Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/_M-79VBK0Rzp1nD5PhiYZ_pA0ts.roa
File: _M-79VBK0Rzp1nD5PhiYZ_pA0ts.roa (raw, json)
Hash identifier: KiMnkWdkUm7MgI7eCPoF21bLDzQ0fwOUJPXAmiRm6kA=
Subject key identifier: FC:CF:BB:F5:50:4A:D1:1C:E9:D6:70:F9:3E:18:98:67:FA:40:D2:DB
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 01856C5CAC10EE7BEF99EA6D9FEDB6B13035
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/_M-79VBK0Rzp1nD5PhiYZ_pA0ts.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201800
IP address blocks: 45.159.104.0/22 maxlen: 24
188.68.188.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ac:10:ee:7b:ef:99:ea:6d:9f:ed:b6:b1:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fccfbbf5504ad11ce9d670f93e189867fa40d2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:86:7c:4d:b6:f9:c2:b1:93:3b:e6:78:3f:
7e:eb:36:bb:c4:4a:7f:61:9c:33:0c:29:9b:5e:ac:
36:42:67:06:8d:d1:94:49:69:fb:39:ad:55:09:2f:
03:e9:6e:3a:55:52:6c:20:99:ea:22:d1:40:43:b1:
ba:de:94:f0:36:88:4a:d7:8e:82:48:18:7f:1f:7c:
19:13:91:05:e5:52:89:29:6b:99:c3:d2:43:af:fd:
34:b2:6c:46:b1:a0:56:9d:04:bf:28:4f:5d:6a:d1:
24:6a:ea:cb:9e:81:3b:4c:e5:a9:55:a5:57:37:0b:
0d:5b:67:d4:0a:d5:96:b4:30:d1:05:0d:a6:3c:69:
43:b4:c0:db:9a:78:1a:95:0e:a1:b6:70:c3:3c:48:
a0:c0:bc:b0:9f:9e:26:5f:f9:b0:47:0b:19:78:d3:
d4:c0:fb:b6:0e:8f:22:0a:05:b2:e9:e8:09:9f:73:
26:4d:de:8b:3a:47:36:ed:2b:78:69:58:3a:63:8b:
d0:dd:af:39:52:dd:1e:f8:aa:3c:3b:a5:9d:05:72:
3c:47:a9:d9:5b:e6:64:f6:0d:33:7c:5a:f6:c1:7f:
95:70:01:ae:e2:f9:d7:41:20:d6:64:9d:10:20:46:
36:55:6a:8e:b3:95:f5:b9:34:ab:4b:d8:05:c9:af:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:BB:F5:50:4A:D1:1C:E9:D6:70:F9:3E:18:98:67:FA:40:D2:DB
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/_M-79VBK0Rzp1nD5PhiYZ_pA0ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1d:72:1e:ac:9d:16:29:7e:ba:fa:62:43:2c:42:65:a0:f3:
1b:9a:ea:39:b8:5b:cd:bf:6d:f3:31:85:5e:2a:dc:cc:43:38:
c2:d1:95:75:5f:f9:78:14:d4:6c:8e:37:77:7e:db:87:f4:1f:
40:d0:97:e4:b1:0a:d4:e0:60:2d:1b:59:57:ce:6e:33:88:25:
64:3a:2b:8f:9d:69:18:89:a6:0a:1f:98:a3:77:2c:21:d3:56:
48:b1:eb:0d:86:05:a5:bc:b8:95:44:bf:5d:cc:ba:61:29:3e:
02:d7:c1:8f:39:e3:5b:1a:ad:a5:35:dc:ce:10:c9:3c:76:dc:
38:9c:e0:b0:af:5d:7e:42:b7:cd:52:14:66:53:6d:1f:cc:98:
85:6a:74:ba:32:d8:71:c5:2d:79:f7:bb:39:76:e7:ef:e5:ba:
76:fa:eb:1d:ab:89:5c:81:83:5a:d7:79:9f:66:94:df:c6:31:
a7:3c:50:21:fb:7c:1b:18:f6:9a:33:c3:1a:38:3d:07:09:2b:
da:a3:6a:20:36:7d:30:d4:a7:52:47:19:54:f2:1e:b9:06:93:
bd:0d:95:c5:4d:a0:6f:3a:0a:f6:de:1c:99:e5:2b:1e:ea:f0:
b3:41:88:02:7b:99:9e:b7:d9:75:28:ac:de:2d:99:20:a7:38:
cc:28:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:40:43 2025 by rpki-client