Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t57uKcxWaO7Cryvd1BIu7l2Yy0Q.roa
File: t57uKcxWaO7Cryvd1BIu7l2Yy0Q.roa (raw, json)
Hash identifier: 1w0U6FP/k9zyEL66OLJYRhhR/fYgFA19K7ZsqWuTrI0=
Subject key identifier: B7:9E:EE:29:CC:56:68:EE:C2:AF:2B:DD:D4:12:2E:EE:5D:98:CB:44
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 01848F4813AF9496AFE9E76EA862F2C9C786
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t57uKcxWaO7Cryvd1BIu7l2Yy0Q.roa
Signing time: Sat 19 Nov 2022 09:46:16 +0000
ROA not before: Sat 19 Nov 2022 09:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210162
IP address blocks: 45.143.31.0/24 maxlen: 24
45.143.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8f:48:13:af:94:96:af:e9:e7:6e:a8:62:f2:c9:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Nov 19 09:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79eee29cc5668eec2af2bddd4122eee5d98cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:00:8e:1e:90:3a:ff:13:f6:d2:15:4c:dc:
cf:02:ec:bb:6d:49:e0:67:6a:86:f3:fd:67:f2:42:
01:b4:cc:18:a0:2e:9d:81:c4:52:29:fb:d7:15:53:
5f:b8:7e:88:67:62:0c:be:23:22:4c:e8:9e:07:71:
45:d5:10:c4:5e:80:91:1f:39:54:48:dc:b0:8d:3b:
bb:b8:02:70:90:20:7a:1b:2b:6a:f5:e2:24:87:a4:
f8:43:ee:ea:dc:2f:70:70:8e:5e:5f:1d:85:44:d3:
20:eb:86:d0:a9:5b:7c:ab:b2:e3:9a:88:20:fc:36:
d0:49:12:61:40:9b:e4:56:78:35:05:d7:2d:e3:2d:
84:83:5f:14:4a:da:cf:dc:57:a8:d9:0a:63:85:29:
5f:c7:c1:bb:c2:be:9b:d7:a1:bf:b8:1f:57:9b:45:
7d:c5:8a:db:c4:b4:50:70:66:15:7b:8f:65:f4:c7:
3b:95:f8:14:aa:0b:ff:77:89:68:da:fc:d5:5b:c9:
24:5a:90:26:96:98:e7:ca:61:8b:02:9d:7a:0e:75:
7c:bc:49:fc:f1:d1:1b:80:18:91:0e:04:8c:c1:b8:
51:43:83:34:f7:5b:17:e2:6c:4b:5b:d2:9d:9f:5a:
68:92:a6:01:9f:2c:17:92:e5:75:f3:ab:7a:87:5a:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9E:EE:29:CC:56:68:EE:C2:AF:2B:DD:D4:12:2E:EE:5D:98:CB:44
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t57uKcxWaO7Cryvd1BIu7l2Yy0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:79:2c:0c:b4:a7:80:be:8e:74:c8:f9:49:0d:b7:67:4f:78:
0c:82:89:cb:de:2f:02:18:3a:df:5e:c6:81:4b:60:7a:8b:db:
d6:79:d8:87:fe:d7:33:9c:43:ba:d2:22:70:3f:b0:8b:35:0d:
80:90:ee:09:65:bc:d6:9b:dd:a5:b8:33:1b:b6:97:09:10:41:
61:ee:1f:dd:ee:0b:1c:c7:d0:6f:da:08:e0:74:3a:0f:19:1a:
f1:f1:9f:de:51:5e:a9:8c:f9:51:94:09:d6:aa:2d:db:75:d3:
7b:e6:cc:d3:82:2f:a5:a9:6a:2d:66:5d:d9:6d:a5:2c:c4:2a:
6e:10:2c:80:33:65:75:90:80:be:e4:04:0a:b3:e4:f1:cd:ae:
0d:6f:ed:3c:56:28:85:da:97:95:f3:58:9a:96:70:f5:e5:7b:
15:fe:5a:ef:5e:7f:de:db:67:15:63:13:74:7d:5a:e2:72:b6:
2a:11:b0:e5:45:3e:01:b5:b6:0d:22:6c:8a:ee:ad:b5:76:40:
2c:cc:ed:4c:e2:23:25:77:eb:ef:fe:3b:31:fa:13:e5:a3:85:
2b:a5:8e:1d:7c:78:cf:3d:e4:68:cb:87:94:2f:68:94:f0:e5:
38:e4:1f:6c:70:13:0e:0a:d8:c5:f8:72:22:f9:ac:b1:93:f5:
54:37:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:35:55 2025 by rpki-client