Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/J6qUkVaCBokE6lIohXk9jsszxxc.roa
File: J6qUkVaCBokE6lIohXk9jsszxxc.roa (raw, json)
Hash identifier: jo57UwN3qR+QfpBM7KrBpGAWr2qGu76FgoIFGHRhBWg=
Subject key identifier: 27:AA:94:91:56:82:06:89:04:EA:52:28:85:79:3D:8E:CB:33:C7:17
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 04415E52
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/J6qUkVaCBokE6lIohXk9jsszxxc.roa
Signing time: Sat 01 Jan 2022 11:57:25 +0000
ROA not before: Sat 01 Jan 2022 11:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 45.150.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71392850 (0x4415e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Jan 1 11:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27aa94915682068904ea522885793d8ecb33c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:fb:65:91:b0:fa:64:dc:26:0f:be:33:6c:
c7:90:91:fe:df:a5:0e:6d:b3:3f:3b:68:d3:08:7e:
52:86:d7:ee:ea:44:aa:e2:d7:45:9d:57:1e:c3:90:
39:f9:73:e5:61:1b:67:72:e5:73:f7:ac:a4:73:b2:
19:c9:45:e3:a8:87:ee:7d:d5:a9:75:07:a5:d1:fb:
f2:c7:73:b5:9e:1a:2e:3e:45:12:68:03:3e:00:ab:
cd:fe:ca:75:2a:12:aa:6b:3f:db:29:6a:5a:e7:49:
40:72:9e:fe:45:18:6e:17:20:14:bd:fc:9b:1d:aa:
13:b1:91:74:5a:db:0b:ea:2d:03:e8:57:a1:37:40:
00:96:45:5d:44:b0:f5:9b:3d:b2:85:b9:72:c2:d2:
9a:cf:b9:e7:23:5d:eb:59:37:11:ba:56:f6:04:06:
b8:9c:28:f3:39:e5:bd:09:3c:44:6c:48:8d:ea:4e:
8e:04:f2:4e:80:f4:e5:f7:ce:23:95:90:32:81:de:
b3:2a:2d:50:a3:fa:4e:dc:d2:38:91:27:e3:b1:11:
17:4d:14:61:04:84:30:dd:3d:8a:b1:ab:19:a4:c4:
1d:a6:6b:72:be:53:16:e4:0d:61:01:9a:0a:9b:9a:
a0:05:45:27:f7:d7:97:20:d7:76:be:0e:6f:9e:65:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:94:91:56:82:06:89:04:EA:52:28:85:79:3D:8E:CB:33:C7:17
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/J6qUkVaCBokE6lIohXk9jsszxxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.36.0/22
Signature Algorithm: sha256WithRSAEncryption
68:3e:51:52:41:74:dd:06:d3:17:da:92:89:44:7c:23:d3:d7:
f2:32:29:69:03:9a:1f:3b:a1:7a:a2:b9:e7:97:7f:e8:25:13:
63:28:b6:d5:ac:c1:c5:47:49:a0:37:1d:a0:58:22:74:49:2c:
28:fc:89:a9:29:82:da:5d:b5:35:d2:51:ca:74:5e:8b:61:be:
65:b1:ec:19:f8:3c:33:a4:04:72:42:b3:a0:81:e0:f2:8d:da:
b9:ee:56:d9:f9:cd:08:d0:75:58:4b:b2:3f:70:bc:da:a0:9c:
d3:31:c2:7f:c7:a7:a2:6c:ce:a2:d6:c1:28:c8:85:7d:df:ff:
c3:71:7d:90:7c:16:54:97:11:0d:1d:9a:45:dc:91:b9:66:0a:
f8:f3:de:d3:8d:f4:79:fd:bf:8c:23:5a:4f:c8:b9:b1:8f:54:
99:47:ca:51:62:2f:fe:53:37:95:52:60:87:90:fe:4d:13:a3:
ea:32:b2:13:ed:b9:49:f0:45:ba:c4:63:7c:f0:7d:ac:a4:e6:
9b:c8:68:d3:20:eb:30:fd:90:40:6f:aa:4a:55:41:38:b2:c5:
4b:50:0e:49:97:53:3b:3a:33:29:ee:0d:04:c3:bd:7e:b7:6c:
50:c5:c8:46:85:e7:c4:6b:ad:db:ed:bd:6a:b7:3a:f4:45:20:
98:05:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:32 2025 by rpki-client