07:38:8e:70:65:a9:1d:41:a7:89:21:24:
dd:6b:46:99:72:8d:64:6b:d9:33:20:ac:d8:7f:6b:ff:4c:01:
bf:51:06:a5:e2:b4:7c:50:f9:80:d9:ca:f0:1f:73:ce:87:17:
a4:43:4b:b8:86:66:2f:44:d2:b2:c6:07:7a:9c:7d:ee:1c:21:
29:26:00:de:6c:2b:c1:7f:65:6c:2f:60:66:8b:8e:83:1c:4b:
ee:ae:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:33 2025 by rpki-client