Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/J_xYaloX_0iwb6Xvpe-MFVCn-E8.roa
File: J_xYaloX_0iwb6Xvpe-MFVCn-E8.roa (raw, json)
Hash identifier: wIfoBx61yHPMBwZzWV5f8VRmEGHFlAOav3qnmF16xBI=
Subject key identifier: 27:FC:58:6A:5A:17:FF:48:B0:6F:A5:EF:A5:EF:8C:15:50:A7:F8:4F
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01856B6E864BAA8E8A48C531A404DD6B157C
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/J_xYaloX_0iwb6Xvpe-MFVCn-E8.roa
Signing time: Sun 01 Jan 2023 03:44:43 +0000
ROA not before: Sun 01 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 45.8.125.0/24 maxlen: 24
45.8.124.0/24 maxlen: 24
45.8.127.0/24 maxlen: 24
45.8.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:86:4b:aa:8e:8a:48:c5:31:a4:04:dd:6b:15:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jan 1 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27fc586a5a17ff48b06fa5efa5ef8c1550a7f84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:38:63:15:c3:62:15:a1:ed:c2:95:24:bd:
15:19:a4:0b:40:ea:99:a2:4a:a7:6d:3d:15:b5:ab:
99:80:78:4d:83:93:45:6c:8c:78:ef:f5:d5:7a:19:
75:7d:cf:fb:01:d6:1b:7f:06:3d:f4:9d:68:b6:3d:
c4:49:86:da:7b:38:5a:92:72:13:11:02:3f:82:92:
f7:16:a7:c7:90:47:73:cb:5e:c9:a6:cb:fd:d4:38:
92:31:ac:d7:1f:13:4a:ae:ea:75:57:2b:08:b1:4c:
b3:1b:a6:05:38:dd:0e:90:f1:97:2b:1c:19:3e:82:
1a:d5:70:58:58:46:9e:0e:68:03:ff:2d:fb:38:0f:
75:1a:dd:45:d9:86:10:61:32:00:ad:46:25:2f:51:
00:1f:49:b6:b0:7f:90:c0:cf:c4:14:00:c7:d8:0f:
ee:e6:5f:5d:4f:09:24:05:b5:c4:e2:8a:54:20:7f:
eb:c3:48:82:73:aa:19:f7:fe:47:94:ad:9d:bb:40:
46:1a:8c:dd:46:ff:1f:67:c7:91:6b:09:03:3a:a9:
28:61:02:8d:ca:ed:5f:44:a3:c5:5b:48:be:2e:3a:
ba:d4:9c:04:a0:67:0b:5b:a9:16:39:8d:60:46:79:
3f:79:a4:6a:d0:36:0c:3f:46:e2:36:8f:a4:74:a9:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:58:6A:5A:17:FF:48:B0:6F:A5:EF:A5:EF:8C:15:50:A7:F8:4F
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/J_xYaloX_0iwb6Xvpe-MFVCn-E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2d:58:77:6c:0d:97:85:e8:75:cd:47:2c:2c:fd:59:ae:ff:
15:f7:48:72:02:f3:9d:fb:ee:c8:79:2b:a4:64:39:ab:3b:40:
e3:81:71:42:17:73:01:9c:6a:ad:47:00:3f:3e:ea:ad:47:39:
6a:3c:fb:3c:dc:ad:69:fc:7d:e8:23:8d:f4:b3:74:65:a3:1c:
fa:90:2b:ac:44:e3:23:30:01:22:2f:51:ae:b0:c8:d3:e4:fd:
f1:e3:17:2c:94:48:50:f0:f6:8b:23:6d:d9:7e:0b:37:d2:a1:
2c:49:85:dc:9d:6b:60:6a:f7:1e:84:f3:10:08:b3:e0:6b:5e:
e8:5a:81:ab:47:7b:81:61:64:36:7e:d7:da:6c:43:b6:ef:03:
9e:e5:0f:02:aa:63:c7:76:4a:27:18:9f:55:29:92:a6:b1:0b:
33:a3:94:0d:d1:8f:7b:54:95:ff:76:49:50:fa:73:0c:3e:b1:
80:af:aa:4d:b5:18:72:1f:8a:13:ba:0c:91:c1:21:b1:e2:2a:
92:8d:d6:88:a3:ad:0e:97:27:9b:25:c9:c3:39:11:b7:78:ee:
26:97:05:97:f5:bc:84:bd:71:eb:f3:fb:fd:7a:19:48:f3:e1:
30:40:38:ba:18:73:8f:ba:48:c0:b1:32:74:17:36:44:73:a7:
b6:b0:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:32 2025 by rpki-client