Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/XLpZk589EoDXqiFjkKdATwoYMWM.roa
File: XLpZk589EoDXqiFjkKdATwoYMWM.roa (raw, json)
Hash identifier: N+sGaujfjlNgqKd6OyNMUsL9wxfUYbSSwfbR3jspGDk=
Subject key identifier: 5C:BA:59:93:9F:3D:12:80:D7:AA:21:63:90:A7:40:4F:0A:18:31:63
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 03414303
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/XLpZk589EoDXqiFjkKdATwoYMWM.roa
Signing time: Sat 01 Jan 2022 09:00:26 +0000
ROA not before: Sat 01 Jan 2022 09:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59268
IP address blocks: 45.65.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54608643 (0x3414303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 09:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cba59939f3d1280d7aa216390a7404f0a183163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:53:6e:27:d8:af:45:e5:5a:73:e0:f6:21:
f8:53:37:83:69:54:94:d6:21:ca:49:dd:44:56:91:
19:dc:2d:c8:6f:13:54:fe:05:b7:f3:d5:55:f9:89:
c0:dd:cc:df:ed:3c:d3:4b:d0:ea:1d:82:c0:1e:b8:
4a:0f:52:ba:e8:41:71:a0:fa:79:db:8d:1a:6b:23:
8c:83:38:01:5e:ab:8f:17:f2:c0:31:48:62:31:f5:
dd:7b:15:aa:c9:38:60:a1:b1:45:bb:95:f3:43:61:
75:2b:d0:93:44:97:e0:90:32:7f:36:62:b3:c7:9d:
96:00:bb:27:33:21:9f:a0:f5:81:a0:e6:f3:23:d3:
9a:b5:19:1f:c3:29:6c:db:4a:a5:c5:b3:04:14:32:
cd:5f:17:99:9a:e1:c9:ad:eb:43:2f:2a:9f:ee:34:
a5:63:b1:0a:75:00:f5:4d:15:75:22:ac:0d:00:7e:
4f:3c:91:ac:48:4e:60:c2:d8:d5:48:84:76:d5:f1:
8c:8d:ad:93:84:0d:59:ce:d7:7f:fc:c4:fd:75:c1:
ae:d5:be:90:90:1e:dc:ba:84:7f:ce:73:93:a8:e7:
84:9a:15:dd:07:c1:36:5f:e1:4b:07:7a:af:29:14:
74:7e:26:eb:fd:5e:c4:fb:cf:6e:8e:52:90:d3:ea:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:59:93:9F:3D:12:80:D7:AA:21:63:90:A7:40:4F:0A:18:31:63
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/XLpZk589EoDXqiFjkKdATwoYMWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:aa:6b:11:81:1a:35:c6:67:35:9e:1a:e0:05:c5:66:c7:fe:
32:6c:81:fe:7b:d6:3d:a8:c6:c4:fe:df:c0:a9:d6:94:10:89:
3b:87:d4:e6:db:d6:9a:4e:59:fb:59:3d:7e:e6:42:ec:23:3d:
0d:b7:b4:49:9a:be:e1:35:a0:94:d4:81:9e:c6:db:4d:a9:e5:
fd:05:57:f8:61:32:91:8f:7d:59:7f:57:7c:92:c6:6e:c8:fe:
b1:a3:d6:c9:63:5d:15:76:69:1e:27:0e:f4:a2:e7:37:58:25:
17:84:12:a4:fa:93:fe:7a:a9:25:e0:ce:26:75:e6:ad:96:40:
b2:1d:51:92:d6:be:31:b9:a4:47:77:b1:ad:59:78:6c:7b:ce:
9d:3b:d3:49:c5:4e:96:66:69:d5:47:88:1e:b4:51:18:49:a0:
0e:d0:ca:3c:95:86:ee:97:b5:44:e3:47:f5:2d:4e:4c:cf:05:
96:99:88:ea:c1:6d:76:f6:88:b3:2f:b2:5f:df:7a:84:c1:be:
b4:d9:ea:27:c0:c0:b5:a5:aa:da:bf:12:69:0b:ec:ac:c5:50:
b4:1c:52:16:c5:9b:a1:23:a7:44:74:ab:a4:c7:e7:d8:fa:31:
24:f7:1b:82:a2:ae:81:b4:8d:76:02:fa:2a:38:a8:b7:ce:da:
1e:04:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:38 2025 by rpki-client