Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/9TUr3gCzuUVnIpNEqDfRXw3BJ0g.roa
File: 9TUr3gCzuUVnIpNEqDfRXw3BJ0g.roa (raw, json)
Hash identifier: br33F462FMEu5gEosfPlOiM1yOvx/VhJO+By8rxIa9E=
Subject key identifier: F5:35:2B:DE:00:B3:B9:45:67:22:93:44:A8:37:D1:5F:0D:C1:27:48
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01861289DB027567AAA6CD66B9C229393E10
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/9TUr3gCzuUVnIpNEqDfRXw3BJ0g.roa
Signing time: Thu 02 Feb 2023 14:31:09 +0000
ROA not before: Thu 02 Feb 2023 14:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200106
IP address blocks: 45.94.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:89:db:02:75:67:aa:a6:cd:66:b9:c2:29:39:3e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Feb 2 14:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5352bde00b3b94567229344a837d15f0dc12748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:8d:9e:77:31:3e:2f:7e:06:cd:68:c9:39:
10:c9:5d:3d:cc:65:30:17:de:5d:99:22:39:91:1a:
f8:cb:26:2d:07:3c:ea:72:3e:c1:e8:bc:90:56:4a:
11:3c:cc:a7:a3:40:fc:22:73:e2:ef:62:13:88:e6:
64:ec:78:c3:41:3e:a2:f3:9a:29:63:f7:85:0a:5d:
c5:2c:f4:00:3d:29:5d:6c:ce:56:a7:dc:1a:20:1b:
79:09:ce:f7:af:fd:6a:01:ad:f3:84:3d:43:1a:0f:
94:74:38:b4:a1:82:58:40:da:dd:f5:37:a5:67:d8:
90:de:d6:a9:8f:3a:c9:0d:47:66:c9:18:fa:e9:c6:
11:f7:4d:ec:1d:75:8c:9b:c0:30:39:a0:18:61:48:
ec:62:cc:b9:5a:ea:9c:c1:61:70:d0:0f:4f:94:c3:
3c:78:7e:7a:7d:67:af:f9:19:e0:54:56:dd:6f:ba:
23:17:f8:23:4a:12:df:89:b7:17:a9:b3:c2:97:d5:
29:9d:9f:18:87:0b:60:9b:5a:a5:b7:8f:72:11:f8:
99:52:f1:3f:59:1c:44:29:c3:f3:55:9e:f2:08:36:
c8:6a:cf:27:ab:35:48:73:14:1e:3c:1f:04:29:66:
ce:e4:b6:cf:f4:a2:1b:8b:dd:81:e3:e9:78:97:3a:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:2B:DE:00:B3:B9:45:67:22:93:44:A8:37:D1:5F:0D:C1:27:48
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/9TUr3gCzuUVnIpNEqDfRXw3BJ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.7.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a9:cc:23:0f:4e:4b:6c:4b:26:f5:34:cd:38:c9:08:44:18:
f2:42:cc:1e:b7:f2:08:12:67:79:c7:8b:97:65:b4:0b:7d:cf:
2f:31:fc:5a:c1:25:b0:34:d6:d8:fe:b9:42:09:fe:9b:86:23:
45:57:f8:f5:dd:0e:9c:75:ee:53:90:ea:d2:d5:d7:4c:54:00:
6d:c8:76:f7:f4:f8:8e:84:07:24:82:02:c1:f4:6a:7d:db:06:
3a:d2:12:b2:8d:26:14:3e:7f:ac:a1:18:49:c7:2b:5c:4d:7a:
7d:25:67:64:2a:98:05:a4:49:99:f4:91:05:50:47:2a:50:08:
49:a4:30:24:0f:d8:a9:d4:c5:58:ce:81:68:08:fe:8a:73:17:
5b:e7:33:20:c1:8b:e7:ae:bb:6b:7a:32:99:b7:be:0d:49:a9:
25:08:4d:aa:d7:6c:d3:ed:e8:0f:2c:4b:ce:18:e2:33:0b:92:
76:77:db:06:fe:a6:f6:05:97:ff:f8:43:3a:71:22:8d:b5:03:
97:18:ad:70:65:89:a9:7f:0d:b1:8f:79:f0:41:3f:be:b8:ea:
9b:ef:58:94:b1:f9:41:84:25:bf:89:b7:c5:d2:d6:da:2c:60:
ea:3d:7e:f6:48:4f:f6:a3:32:b7:af:65:9c:24:c1:c8:c3:ab:
d2:61:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:25:00 2025 by rpki-client