Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/0XoFDcMyTRFYYmOzmfpvAVQxRcE.roa
File: 0XoFDcMyTRFYYmOzmfpvAVQxRcE.roa (raw, json)
Hash identifier: vf7brmwQuc1M3tcaVFBbWOPxgj8zkno3e0rQHv0wwD8=
Subject key identifier: D1:7A:05:0D:C3:32:4D:11:58:62:63:B3:99:FA:6F:01:54:31:45:C1
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 018572C35E988D202032C9DC34E274A9D124
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/0XoFDcMyTRFYYmOzmfpvAVQxRcE.roa
Signing time: Mon 02 Jan 2023 13:54:44 +0000
ROA not before: Mon 02 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61397
IP address blocks: 45.12.156.0/22 maxlen: 22
185.105.180.0/22 maxlen: 22
185.9.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:5e:98:8d:20:20:32:c9:dc:34:e2:74:a9:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jan 2 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d17a050dc3324d11586263b399fa6f01543145c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:4c:78:90:94:7a:99:10:bd:ab:05:0d:fa:
3a:f5:80:37:6d:e8:74:33:64:fc:1a:88:aa:d3:1f:
d8:a3:4b:d2:b4:f9:f6:2f:aa:46:9a:5b:2d:13:42:
20:9e:e6:2d:00:b4:5f:7c:b8:ec:4f:da:04:f4:ba:
ce:cc:6b:36:86:d9:ca:37:b5:f8:bf:13:85:32:d4:
39:5d:b6:d4:60:8c:3d:2a:d9:4b:eb:c8:55:a1:9b:
4d:fc:74:8d:32:b2:cc:db:f5:f6:28:38:1c:bf:13:
73:b5:0d:86:7f:db:ef:f6:38:57:c4:87:49:12:80:
df:44:1b:4a:9e:c9:8a:48:cc:82:a3:14:08:95:f7:
7f:11:83:94:02:95:97:06:cf:fc:11:0c:37:ab:32:
b7:07:00:96:af:f3:06:78:43:bb:7a:75:15:10:46:
d8:de:51:32:64:32:ae:9f:29:ed:23:4e:20:04:b9:
71:46:29:0a:90:f9:37:70:27:f1:b3:05:2c:c3:9a:
64:5a:10:aa:da:f7:e8:da:7a:76:0e:fe:33:0d:35:
1d:45:cb:bb:b2:c1:01:7c:4d:4e:06:98:07:ae:bd:
29:4f:2a:91:5a:65:a9:d2:83:cd:95:0e:a4:32:be:
30:c0:b4:bd:23:9b:2c:73:db:7d:d7:64:94:e4:ad:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:05:0D:C3:32:4D:11:58:62:63:B3:99:FA:6F:01:54:31:45:C1
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/0XoFDcMyTRFYYmOzmfpvAVQxRcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.156.0/22
185.9.4.0/22
185.105.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:29:ee:cd:00:e7:e8:19:d9:97:bd:b2:fc:b4:2f:e1:0e:c2:
c2:e8:05:91:68:16:51:83:c8:f7:10:b1:9b:26:b2:35:55:26:
7e:77:d1:7c:ac:69:2d:a2:77:75:9f:23:7c:f1:fb:64:94:f8:
fc:78:5a:8f:a1:43:c7:55:ef:54:30:48:7a:3d:b7:39:7f:64:
18:69:17:3a:41:a5:a2:3e:0c:5f:24:8d:06:32:93:42:aa:b7:
45:cc:ff:09:4a:16:0b:5a:f7:f0:bc:13:de:4d:02:38:4b:2b:
6a:77:31:9a:ff:59:00:6a:16:5a:ea:ed:b9:69:55:fb:a9:28:
43:87:e8:4d:0a:b9:34:fa:6b:07:d9:39:8b:64:19:69:51:dc:
04:5b:de:aa:6e:6c:c0:42:52:cf:80:11:4c:33:f1:8d:ae:21:
f2:7a:34:96:90:99:d7:b5:1d:2f:d3:e9:a9:e9:82:4f:50:58:
e7:33:a1:cc:c0:2c:b6:b6:78:f6:63:c1:69:a5:aa:ca:19:97:
17:55:db:09:0c:92:b5:23:c8:a2:66:16:e7:ea:0a:27:a3:96:
34:b5:47:9c:d7:29:3d:e2:d0:b6:04:94:5a:6a:25:00:cd:22:
e0:c8:86:ac:fa:4d:25:c9:2e:63:a5:5f:b6:6c:8c:74:2f:99:
16:ab:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:01 2025 by rpki-client