Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/xeyG_Cre-2TsWb8hHB3rhBSFlT8.roa
File: xeyG_Cre-2TsWb8hHB3rhBSFlT8.roa (raw, json)
Hash identifier: YA9kaE+bVZU7m3KG9zcrebhnLPIO3q0JMhNKjvdZYGE=
Subject key identifier: C5:EC:86:FC:2A:DE:FB:64:EC:59:BF:21:1C:1D:EB:84:14:85:95:3F
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 040C20FF
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/xeyG_Cre-2TsWb8hHB3rhBSFlT8.roa
Signing time: Sat 01 Jan 2022 00:55:05 +0000
ROA not before: Sat 01 Jan 2022 00:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209387
IP address blocks: 45.67.124.0/22 maxlen: 24
217.115.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67903743 (0x40c20ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jan 1 00:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5ec86fc2adefb64ec59bf211c1deb841485953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:52:53:b2:a5:e0:ed:ea:a0:9a:e0:fa:75:
68:55:da:ef:48:8e:4e:19:d9:2d:1b:3f:b7:d8:b6:
d9:3f:2b:4c:0f:ca:dd:f9:98:e4:51:21:63:93:8b:
0e:9b:ff:7a:32:f8:ba:57:fb:c0:54:40:f1:02:57:
d9:1e:3f:c9:75:2e:01:6e:e8:f6:d2:9f:7f:03:64:
b0:ce:2e:94:8d:cb:39:21:f0:32:60:54:de:5c:8d:
dc:69:0b:0f:bb:48:ef:a0:cf:ea:d8:39:de:60:f2:
41:24:9c:12:d4:03:12:e5:ed:53:75:ac:61:a9:4a:
38:0b:1c:95:8d:ed:56:86:be:f0:8f:fe:41:be:45:
d9:4c:5e:8b:30:f7:94:74:ce:f5:b9:9e:c3:ea:c5:
4d:f7:44:01:8e:ee:75:23:0d:4b:e3:b4:54:61:c2:
08:65:18:57:c0:4f:c1:0a:a7:dd:69:29:9b:a5:f8:
9a:ee:b2:c2:e1:6a:45:ee:2d:d2:68:37:97:1f:5a:
e1:cb:7d:96:d9:2f:28:7c:a3:ad:f9:4b:fe:59:26:
7b:9b:7b:b5:f1:39:84:5e:01:f6:fd:8f:a9:ef:ab:
df:c5:57:54:ba:ef:fa:2f:fc:46:41:0b:d4:6e:96:
a1:d8:2d:63:46:6f:70:86:e4:2f:de:47:07:a4:82:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:86:FC:2A:DE:FB:64:EC:59:BF:21:1C:1D:EB:84:14:85:95:3F
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/xeyG_Cre-2TsWb8hHB3rhBSFlT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.124.0/22
217.115.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:28:4e:8f:20:d0:fc:88:69:e7:1f:99:a3:2a:3d:90:73:04:
c0:92:ae:67:3d:d4:29:8f:f8:9d:41:71:ab:7b:ed:a9:6b:71:
dd:6a:e3:c1:0d:08:59:9a:dc:a1:a8:1e:c8:a1:ed:cd:aa:37:
f9:c4:eb:c4:0a:4a:b2:9d:c1:08:ac:07:7c:c3:27:84:97:8d:
f4:cd:51:0e:1f:d2:ef:60:06:2b:ec:5a:31:52:fd:ad:4a:c3:
be:94:20:d9:e7:6d:23:a5:9e:b0:48:76:5f:a6:56:10:70:ad:
43:b9:39:34:58:14:a1:05:3e:e9:a8:39:90:65:79:e9:f6:f9:
ef:b7:2a:b7:52:b0:c3:49:ef:95:5d:d2:01:43:1e:44:a3:37:
a5:25:22:fd:18:25:ca:77:b1:27:e7:74:aa:44:28:2e:e7:02:
ab:d6:cd:fa:0d:92:1c:89:35:06:86:4d:6e:ae:61:8c:e0:e4:
f2:b9:f6:a6:0f:1e:7e:59:6c:1c:d5:79:7e:40:ad:57:49:a7:
1c:48:dd:37:4d:6e:f4:8d:84:88:3d:0f:fc:48:93:ca:88:72:
9e:c8:8e:de:8d:69:a2:f7:52:98:30:e0:04:1a:fe:a4:8f:10:
83:00:d9:de:c6:fc:fb:7a:f4:71:f0:4c:d7:52:e4:70:02:28:
8f:03:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:45 2025 by rpki-client