Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1gDsQ1Tb8myqvXbUT98mr19Ou20.roa
File: 1gDsQ1Tb8myqvXbUT98mr19Ou20.roa (raw, json)
Hash identifier: on4ENQYFYfCvPh4Y7jd9stlbknWcez8mdsAqqnhqR+o=
Subject key identifier: D6:00:EC:43:54:DB:F2:6C:AA:BD:76:D4:4F:DF:26:AF:5F:4E:BB:6D
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01857356263EC89FE9C1AA2162E50B7EB558
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1gDsQ1Tb8myqvXbUT98mr19Ou20.roa
Signing time: Mon 02 Jan 2023 16:35:03 +0000
ROA not before: Mon 02 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51575
IP address blocks: 92.45.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:26:3e:c8:9f:e9:c1:aa:21:62:e5:0b:7e:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d600ec4354dbf26caabd76d44fdf26af5f4ebb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:d2:4d:46:9a:87:bd:32:7a:b6:11:a1:46:
0e:7a:eb:ea:30:86:0e:02:5d:01:4e:df:45:c9:fa:
d6:2d:59:c3:c3:54:fd:45:e5:e2:6f:a6:4f:d0:44:
58:69:81:aa:e5:88:6c:be:52:c9:40:cc:28:a9:f0:
85:2e:4f:5d:73:a6:6f:a8:06:ef:50:46:46:0c:17:
79:6f:7e:a6:0e:3c:f0:3e:45:68:e2:8f:ae:9f:36:
30:f5:54:60:b6:5e:be:41:d3:42:5a:dc:93:54:88:
a8:6e:0f:d8:19:c5:bd:bd:31:c9:5b:7d:88:99:37:
c9:48:09:3b:42:53:ea:99:e1:28:60:2a:0c:9e:88:
85:5b:32:0c:78:a4:29:4e:3f:3f:fb:a3:a0:b6:28:
eb:d2:18:a2:25:09:f9:df:97:f6:62:84:ae:28:77:
7d:87:76:9e:eb:7a:0f:28:15:2e:55:4c:ec:e3:45:
17:20:c3:5f:a3:77:5f:ad:0a:69:97:12:e4:8e:21:
61:6f:e8:ea:1e:67:48:39:74:38:c0:03:0b:42:a0:
70:b7:b1:a2:ad:78:70:ec:cd:94:9a:e1:96:94:30:
b2:b4:8b:d0:59:80:26:a4:7e:22:fd:60:aa:e3:37:
7a:bd:c4:4f:25:1d:38:c0:bc:a7:51:c6:f8:4e:e1:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:EC:43:54:DB:F2:6C:AA:BD:76:D4:4F:DF:26:AF:5F:4E:BB:6D
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/1gDsQ1Tb8myqvXbUT98mr19Ou20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:06:48:2d:e5:dd:e7:e9:70:4f:0d:2c:fd:c7:14:be:1e:13:
1a:25:5c:fd:62:53:2b:b1:9d:9a:a2:bf:00:42:e0:a3:ca:5a:
41:ee:00:5a:5e:ef:40:6a:c5:5f:3f:51:97:da:3c:a6:45:8c:
e7:27:27:d8:3c:72:a2:ca:8c:16:ff:8f:42:9d:a5:1f:10:f9:
e9:4b:08:32:3e:9f:45:43:a5:b2:2a:6b:9e:dc:e4:5d:82:9a:
1e:a8:4c:53:8c:3b:09:5a:1a:db:b0:3a:2e:75:7a:f2:32:b8:
e3:57:9c:b4:ea:bd:e7:83:cf:1e:88:e0:dd:c3:d6:a0:57:1f:
23:93:33:41:73:3e:98:19:1e:80:4a:bf:99:f9:35:03:ff:a5:
17:52:3a:d8:13:f4:40:02:14:61:23:f2:13:d2:a5:0d:40:f5:
46:92:3d:dd:c2:fc:ba:bf:d5:7c:5e:0b:91:ee:d0:01:aa:0a:
f4:ca:1d:e0:ee:f7:66:e4:e0:23:f3:8d:43:49:c1:58:f3:f4:
60:3d:3c:bd:05:da:0d:d7:72:ae:40:24:59:0e:02:dd:d4:30:
80:94:2c:47:4d:7e:bf:de:f2:cf:d7:62:80:bb:c7:f0:62:60:
47:ae:85:1f:94:4d:e1:36:09:97:4a:ee:24:58:2e:30:44:bf:
80:e4:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:48:50 2025 by rpki-client