Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/RjYBMtO-4rx85aLktFA9gPlJr70.roa
File: RjYBMtO-4rx85aLktFA9gPlJr70.roa (raw, json)
Hash identifier: HzWDDaep39Zf5AySV8CkzLfb7HLSF7S2nOSv/FWryd4=
Subject key identifier: 46:36:01:32:D3:BE:E2:BC:7C:E5:A2:E4:B4:50:3D:80:F9:49:AF:BD
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01843E836858624AFB4A8A03356292C04232
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/RjYBMtO-4rx85aLktFA9gPlJr70.roa
Signing time: Thu 03 Nov 2022 17:21:49 +0000
ROA not before: Thu 03 Nov 2022 17:21:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202335
IP address blocks: 45.8.179.0/24 maxlen: 24
45.8.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:83:68:58:62:4a:fb:4a:8a:03:35:62:92:c0:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Nov 3 17:21:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46360132d3bee2bc7ce5a2e4b4503d80f949afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:d1:c4:06:b9:4e:1c:cf:3d:ca:21:e0:b3:
6b:8e:b3:71:11:1b:fe:eb:d8:57:83:a7:c5:c4:69:
7d:6e:5e:2d:d2:3f:fa:e7:ea:98:20:7e:34:73:46:
8e:e6:fd:56:23:7e:e0:6b:19:46:74:3b:45:9e:a7:
f1:c4:ec:59:39:72:1f:7e:e1:54:00:00:f6:58:99:
00:0e:c4:7c:28:26:30:7c:ad:69:f6:73:f2:8d:6a:
ac:38:4f:d4:b7:58:39:ac:13:34:35:9f:03:5c:f3:
55:c0:2b:18:d3:b9:4f:1c:f2:fa:b0:cb:72:d7:0a:
54:b3:c5:e0:fb:67:f7:ac:f4:45:fd:5c:31:fe:52:
d9:25:b6:e9:c2:37:80:0a:71:53:eb:8e:14:fc:5f:
08:82:9a:69:8e:58:66:4a:22:2f:a9:5d:c7:f7:08:
0f:30:14:28:ed:e7:77:13:6e:da:36:1b:fe:ca:81:
c9:3f:1a:88:44:c1:1a:ac:c8:22:e1:46:62:bf:7e:
b3:88:08:0a:d6:4a:7a:c8:19:b7:0b:7e:d2:b8:89:
89:72:fc:f2:89:85:0c:e9:e7:92:77:c5:ff:30:2f:
91:a1:13:1f:a4:6a:5a:40:f2:3e:47:a5:9b:77:4b:
8f:fc:cd:d0:ef:09:38:7f:10:75:af:3e:e9:4c:6b:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:01:32:D3:BE:E2:BC:7C:E5:A2:E4:B4:50:3D:80:F9:49:AF:BD
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/RjYBMtO-4rx85aLktFA9gPlJr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d0:13:43:5b:f1:a0:4d:7d:9b:72:8c:5d:f8:25:b1:34:68:
5d:da:5c:ca:04:dd:22:78:49:af:c3:a3:7f:d2:94:f9:5a:0d:
6e:52:70:15:81:59:75:bd:29:7f:f4:74:d7:2d:8c:d4:d5:b1:
b0:5e:11:eb:5e:40:2c:73:2f:ca:ca:3e:64:bf:c1:db:06:82:
89:d5:f2:f7:32:93:0b:44:23:15:90:cf:8f:e2:e1:f2:d3:8c:
41:d1:2e:df:59:26:13:c4:9b:5a:d1:8c:e6:94:80:20:b5:d3:
74:69:70:29:5e:17:60:f8:8d:2c:2d:7f:81:49:b7:35:30:2b:
a6:b8:57:e2:15:26:86:f5:1a:5b:ae:c6:cd:1d:a7:08:af:80:
06:27:39:4c:80:23:f4:84:ef:46:2b:cb:56:52:fa:e7:f8:45:
09:89:18:88:bb:4b:b7:e9:d1:eb:44:84:85:47:86:ac:2f:f0:
8c:9d:07:99:ca:2c:6f:9a:8c:7d:ce:de:86:99:b9:d3:20:56:
49:55:76:e1:d1:6c:3a:9a:1a:f1:f5:6e:5c:b9:48:fc:f4:53:
72:3f:35:43:10:56:40:f4:a5:a9:5d:53:94:eb:53:e1:d8:06:
63:c8:f3:15:c2:28:44:d8:7e:42:1d:59:a8:a5:a5:27:53:f6:
f0:c7:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:23 2025 by rpki-client