Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zFsC4WVkOaKHJYP26dHwGSuDPxM.roa
File: zFsC4WVkOaKHJYP26dHwGSuDPxM.roa (raw, json)
Hash identifier: Q7DLt1fP288nxAj5PuqKjrmFvADcA+w7oAJCE5C0msA=
Subject key identifier: CC:5B:02:E1:65:64:39:A2:87:25:83:F6:E9:D1:F0:19:2B:83:3F:13
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 075821ED
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zFsC4WVkOaKHJYP26dHwGSuDPxM.roa
Signing time: Sat 01 Jan 2022 04:57:14 +0000
ROA not before: Sat 01 Jan 2022 04:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41683
IP address blocks: 45.158.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123216365 (0x75821ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc5b02e1656439a2872583f6e9d1f0192b833f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0a:45:91:f8:8e:36:d7:84:d9:f5:3a:92:cb:
62:bd:46:65:0c:a8:5a:50:89:15:0a:ea:d4:ea:76:
a0:b5:3c:31:33:7d:e9:59:02:c5:6e:7b:49:54:cf:
7f:7a:c9:1d:6d:c6:37:bb:0e:37:c0:26:3a:da:37:
2f:5f:b3:a2:22:c4:f3:be:e5:4a:25:92:1f:9b:4d:
89:61:11:a4:8c:ec:bf:cd:8b:a3:60:d8:d1:9e:fa:
2d:e2:1b:b0:cd:d6:7a:6a:7e:64:92:1e:8f:52:fd:
0b:a5:7e:f5:5a:23:45:5c:67:46:ae:6e:11:a1:59:
74:b0:40:a7:d0:3b:a1:b8:04:1c:a4:c8:a2:36:88:
16:9f:08:44:63:28:b6:08:ec:a9:49:4f:0c:ae:a8:
3d:87:64:8b:4b:84:6f:9d:b3:59:14:8e:67:84:26:
bf:37:8f:e3:f7:84:ab:25:03:ed:1b:b1:b6:b5:4d:
df:80:cd:d9:9d:3e:c0:96:cc:23:ad:c9:68:a0:15:
f1:86:ba:40:52:d4:9a:df:c3:79:85:67:da:2e:c7:
63:b7:36:f1:27:9b:cc:8b:ec:06:19:b5:dd:65:4a:
80:c3:51:aa:ce:ce:38:4e:c5:72:0a:9c:f6:70:9e:
7d:b7:40:bd:77:ae:f5:50:c5:ec:e1:58:3e:21:40:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:02:E1:65:64:39:A2:87:25:83:F6:E9:D1:F0:19:2B:83:3F:13
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zFsC4WVkOaKHJYP26dHwGSuDPxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.13.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c5:e4:97:dd:5b:32:93:c9:d1:cd:8f:f3:4b:24:9d:5d:64:
5b:56:bd:1d:3d:75:43:1b:ee:16:18:d2:e3:b9:2e:3d:dd:68:
6b:e3:a6:1c:8a:7c:d2:50:4e:33:0e:18:d2:62:bc:5b:28:b0:
d7:3e:c8:5f:99:62:86:42:2f:2f:61:76:60:40:24:a7:c6:8a:
2b:64:af:c3:ea:7b:c7:0f:2c:7d:07:4e:fe:c5:ac:bb:f4:e0:
3e:6a:f7:41:c3:57:30:08:f4:63:70:56:af:06:1a:97:4e:0a:
50:8f:ff:e9:bf:7f:59:cf:bc:ef:0a:b3:bd:eb:e2:3f:29:8a:
d0:86:29:40:1f:19:0a:db:9e:a3:db:f0:84:01:55:8b:d5:0d:
6a:89:7b:33:53:fb:9e:1c:02:87:7f:55:f4:96:35:45:a6:7e:
46:2b:0c:3d:7a:44:10:ea:1f:1d:8d:40:ea:00:dd:7b:a5:16:
b7:88:e8:d0:45:36:4a:ac:1e:18:bb:49:a2:96:cb:46:1b:aa:
4f:dd:f3:0d:70:22:ae:af:9f:b4:ea:7e:bf:41:92:a4:d5:da:
ab:fa:8a:b6:82:d8:e1:1f:6e:e7:22:93:f7:7c:1b:01:d9:64:
3f:53:ce:40:b8:39:0b:93:74:c9:10:c2:14:3d:15:0a:48:ce:
04:f4:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:09 2025 by rpki-client