Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/07cKAPDVzAQ7XC-pLBwF8sPaL9U.roa
File: 07cKAPDVzAQ7XC-pLBwF8sPaL9U.roa (raw, json)
Hash identifier: VDRCy5Zx4lnRD97tHo8g1TQ3FtF3E1IKJWpcQGtwPso=
Subject key identifier: D3:B7:0A:00:F0:D5:CC:04:3B:5C:2F:A9:2C:1C:05:F2:C3:DA:2F:D5
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0189EAC6B792FA29934D5C2447B99B3E8867
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/07cKAPDVzAQ7XC-pLBwF8sPaL9U.roa
Signing time: Sat 12 Aug 2023 17:23:58 +0000
ROA not before: Sat 12 Aug 2023 17:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43467
IP address blocks: 45.9.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:c6:b7:92:fa:29:93:4d:5c:24:47:b9:9b:3e:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Aug 12 17:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3b70a00f0d5cc043b5c2fa92c1c05f2c3da2fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:9e:e5:d3:14:ca:a1:28:00:ab:ab:c7:30:
e5:33:d4:13:a6:f7:4e:04:c8:7c:cb:e5:68:5a:73:
4d:2b:eb:05:7d:60:a4:f2:f4:b1:0b:c3:19:8c:e5:
43:99:66:84:23:e1:20:fa:ad:d5:bd:f5:80:9b:c5:
8a:5b:43:0c:22:ab:4c:ac:51:bb:7f:50:54:f1:b0:
62:b7:79:40:ea:d2:79:22:67:9e:9b:91:a9:f2:12:
2e:13:d6:2b:d8:5f:36:10:a7:64:b7:c6:55:95:ff:
42:2f:02:a0:7c:08:f1:42:12:73:ae:c3:e6:0f:69:
6d:a4:71:56:79:6e:82:6c:f2:16:26:f5:a5:a6:81:
f5:e8:96:f7:8f:b2:5d:59:d9:90:87:0d:01:0f:5e:
56:1e:fb:25:2e:ca:f7:48:8b:36:f9:4a:d7:54:50:
35:d6:e2:57:00:6b:ba:04:40:6f:7a:b7:bd:08:a1:
64:5f:fe:4b:89:3e:57:e2:f2:3d:8a:60:85:78:09:
ac:cf:49:25:94:0c:81:4b:38:d1:b6:a2:a1:41:ae:
ed:03:a0:94:54:34:d4:d1:d0:db:86:5d:2b:91:8a:
8f:e0:06:67:df:f1:db:f8:2f:6c:63:07:c3:3e:4e:
47:e0:85:04:b7:5a:c6:12:30:73:55:e7:95:54:73:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:0A:00:F0:D5:CC:04:3B:5C:2F:A9:2C:1C:05:F2:C3:DA:2F:D5
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/07cKAPDVzAQ7XC-pLBwF8sPaL9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.80.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ad:62:23:ea:a0:23:16:4f:01:3f:df:b0:1b:57:4b:c2:aa:
98:5d:04:ce:f4:d3:e0:76:60:48:36:ad:94:ef:12:37:bf:83:
b6:07:ab:a4:e8:ee:61:2e:3c:0e:df:29:dd:09:c0:5e:7a:9a:
21:3c:b2:6b:16:59:9d:76:8a:86:47:19:f1:93:da:67:1f:00:
00:75:80:7a:6a:7c:68:93:9b:46:8b:83:25:71:a3:63:58:7d:
04:4f:98:c8:f7:aa:a4:60:6f:03:96:2f:6a:5b:19:b1:f7:62:
d4:86:05:ee:d5:ea:c9:2f:c3:52:84:3f:8e:9a:d5:35:3e:12:
07:87:f4:fb:00:55:4b:4c:7b:57:5d:41:b0:3d:04:27:ad:b1:
d9:a2:b8:a7:71:8e:51:f6:ff:9d:02:9c:35:eb:b8:2a:06:35:
61:ef:0f:e6:1d:e5:a2:20:d7:76:cb:92:93:e5:be:a5:52:3e:
fe:13:63:3d:f2:fe:8d:4a:51:a6:0e:f4:c1:09:a8:9d:f3:31:
31:cf:e1:a8:97:dd:b3:80:71:ce:d0:62:f3:62:08:a4:51:57:
0f:26:7f:6f:3e:7c:6a:80:99:c4:21:85:d2:cc:a0:ee:78:97:
a3:65:c2:b1:d9:33:90:17:83:c9:db:72:49:ad:0c:e7:ad:31:
3d:83:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:40:07 2025 by rpki-client