Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/qXfy5L-chCco59pfCDuKR0Gwl_w.roa
File: qXfy5L-chCco59pfCDuKR0Gwl_w.roa (raw, json)
Hash identifier: CRNgkWbdEwkKC4jI3iIG2LnPhJ4L9WhtRLFsGp+CUlk=
Subject key identifier: A9:77:F2:E4:BF:9C:84:27:28:E7:DA:5F:08:3B:8A:47:41:B0:97:FC
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 393E47
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/qXfy5L-chCco59pfCDuKR0Gwl_w.roa
Signing time: Tue 03 May 2022 09:09:52 +0000
ROA not before: Tue 03 May 2022 09:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205293
IP address blocks: 45.143.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751495 (0x393e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: May 3 09:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a977f2e4bf9c842728e7da5f083b8a4741b097fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:7d:35:b4:58:27:4d:08:2a:b8:0f:23:56:
92:a1:ef:c1:42:d8:cb:9b:3a:56:af:aa:11:6a:8d:
84:8a:35:e8:87:01:42:ef:b2:3d:74:33:80:5a:19:
9f:d5:ec:29:75:4a:77:ad:8a:2d:d4:9f:7e:03:e9:
26:aa:d6:ec:d5:d9:5c:cb:e0:63:4e:43:ea:ac:69:
90:61:cf:e5:0e:ed:61:c1:4e:48:0c:12:c2:78:0a:
4f:f0:69:b7:90:09:e3:0d:73:7f:f7:04:38:28:76:
db:34:67:be:64:c8:8a:6e:1c:f0:96:fe:5c:64:24:
ea:4e:d3:9a:a1:41:9b:ab:f7:3a:cf:82:a1:25:b8:
8e:2a:f2:00:8e:12:76:8a:32:60:15:92:8b:20:bd:
d6:4e:12:2d:85:04:d8:21:9f:fd:bc:2c:90:23:0a:
b9:27:b1:bd:ad:13:e7:ac:62:35:66:3c:cc:0a:1c:
99:99:87:36:87:2b:6e:db:9b:29:58:29:e7:b6:d3:
f6:af:62:ad:68:42:01:dd:9d:7e:99:fc:b0:d9:36:
ab:94:04:f0:c9:ad:d1:50:dd:80:98:bc:6b:b3:60:
09:6f:b3:e4:20:95:6c:c0:70:59:5b:ca:e4:6c:6c:
6c:2f:cf:4a:ce:61:45:b3:40:db:36:d9:d6:07:55:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:F2:E4:BF:9C:84:27:28:E7:DA:5F:08:3B:8A:47:41:B0:97:FC
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/qXfy5L-chCco59pfCDuKR0Gwl_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.206.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ab:c6:0d:08:06:14:b7:62:90:75:41:20:d0:31:b3:9c:95:
33:68:9d:0d:d1:51:3c:1c:e5:b7:8f:6b:02:2d:c5:71:87:6c:
c4:3b:b8:71:13:13:63:eb:e7:b1:53:e7:5d:61:6a:1f:fc:85:
e4:d7:10:5e:3d:7c:0a:ac:62:48:c1:f4:f0:2e:ae:a5:b3:03:
fe:e3:58:b3:bc:d6:95:a0:b0:5d:1c:1b:83:7b:1f:b2:62:b3:
88:30:a5:9e:32:b4:8e:7b:d1:93:90:d8:47:c5:71:14:f7:6c:
5e:ea:72:76:62:ac:56:92:63:cd:c7:57:3c:aa:cd:b3:e4:7d:
25:74:24:dc:51:ab:12:26:f3:7a:ef:a5:a1:b0:d9:60:a5:52:
ac:84:fd:9f:4c:45:c4:1e:fd:da:c7:d5:c8:b2:0f:db:27:a0:
1f:ab:12:9c:9a:ec:9e:a4:c0:c4:9d:f8:70:1b:03:1c:be:22:
d9:73:d6:2e:0d:82:f6:fa:9d:eb:4e:45:38:5a:46:61:7b:e4:
61:97:74:5f:a9:e6:fb:50:92:28:ab:61:d8:2a:ab:b2:e5:46:
0e:12:38:6e:7d:d9:60:8b:3f:35:3a:1b:32:00:a1:49:ab:24:
b4:e2:9b:e8:12:88:de:f7:36:3f:9d:74:13:6c:9d:4b:06:2d:
54:8f:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:08 2025 by rpki-client