Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2KixJmxwuLHJYNJg2ApuN9bnHAs.roa
File: 2KixJmxwuLHJYNJg2ApuN9bnHAs.roa (raw, json)
Hash identifier: PIXvXA2DpFKus5cz+EzC223MzSi75Vh01PAxRYMGWiE=
Subject key identifier: D8:A8:B1:26:6C:70:B8:B1:C9:60:D2:60:D8:0A:6E:37:D6:E7:1C:0B
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0188A5CBC9902E8865BC18425CFF9D139DC1
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2KixJmxwuLHJYNJg2ApuN9bnHAs.roa
Signing time: Sat 10 Jun 2023 14:52:56 +0000
ROA not before: Sat 10 Jun 2023 14:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198465
IP address blocks: 45.129.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a5:cb:c9:90:2e:88:65:bc:18:42:5c:ff:9d:13:9d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jun 10 14:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8a8b1266c70b8b1c960d260d80a6e37d6e71c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:a7:91:47:3a:2f:f5:26:dd:0d:a8:bb:55:
59:0f:e9:82:30:5c:0f:48:fc:3d:1a:57:bc:14:99:
3a:2c:64:67:da:28:06:1c:5e:49:67:93:bb:47:f1:
4e:c4:ed:7e:62:4d:2c:a6:0c:53:c9:8c:37:0b:50:
40:d4:e6:57:f0:a9:b5:fe:2b:7d:9c:4b:61:2d:ca:
56:f4:b9:12:9e:b0:df:8e:d1:f8:ac:e1:23:d8:19:
e7:cd:5a:c0:f7:74:3f:aa:8c:69:ce:98:77:7c:77:
bf:88:a1:f5:dd:31:4e:42:77:ca:b1:b5:61:f6:ef:
0e:fc:ca:f5:95:dc:0d:5c:5b:b6:f4:6e:2f:ca:89:
73:a4:44:2b:79:b5:ca:a8:71:68:66:26:72:96:db:
d1:7e:48:77:7f:76:50:82:68:77:f1:8f:16:6a:f9:
45:10:e2:af:07:13:8b:0a:0f:d6:7f:59:04:48:2f:
b6:04:fb:f9:6e:f7:8a:1c:b9:09:4f:75:66:c3:1d:
85:75:67:f1:e2:d2:36:ed:2d:25:c8:82:bc:de:9a:
66:99:cf:2e:35:42:b8:04:9f:b5:52:c2:02:71:1c:
4e:6f:0c:0a:02:43:c1:3f:11:1d:75:e2:20:3e:3b:
fd:69:c8:df:8e:c7:27:8f:4c:c1:f5:f9:ad:f8:26:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:B1:26:6C:70:B8:B1:C9:60:D2:60:D8:0A:6E:37:D6:E7:1C:0B
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2KixJmxwuLHJYNJg2ApuN9bnHAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b5:2f:df:b2:35:3c:ee:87:85:8d:45:61:1b:be:dd:10:4e:
7f:b2:e1:0a:bc:00:5e:8d:94:8e:49:44:29:3c:bd:94:df:96:
10:fb:a5:0b:27:55:8c:01:fa:25:70:50:0b:a9:8f:3b:6d:e4:
b0:ce:fe:e1:c3:b9:59:e2:ec:8d:77:1f:f3:d9:0e:45:0c:73:
33:10:ef:8a:98:ae:bf:e8:69:7a:52:3c:51:07:7e:5b:50:24:
43:c9:71:df:b6:9d:cc:d2:5f:9e:3c:69:f2:d4:36:da:95:87:
7d:89:63:36:a7:d7:32:e9:89:a5:5d:fe:aa:4a:98:9f:c4:bd:
08:12:cb:a5:22:73:40:d1:57:f4:52:1b:f9:2b:63:ef:24:13:
3b:8a:f0:62:0f:2c:e4:ee:d6:aa:97:0a:6c:a9:d8:67:74:f5:
24:2d:a0:de:e7:f7:f1:c9:7c:83:c2:c3:7f:8a:d0:bb:5f:d8:
87:2c:1d:a3:2b:7b:e9:68:fd:97:05:ff:78:ed:8a:c9:1f:87:
10:2e:28:a7:26:4b:b3:c8:cd:49:aa:98:ef:e2:5f:20:06:18:
20:50:69:3d:a8:f3:41:4d:01:70:a3:c3:1a:d7:d5:a1:7f:8b:
12:e4:0e:ab:ca:84:20:83:1f:22:5e:ea:3f:91:96:07:53:b9:
d5:e9:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:15 2025 by rpki-client