Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/sgvjvgPUYcMHpKwEYvj68jZIwhI.roa
File: sgvjvgPUYcMHpKwEYvj68jZIwhI.roa (raw, json)
Hash identifier: vlk1D4gCN9nfp+s360qKYh2TYh13LEHzlZyoPXZPM/8=
Subject key identifier: B2:0B:E3:BE:03:D4:61:C3:07:A4:AC:04:62:F8:FA:F2:36:48:C2:12
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0185711E754C14EED734BB5A078C19C8D029
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/sgvjvgPUYcMHpKwEYvj68jZIwhI.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208651
IP address blocks: 45.91.152.0/22 maxlen: 22
45.91.152.0/24 maxlen: 24
45.91.153.0/24 maxlen: 24
45.91.154.0/24 maxlen: 24
45.91.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:75:4c:14:ee:d7:34:bb:5a:07:8c:19:c8:d0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b20be3be03d461c307a4ac0462f8faf23648c212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:56:06:f2:90:d0:d1:09:a8:9a:2c:0d:21:
cd:6f:e6:85:7e:52:36:44:b7:6d:d0:c9:e3:c1:08:
4b:e0:e2:34:cc:bf:1b:c1:a0:b0:53:32:5a:4f:00:
1a:7d:b8:93:77:7b:36:6f:b5:51:0c:64:b5:f0:52:
1f:71:8f:b0:f2:98:9d:d9:e3:3d:0c:07:e2:9a:f0:
4a:d0:a8:36:dd:aa:6d:65:b2:0d:05:95:da:71:f1:
f0:0a:54:98:b9:69:55:b5:8e:c4:92:c1:cd:2c:d9:
a6:a8:c3:f1:27:a6:fe:17:32:4f:c3:34:5e:1f:48:
23:63:75:39:fd:62:c1:8d:a6:26:fe:04:0b:c5:56:
49:21:a6:4c:66:a7:0a:87:ca:bc:ec:1d:16:ad:66:
1e:96:b2:d5:10:ce:cd:97:8b:f2:8c:7e:67:1b:8b:
62:38:8f:26:9c:0d:c1:6d:09:07:c4:4e:91:a4:34:
cd:cd:fe:27:29:8c:1b:33:7e:9f:df:95:3b:bf:d4:
a1:8b:3f:ed:97:f8:72:53:fd:cb:ad:98:79:0a:a8:
3a:a9:e9:95:08:e5:8a:f7:36:bc:9a:dd:25:19:95:
46:1c:02:0b:a8:01:e6:43:da:fb:b2:ec:f8:56:ab:
e7:db:8f:2e:b9:40:b2:ae:73:8e:b6:2f:19:41:cb:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:E3:BE:03:D4:61:C3:07:A4:AC:04:62:F8:FA:F2:36:48:C2:12
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/sgvjvgPUYcMHpKwEYvj68jZIwhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.152.0/22
Signature Algorithm: sha256WithRSAEncryption
57:da:ce:99:3f:f2:99:1e:d4:63:b0:d6:7d:d1:a1:2f:94:3b:
49:b3:06:4e:4c:e2:df:37:ad:b5:28:c4:b0:94:34:fc:bc:81:
43:27:48:86:23:1c:fc:f2:45:58:dc:7a:b2:0d:a1:6b:2d:23:
fc:1a:16:df:3f:16:fa:d9:7b:d5:f6:a6:cf:a0:e5:51:bf:ef:
4b:38:59:36:50:f9:35:a8:5d:7d:7f:e9:9f:76:00:62:68:7a:
0e:72:36:c6:97:0f:ff:a3:32:ff:b8:81:5c:b6:e3:c4:de:44:
6a:24:ee:4e:7c:b6:13:56:d9:5d:93:55:89:bc:7f:82:86:29:
45:0d:08:ac:1f:50:1a:79:d1:cf:8c:a5:c7:90:98:63:27:67:
51:9f:27:aa:b5:67:f2:7b:88:97:db:44:3e:60:73:87:2f:cc:
b5:a2:7c:d1:e3:e9:76:f5:f3:ba:59:16:95:99:a0:f4:af:db:
ed:07:30:ea:33:a0:de:7c:c6:9a:61:13:2a:fa:29:68:5e:9d:
eb:8f:df:1a:e8:c2:0a:d3:79:40:7c:4e:73:71:f5:67:4f:05:
e5:ce:92:b0:d6:4f:77:14:67:83:d9:06:56:27:be:9c:3d:40:
cc:d8:5c:17:04:5c:31:54:fc:1b:54:45:bb:48:0d:d3:17:07:
44:59:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:30:58 2025 by rpki-client