Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/PjUAvMo4qH-nBzG2hGwqSlqc2xg.roa
File: PjUAvMo4qH-nBzG2hGwqSlqc2xg.roa (raw, json)
Hash identifier: Ara0hcTF9kpoNDgqmF7Z6aG7ir3nG4Lu6SX7dWhaQoA=
Subject key identifier: 3E:35:00:BC:CA:38:A8:7F:A7:07:31:B6:84:6C:2A:4A:5A:9C:DB:18
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01856C0122C0C6A883B9A4A81896E6CF4F5F
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/PjUAvMo4qH-nBzG2hGwqSlqc2xg.roa
Signing time: Sun 01 Jan 2023 06:24:51 +0000
ROA not before: Sun 01 Jan 2023 06:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212041
IP address blocks: 45.130.24.0/24 maxlen: 31
45.130.26.0/24 maxlen: 31
45.130.25.0/24 maxlen: 31
45.130.27.0/24 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:22:c0:c6:a8:83:b9:a4:a8:18:96:e6:cf:4f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jan 1 06:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e3500bcca38a87fa70731b6846c2a4a5a9cdb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:a0:e7:db:67:95:34:4e:0f:82:1c:92:9c:
54:20:5e:80:98:d0:14:d5:1b:e3:93:c0:d4:6e:a7:
b9:82:f3:27:12:ba:9a:c3:cf:8f:73:fd:eb:4b:99:
b7:d5:0b:9d:03:2a:7b:55:0a:f4:e0:45:e6:e0:19:
aa:e5:c1:95:bb:a9:db:2a:49:f5:85:f4:83:95:11:
1f:76:16:19:b4:89:5b:20:5e:05:c3:7b:05:c9:19:
53:ce:76:43:cc:ef:5f:18:40:47:af:0d:4d:e5:d1:
3e:1f:52:dc:49:1f:71:a9:f3:61:c9:4e:10:d9:ce:
74:8a:46:5c:11:de:c3:22:98:f2:b0:e3:ad:6f:50:
bf:b1:71:c5:c3:23:87:8c:ab:4b:4b:cc:ee:9a:6a:
99:e3:cd:87:f0:d5:47:7d:f2:71:d2:8e:34:1b:86:
fc:6a:f8:29:79:4b:bd:69:58:2e:e0:49:78:8f:a7:
2f:3c:c7:f9:52:27:3c:be:8f:bf:a6:7c:b6:d0:79:
12:74:5e:35:79:7f:0a:df:a7:44:32:ad:1a:aa:fa:
0d:dc:6f:20:8c:af:f7:37:13:bd:c3:e1:19:1c:14:
b7:b5:f1:3a:dd:87:65:f7:54:be:8e:cc:ff:ed:a0:
94:5f:cd:c8:1b:29:48:9d:0d:b7:a9:0c:e2:3a:87:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:00:BC:CA:38:A8:7F:A7:07:31:B6:84:6C:2A:4A:5A:9C:DB:18
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/PjUAvMo4qH-nBzG2hGwqSlqc2xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:18:e9:af:c5:3e:45:02:38:32:10:eb:20:11:82:d2:fc:b1:
a6:bb:3a:b8:43:4a:55:0d:4d:af:ff:78:09:26:d3:b8:3f:e3:
6b:1d:0e:61:a6:f5:39:f3:da:a0:f1:1c:bb:92:5d:16:29:86:
37:f7:37:d8:f9:82:e4:b9:5b:af:e4:db:83:26:a1:55:a3:6a:
0f:25:be:cd:d7:47:38:2c:c1:81:2e:09:5b:11:d2:6d:75:43:
23:d8:7d:7e:15:f8:95:10:90:8f:3b:73:bb:e4:af:f0:de:15:
75:8f:cc:5c:8a:f8:a8:52:61:25:54:8a:e6:81:07:65:e6:c0:
99:00:5f:fc:55:7e:7e:84:d1:f3:2c:49:c2:fa:1f:4b:f0:3e:
72:10:7a:26:25:de:60:09:99:65:33:31:b7:80:4e:59:03:68:
74:02:76:68:43:2d:4d:b2:2e:ea:7b:97:77:12:96:5a:0f:40:
f3:45:7e:c2:6d:44:08:8b:9e:b2:be:09:33:86:04:8d:e5:0e:
24:bf:25:02:05:9d:fc:fa:38:92:dd:ab:f8:b1:69:46:93:97:
e0:a3:e6:5d:40:c7:f2:21:df:d3:2e:91:e9:d1:d2:f9:2a:e4:
e7:59:81:19:3a:c8:07:b1:2c:2d:da:b2:52:9b:57:96:d7:cb:
8c:b5:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:27 2025 by rpki-client