Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IX_xhT87cVCTqN-mbCmi6VsJOCM.roa
File: IX_xhT87cVCTqN-mbCmi6VsJOCM.roa (raw, json)
Hash identifier: LWzU1L8c83ulGkSEyzVnU7RWaZwI7Z7gspAUdQdn5cw=
Subject key identifier: 21:7F:F1:85:3F:3B:71:50:93:A8:DF:A6:6C:29:A2:E9:5B:09:38:23
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AAF5B4A
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IX_xhT87cVCTqN-mbCmi6VsJOCM.roa
Signing time: Sat 01 Jan 2022 12:00:24 +0000
ROA not before: Sat 01 Jan 2022 12:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51575
IP address blocks: 92.45.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179264330 (0xaaf5b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=217ff1853f3b715093a8dfa66c29a2e95b093823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:88:3e:81:d3:66:09:ac:05:98:c9:ee:46:
47:6b:4e:50:24:d8:c7:61:c1:41:52:65:68:3b:9e:
de:ae:57:ea:52:7d:f5:1a:fe:c0:c5:1a:87:ea:3e:
68:5e:d6:b5:a2:f9:be:c1:b5:04:da:e6:8a:e1:0e:
4b:b4:01:92:0b:58:d6:46:d4:65:b8:01:f2:e0:8f:
27:55:02:45:05:80:79:a2:ad:f0:fd:74:de:24:b3:
cf:00:68:b7:21:6e:46:7a:ca:1a:6e:67:71:da:5e:
53:13:76:58:10:a5:d2:0b:2b:0a:c8:de:8f:18:9f:
91:7a:30:2f:da:e6:04:6b:f7:71:9f:01:c4:a1:ab:
4e:db:1e:84:71:c8:3b:67:3f:aa:fb:b3:7a:63:30:
ea:43:04:e9:cd:6d:4c:b9:ab:2b:e5:c1:cb:f7:a3:
b3:47:1b:cc:fc:00:d2:96:e3:54:0a:2d:87:9e:85:
d4:eb:7f:a2:13:8f:30:e5:22:6c:09:84:43:08:33:
4b:00:29:49:11:80:cf:90:04:e5:29:04:8f:89:a4:
81:a5:c7:ef:31:f8:ca:15:f4:bd:7f:54:39:b8:3c:
23:ce:60:f4:3a:61:69:37:cf:7d:ca:72:dc:f4:23:
f2:14:aa:53:3c:1e:2c:d3:af:70:a6:f8:00:0b:79:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:F1:85:3F:3B:71:50:93:A8:DF:A6:6C:29:A2:E9:5B:09:38:23
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IX_xhT87cVCTqN-mbCmi6VsJOCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.66.0/24
Signature Algorithm: sha256WithRSAEncryption
80:74:d2:88:7c:99:51:e7:1b:93:1f:a6:ef:01:e1:ea:29:0f:
ba:da:36:43:50:0d:59:4b:76:a2:07:61:51:21:97:c7:dc:02:
33:34:4a:7f:b5:85:18:b8:3c:d6:6c:17:87:45:c8:e3:d9:aa:
a0:1b:9b:39:17:c6:17:ea:a5:f1:1a:0f:7d:06:72:4a:23:f7:
45:5f:64:58:45:40:a8:38:61:bc:88:1f:6d:8a:61:e7:33:fb:
5b:56:59:d9:f5:bb:ad:60:14:37:21:00:32:a3:c6:16:71:80:
76:b9:6f:cb:d1:7b:3b:73:af:68:1b:f4:d0:87:8f:e0:54:8e:
77:d8:06:59:a9:a9:d2:8d:52:bd:57:3b:08:a4:65:c4:d4:40:
af:b4:04:cc:bb:68:41:bd:45:f2:34:66:b7:b5:e6:4e:9f:02:
c5:26:a6:b5:e1:0e:93:73:f5:d3:a0:2f:a9:e5:db:6e:ff:d2:
df:13:42:bd:61:84:67:40:2c:9d:c3:79:db:b4:e1:b4:99:aa:
00:cd:cc:99:b0:7a:45:47:85:6b:e1:30:c4:46:79:ce:8e:24:
30:37:59:e7:82:32:09:0a:83:94:7e:b8:0a:e3:a3:12:a0:1c:
53:fe:20:6c:e4:4b:98:4b:c3:bb:71:9e:ea:87:48:98:6f:ac:
76:7c:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:52:42 2025 by rpki-client