Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/VS7tZhGJU7uLRcXOnkKSbN5xcrA.roa
File: VS7tZhGJU7uLRcXOnkKSbN5xcrA.roa (raw, json)
Hash identifier: /Au1Aoq9SatJTfXPMwKY8uRd0fVSpsJcGMceLxFFEXo=
Subject key identifier: 55:2E:ED:66:11:89:53:BB:8B:45:C5:CE:9E:42:92:6C:DE:71:72:B0
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0185F308A4781B77F9BB87362EF15C0D2CAD
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/VS7tZhGJU7uLRcXOnkKSbN5xcrA.roa
Signing time: Fri 27 Jan 2023 11:41:47 +0000
ROA not before: Fri 27 Jan 2023 11:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212301
IP address blocks: 45.67.233.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:08:a4:78:1b:77:f9:bb:87:36:2e:f1:5c:0d:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jan 27 11:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552eed66118953bb8b45c5ce9e42926cde7172b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:d4:47:3f:d6:df:18:7f:3f:b9:40:b1:b5:
db:a5:51:fd:33:14:79:04:10:05:d8:fd:1e:2b:a9:
48:2f:33:59:1d:8c:81:88:07:1b:b9:c4:62:17:b3:
a0:3d:fd:d3:08:52:79:cc:df:a7:12:26:b6:ef:32:
8a:09:a6:e2:32:5d:1b:e2:61:e5:2d:45:91:50:1c:
97:56:29:b2:fd:28:48:9b:ef:0a:bc:e8:79:db:77:
5a:ce:8a:28:c6:b6:d2:a0:6f:00:96:b2:af:f7:06:
64:43:80:7d:f0:e4:01:97:a2:f1:35:71:50:01:4f:
40:44:12:0f:89:18:e5:45:aa:e7:83:78:c0:9b:a1:
7d:89:6f:00:33:fd:b8:e5:38:27:22:70:0c:d3:e2:
e5:72:3e:17:4c:bc:dd:99:e5:8b:74:ed:4a:96:6e:
7c:18:d2:ff:9d:29:b2:50:ce:d6:fd:c9:26:ac:82:
db:6c:03:e3:c6:82:05:4a:fb:f2:55:9b:8c:ae:35:
36:ec:15:cc:a7:86:46:5b:f0:f5:43:74:e3:3a:3f:
90:40:7f:70:19:c3:e9:f1:63:8b:b0:cb:66:bf:ee:
c2:96:1d:8a:0f:90:7a:65:2f:f4:d4:80:e0:23:00:
a5:e2:2c:5a:3c:36:34:41:70:89:58:28:6c:f9:31:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:ED:66:11:89:53:BB:8B:45:C5:CE:9E:42:92:6C:DE:71:72:B0
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/VS7tZhGJU7uLRcXOnkKSbN5xcrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.232.0/23
Signature Algorithm: sha256WithRSAEncryption
92:f0:3e:3f:96:24:c4:8a:bc:70:56:28:34:62:74:ce:2c:c9:
47:67:30:5e:a5:c3:ce:47:7e:25:cd:c6:4c:aa:3d:bb:b4:0d:
ab:4f:3e:e2:5a:19:04:c8:ce:f4:c2:56:18:60:0f:c7:79:6e:
1d:96:68:ae:28:20:35:80:eb:32:b8:fe:a9:30:ed:b5:21:38:
d8:f0:79:58:ce:49:3c:f3:e4:4d:7b:84:dc:c4:89:11:e9:5b:
6a:83:e5:d0:da:19:b6:cf:8d:f4:3b:78:5d:b8:5d:82:d9:22:
7e:1f:bb:72:38:90:9b:e4:5d:2f:27:a6:8f:36:d7:0f:59:e5:
c0:24:50:af:5b:18:ca:5c:78:1d:1e:23:0d:ef:85:91:ea:63:
3b:9e:0f:ed:74:c4:b3:ca:b8:c1:5e:cf:fb:8b:aa:67:21:ac:
64:25:2a:b5:95:46:c6:a9:1d:84:0e:e9:07:bf:10:f6:66:7f:
5b:2a:a3:4b:e1:8d:78:6f:98:44:fe:d9:78:0f:7e:f5:95:3a:
d1:d2:1e:6e:a8:b4:de:c6:3c:bb:b2:9b:b5:21:51:45:34:f6:
1b:ee:d9:67:4a:31:97:c4:0c:0d:0c:39:b3:06:55:ce:9d:1d:
ed:4f:c9:57:e5:58:68:cc:90:e6:7d:26:d7:8c:63:86:56:30:
a6:74:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:41 2025 by rpki-client