Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/i0aPewCk36fqButYuy4ujLHd7iY.roa
File: i0aPewCk36fqButYuy4ujLHd7iY.roa (raw, json)
Hash identifier: ZkiJSecRB3yRQ5SveI8qpC/ff3HaOVhohdh0YmrQ/mE=
Subject key identifier: 8B:46:8F:7B:00:A4:DF:A7:EA:06:EB:58:BB:2E:2E:8C:B1:DD:EE:26
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 09519C25
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/i0aPewCk36fqButYuy4ujLHd7iY.roa
Signing time: Sat 01 Jan 2022 14:06:44 +0000
ROA not before: Sat 01 Jan 2022 14:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211335
IP address blocks: 45.11.41.0/24 maxlen: 24
2a0e:7d02::/32 maxlen: 32
2a0e:7d03::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156343333 (0x9519c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 14:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b468f7b00a4dfa7ea06eb58bb2e2e8cb1ddee26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:1e:e5:a3:74:0f:2e:72:31:a4:a7:be:00:
da:28:e7:97:ed:aa:16:31:73:05:2b:65:0d:8a:3a:
e6:be:69:b3:56:95:81:c3:bb:a3:80:5d:98:81:59:
db:d9:8a:aa:61:ef:fb:9f:5a:a9:4b:b1:56:da:db:
66:37:d3:4e:ce:1e:24:9f:1e:7f:5d:ab:ab:01:86:
b7:1f:dc:75:e0:1d:e5:af:86:ff:72:22:77:d7:3a:
c0:62:07:e3:67:f7:46:b1:a2:4b:db:d0:b1:81:3c:
4a:43:dc:05:e3:12:68:96:04:b5:88:61:33:7b:b7:
f4:72:2f:dc:02:ec:27:fa:c9:33:74:a9:db:b7:08:
52:4c:08:bc:ae:fd:31:80:ca:5a:0b:0e:5b:91:11:
d2:f6:57:29:ef:47:cd:4a:e1:cc:4e:12:11:32:c6:
de:9c:7e:d4:65:b6:c1:3d:b0:5e:77:70:bd:de:aa:
2f:d8:55:8e:3d:a1:ff:e4:32:91:1a:d7:77:7a:0c:
1f:c8:08:b4:7d:54:05:10:06:68:8e:68:98:25:32:
5f:fb:bc:41:09:4b:2f:60:a0:80:34:17:7d:88:3e:
78:03:96:47:17:81:bd:80:b5:a8:4e:d0:90:e3:1e:
0a:cb:a6:3e:2f:d4:bf:53:36:02:60:ab:c9:a1:e3:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:8F:7B:00:A4:DF:A7:EA:06:EB:58:BB:2E:2E:8C:B1:DD:EE:26
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/i0aPewCk36fqButYuy4ujLHd7iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.41.0/24
IPv6:
2a0e:7d02::/31
Signature Algorithm: sha256WithRSAEncryption
92:10:92:0f:4a:0c:91:d7:39:87:61:3e:1a:76:73:28:a1:16:
64:2c:3b:25:63:31:f3:ab:78:c4:b4:70:bf:af:d9:57:de:bc:
3e:04:87:64:5e:7d:c9:9b:c5:62:71:b7:a2:a9:48:da:98:de:
94:9c:fd:e6:1d:c2:03:e6:e7:53:f4:df:d5:38:51:0d:dd:54:
2f:d5:89:9b:80:40:5b:26:2d:9f:91:4c:da:6c:05:db:b6:62:
e1:4d:f2:be:25:19:98:66:c7:84:10:89:78:43:55:8c:42:ff:
c5:42:d0:c0:c1:82:1c:7a:11:e3:79:52:a9:fd:68:43:bc:e1:
9e:5f:f8:74:97:61:0b:6a:9a:a5:f3:b9:d9:fa:14:4c:ed:a6:
e6:2f:0c:a9:92:79:a9:1a:21:c8:56:7b:57:02:83:3d:3b:24:
8d:f2:2c:c0:11:8f:08:b7:08:93:18:d6:c6:4d:8a:eb:1f:82:
b8:fa:8d:80:11:b8:96:5e:63:e2:38:14:e1:45:1a:2c:cf:9f:
4e:1b:b4:46:b7:e7:bc:14:34:28:0a:b7:3a:53:4f:e6:3d:1e:
a2:34:ab:25:30:7e:e8:4f:ca:e0:0c:0d:20:f7:ad:ad:35:f5:
00:69:7c:66:0c:04:28:7c:e3:75:2c:3e:67:1f:9a:30:ba:d7:
94:52:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:31 2025 by rpki-client