Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/eUdhsnTscvcTOpTIhgnUk9yiVCk.roa
File: eUdhsnTscvcTOpTIhgnUk9yiVCk.roa (raw, json)
Hash identifier: nvfoTw+67uit6jd6a8NpFJE1qtNJUAhGZe3yvl8ac2k=
Subject key identifier: 79:47:61:B2:74:EC:72:F7:13:3A:94:C8:86:09:D4:93:DC:A2:54:29
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0185710C39BDD081C5C6F333737504C057C6
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/eUdhsnTscvcTOpTIhgnUk9yiVCk.roa
Signing time: Mon 02 Jan 2023 05:55:04 +0000
ROA not before: Mon 02 Jan 2023 05:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6233
IP address blocks: 45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:39:bd:d0:81:c5:c6:f3:33:73:75:04:c0:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 05:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794761b274ec72f7133a94c88609d493dca25429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:7d:90:bb:fc:1c:ae:91:e8:40:6c:1c:51:
c7:d5:fc:cf:f8:7d:ee:03:16:62:e0:0f:b1:9a:06:
18:88:34:4a:9c:d1:b8:09:64:45:dc:73:c1:8b:3f:
ed:a7:48:81:84:c0:e1:83:ea:b8:7d:09:36:a7:52:
86:aa:1d:40:c3:fc:2e:63:cd:4b:c0:28:1d:10:cf:
de:a5:ab:db:63:b6:dc:76:7f:f5:e3:c1:c4:f7:35:
aa:b5:cd:fe:c4:4f:d0:a9:e0:f8:cb:eb:b0:32:45:
f7:84:4c:a3:70:27:31:b0:f3:44:5c:dc:e6:89:4d:
1a:38:92:71:5b:dc:04:0e:2f:03:1d:c6:7f:d9:eb:
ba:6e:d7:a7:a5:17:a3:de:84:82:13:a9:fb:98:57:
9b:89:e8:23:b4:6a:3a:c4:79:20:eb:b1:74:14:b8:
a7:60:4a:96:63:e8:33:63:72:4f:2c:3d:5e:9d:bd:
6c:ab:4f:c5:35:49:cd:c2:b8:04:13:2e:8d:7b:6f:
4b:1c:d6:c3:4a:f3:13:91:73:0f:54:8f:ec:7e:2d:
69:99:92:c7:18:d3:29:c8:79:95:56:79:60:b5:91:
28:c4:43:cc:59:e1:5b:c3:8d:dd:c7:a2:42:0e:03:
94:a4:4b:01:ca:e7:91:bd:e1:09:ba:63:15:7b:6d:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:61:B2:74:EC:72:F7:13:3A:94:C8:86:09:D4:93:DC:A2:54:29
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/eUdhsnTscvcTOpTIhgnUk9yiVCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:2f:7a:8c:3b:61:9e:6f:16:f4:f9:3c:a8:ca:25:98:ab:cb:
2f:d7:f6:9f:66:6e:c6:41:e1:0c:93:52:c0:c4:84:9a:64:f6:
9c:d9:e4:b8:eb:af:f1:41:28:2c:f6:1b:dd:11:4b:11:f5:c4:
e4:4e:2f:a1:eb:8b:4a:83:c0:51:f4:29:98:76:f4:a0:74:da:
8a:bb:12:06:b8:c2:99:bc:da:37:a4:a4:a1:cf:29:2d:78:fe:
9b:97:45:81:51:eb:62:f0:b6:a5:bc:49:1b:44:af:89:9e:c4:
29:ec:ab:b8:91:71:2e:9b:6e:df:01:94:e0:77:1e:32:5a:59:
bb:24:b8:8e:e8:c0:07:d8:32:bb:36:f0:22:78:02:bc:3e:48:
cc:33:06:72:8f:8d:b9:d1:3e:cf:e3:22:04:4c:17:b6:dd:c1:
d1:29:86:19:04:18:76:8d:bf:a5:99:81:46:b0:c6:58:40:33:
32:2b:d6:d7:7d:ff:47:d7:1f:7a:87:25:63:fe:20:33:25:6d:
2b:96:a7:43:09:2c:52:81:ab:6c:7b:d7:2a:09:26:db:26:18:
65:26:21:f7:ec:60:21:f5:4a:32:ac:2c:c5:ce:1b:73:87:09:
4f:67:b8:89:7d:42:4e:20:26:06:7d:5b:9f:d5:64:38:94:68:
5c:c9:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:27 2025 by rpki-client