Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-drrgMQHVT5jnk7fRPnTU7Xgibo.roa
File: 1-drrgMQHVT5jnk7fRPnTU7Xgibo.roa (raw, json)
Hash identifier: f9SLgOQrlTk4nn/R1Vv5Yavhi54/HLzvIDvt8F9jUYc=
Subject key identifier: F9:DA:EB:80:C4:07:55:3E:63:9E:4E:DF:44:F9:D3:53:B5:E0:89:BA
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01856C783C25BE9B26E8FA8EFED361070999
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-drrgMQHVT5jnk7fRPnTU7Xgibo.roa
Signing time: Sun 01 Jan 2023 08:34:57 +0000
ROA not before: Sun 01 Jan 2023 08:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 45.132.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3c:25:be:9b:26:e8:fa:8e:fe:d3:61:07:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 08:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9daeb80c407553e639e4edf44f9d353b5e089ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:0c:4d:7d:2d:d0:4e:2f:09:d3:01:43:8f:
6b:f4:8c:28:73:83:29:71:76:c3:ec:1e:b6:d1:6a:
9b:20:5a:81:bd:a5:ff:f5:39:c8:44:69:5c:c5:4c:
74:29:f5:4b:69:8a:5d:79:37:68:38:70:4d:93:05:
76:23:15:b7:56:35:f8:2b:53:0b:45:a0:45:38:d1:
34:4f:ab:5f:f0:ab:95:e9:45:72:08:78:56:27:21:
a4:7b:5b:1c:93:3a:ab:d0:53:62:83:cb:ab:1a:03:
6c:20:de:6d:c3:71:85:f4:5e:e8:a6:2d:e3:91:cb:
8b:94:1c:e8:24:14:7e:0c:fa:83:17:e2:b2:75:99:
56:9a:18:ad:28:de:52:43:fd:05:91:8f:69:65:4b:
2f:bb:5f:a6:1c:63:75:03:76:fe:a4:0d:b1:99:f7:
3a:5e:99:2b:8f:90:a7:13:0c:95:47:cf:c1:a4:a7:
0e:f7:82:74:49:a0:bd:de:3c:24:fa:03:eb:c3:8d:
a6:bc:c5:67:a1:10:40:22:46:55:ab:cd:76:79:68:
be:18:69:5c:d3:7c:53:a9:6c:f9:de:ee:dc:62:d4:
29:5b:75:31:56:a1:5d:07:0a:be:ff:60:0c:69:68:
e3:bb:57:2e:70:b8:2f:86:df:fc:a4:1f:50:2d:37:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:EB:80:C4:07:55:3E:63:9E:4E:DF:44:F9:D3:53:B5:E0:89:BA
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-drrgMQHVT5jnk7fRPnTU7Xgibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:b8:8b:c4:23:a4:3b:ea:64:43:b1:8d:8c:24:f6:94:15:83:
9f:0a:8f:2e:5b:dd:6b:68:43:a7:1b:07:1c:4a:e6:f2:26:86:
7b:ec:50:29:63:a8:83:68:3d:c2:d6:04:d8:a7:de:f3:a0:57:
f4:90:31:b0:c8:b5:4c:40:1b:82:51:71:85:6b:53:54:e7:dd:
f1:38:03:05:83:90:a1:71:99:7c:bc:0e:4d:37:82:08:1d:c2:
46:bb:7d:b3:3f:df:e7:b1:d7:71:d6:d0:54:ca:b0:a6:e7:5f:
77:3d:08:08:e8:28:80:8a:b6:25:b3:98:72:4c:a0:73:c9:48:
f1:da:19:b4:4a:1e:75:87:84:a3:26:e8:06:54:c7:ef:d7:47:
88:b3:82:8d:31:58:bf:2b:99:bc:15:17:10:64:39:e9:86:13:
bd:11:8c:7d:ca:f3:73:77:c5:a1:69:25:25:b4:3f:ab:78:2f:
fb:ba:35:ac:25:6c:4a:0b:48:6c:bc:cd:59:38:21:b5:f8:5b:
9c:bf:3a:86:f7:44:94:be:37:a3:97:7d:d8:c5:84:cc:69:15:
3f:0c:97:2c:37:2f:a8:d2:c1:4c:8d:83:f3:fc:17:27:1f:2e:
51:b2:7d:c7:0f:24:a9:17:d5:c9:45:84:f5:09:9e:3d:eb:08:
fa:15:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:01 2025 by rpki-client