Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/29g6MYugdKk0RWhXCtsOv3hEfHo.roa
File: 29g6MYugdKk0RWhXCtsOv3hEfHo.roa (raw, json)
Hash identifier: CHYepRUVkjC9GXyhQyZ//G2Z47ru21gHw8KoZ5P15EQ=
Subject key identifier: DB:D8:3A:31:8B:A0:74:A9:34:45:68:57:0A:DB:0E:BF:78:44:7C:7A
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 01857169C14CC0630AB3A40C9F208857870F
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/29g6MYugdKk0RWhXCtsOv3hEfHo.roa
Signing time: Mon 02 Jan 2023 07:37:14 +0000
ROA not before: Mon 02 Jan 2023 07:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208607
IP address blocks: 45.93.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:c1:4c:c0:63:0a:b3:a4:0c:9f:20:88:57:87:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jan 2 07:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd83a318ba074a9344568570adb0ebf78447c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:0b:27:c1:42:31:d4:a9:14:f3:3b:90:1a:
aa:34:f8:24:e0:4d:77:38:d6:f4:d0:09:1b:94:c1:
a3:fa:2e:bf:60:1a:5a:eb:e7:b4:e5:64:e6:6c:a1:
02:47:5b:b5:e2:5c:79:4e:8c:55:40:38:5e:6b:d4:
9c:a7:fc:e1:2d:6e:ca:7e:e1:bc:e3:6c:9d:89:eb:
40:dd:7b:77:6e:c6:e6:b9:27:f8:09:34:f4:15:e0:
f1:82:54:47:4e:f3:98:f1:ef:47:37:1c:9c:3e:08:
ba:80:26:26:16:a6:12:0b:fd:97:2f:da:bb:01:12:
00:a8:6f:c5:f3:e3:fb:6e:a6:df:4f:78:7a:00:55:
d8:68:c1:15:6e:5d:35:07:58:1f:74:80:22:d7:a1:
85:4a:02:3b:98:c7:38:1b:f2:66:3f:8d:63:ae:56:
5c:79:ae:26:d7:1f:0a:21:f1:e7:19:35:ed:fb:eb:
71:44:8b:bc:22:af:71:66:f7:4b:6d:d6:71:3f:33:
1d:82:fe:31:14:72:fa:69:e2:b6:d9:3c:42:95:4b:
22:9a:37:23:ac:06:46:00:f0:44:c0:5a:e3:ce:7c:
5a:c3:85:de:c2:f5:47:45:7b:80:05:dc:1c:29:94:
d5:fc:eb:ec:34:02:e6:4e:20:4b:f2:aa:d5:22:9a:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:3A:31:8B:A0:74:A9:34:45:68:57:0A:DB:0E:BF:78:44:7C:7A
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/29g6MYugdKk0RWhXCtsOv3hEfHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a3:f4:2c:90:cb:ea:f2:fa:5b:81:8f:c3:be:96:3b:cb:c2:
a7:8f:18:be:fa:71:7f:14:9a:cf:7c:4e:7e:61:3b:3b:52:60:
bd:8b:4c:d0:cb:01:40:8c:19:a3:42:64:0a:5d:68:6d:51:e3:
3c:99:56:4f:b9:85:e3:28:7f:56:1a:d2:a3:bf:7d:d5:cc:10:
61:60:be:f6:73:2e:dc:d8:11:09:0e:fb:95:46:53:65:99:56:
1b:d9:3e:75:d8:91:fd:c5:95:3e:ee:41:11:6e:74:63:35:a2:
9c:9d:76:b7:1f:c3:e6:c0:87:71:0b:71:19:60:ae:1d:97:b8:
8d:a4:a8:16:9e:ea:f6:41:5d:11:46:a0:2a:30:88:58:4f:0e:
1d:98:12:a2:40:d3:07:fd:a6:f4:1c:59:be:2f:9e:6e:1e:12:
35:f3:3a:a8:10:6f:ec:de:d6:ae:54:66:fc:8d:e7:84:55:79:
1d:80:b2:7d:95:90:c4:82:7b:e4:95:f3:0f:ec:a7:f7:4f:ea:
cf:ef:b2:01:31:18:97:e8:e8:b8:77:d6:81:9e:1f:0d:17:81:
95:99:81:88:ad:0d:65:f0:13:3c:24:f5:5a:c2:61:3b:92:89:
a0:1f:cc:83:95:78:ea:fe:0e:5e:d9:b7:d1:f2:e3:3b:94:ab:
b9:60:55:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:11 2025 by rpki-client