Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/qTBbXMzqjuZHUpCjg2yR9AQayjY.roa
File: qTBbXMzqjuZHUpCjg2yR9AQayjY.roa (raw, json)
Hash identifier: s9ia7bNVF4wwNlSLMRbjBKWJ2pNgbOx1mlGl0AYUzXw=
Subject key identifier: A9:30:5B:5C:CC:EA:8E:E6:47:52:90:A3:83:6C:91:F4:04:1A:CA:36
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 0755D245
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/qTBbXMzqjuZHUpCjg2yR9AQayjY.roa
Signing time: Sat 01 Jan 2022 01:57:44 +0000
ROA not before: Sat 01 Jan 2022 01:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34934
IP address blocks: 45.152.253.0/24 maxlen: 24
45.152.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123064901 (0x755d245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Jan 1 01:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9305b5cccea8ee6475290a3836c91f4041aca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:99:af:e9:d0:64:68:6d:27:a3:85:16:3d:
3a:f5:61:46:47:d4:03:ca:32:a6:d2:2d:c5:cf:b0:
bc:e7:1f:e5:a3:70:df:2e:70:0a:bf:8f:fe:6a:f2:
b7:2a:99:3a:b1:30:96:c0:88:6f:5d:4e:fc:69:da:
d7:e0:2e:fb:45:5c:e7:61:af:c9:73:bf:3a:07:c7:
9f:5a:f2:7a:d7:50:84:7a:a4:a4:2d:de:85:b7:d9:
fb:92:f0:25:fe:a3:6d:b7:77:d8:96:e1:fb:1d:65:
7d:53:7b:70:96:37:69:17:a4:04:8d:67:9b:f4:42:
85:65:c0:aa:0a:54:fe:6e:70:fc:c4:e1:19:51:52:
d2:16:69:9a:e6:d8:51:26:41:51:f4:17:8e:03:ae:
b7:22:d9:40:99:6f:48:d2:f0:29:4e:6f:35:6c:d4:
b0:b6:e9:2f:70:0a:f9:19:cb:e1:a7:ae:be:59:01:
a7:b2:ba:02:d0:09:ca:5d:32:54:ae:a9:36:e6:7d:
82:e8:a4:4d:52:23:7b:79:66:82:7a:dd:38:bc:df:
49:3d:14:fe:69:05:1b:e6:7d:4f:e2:d1:f5:e4:7c:
ef:31:ed:92:7c:1b:29:a4:98:8c:e1:da:d6:76:fb:
3e:98:b0:af:c8:73:82:23:5e:eb:ac:2e:0b:a4:74:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:5B:5C:CC:EA:8E:E6:47:52:90:A3:83:6C:91:F4:04:1A:CA:36
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/qTBbXMzqjuZHUpCjg2yR9AQayjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.253.0-45.152.254.255
Signature Algorithm: sha256WithRSAEncryption
15:0c:af:72:e2:af:9c:2e:07:e4:20:70:57:0c:40:9f:8b:2f:
6a:da:fc:92:3a:a9:a4:2b:da:1c:1f:d5:6d:5f:0b:b5:94:a2:
e3:bf:f3:ca:62:71:ad:84:01:4d:f4:d3:6a:c1:ed:eb:5c:f5:
9b:e2:9d:15:91:63:6e:4d:6c:89:9a:04:b5:5f:6e:c2:33:ea:
e2:91:8f:bd:7f:9c:ba:0a:f7:48:b0:ac:4e:05:66:4e:52:70:
e5:e2:d5:31:f5:c0:05:7c:2f:b2:e9:b0:f8:b8:a2:56:fb:45:
3b:83:81:1b:e0:5d:d0:7e:be:2f:53:4d:cc:81:6d:fa:80:53:
55:85:95:ad:a8:96:6f:f3:d7:82:63:6c:9a:80:9f:ad:00:7c:
c6:47:f9:0b:5b:41:7a:3b:7e:46:be:db:60:d5:6c:c5:a4:5f:
d2:6d:b8:ac:8b:06:86:e1:3d:14:5c:54:49:d0:b9:fa:de:45:
3f:c3:57:7e:3e:03:c2:4a:b7:70:ca:cd:01:d5:04:6b:6a:0d:
68:ae:6a:9a:35:e1:67:63:61:10:f8:bb:3e:73:79:18:35:c8:
51:25:f5:6a:29:77:62:f7:56:14:71:1f:47:00:02:5e:88:f5:
75:d6:b6:a1:6b:51:38:5b:84:af:e8:99:b2:d5:59:65:b8:3c:
33:c3:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:00 2025 by rpki-client