Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/j9haM3iCm-SwGsxACWX_Dc8VkbU.roa
File: j9haM3iCm-SwGsxACWX_Dc8VkbU.roa (raw, json)
Hash identifier: kuY3ZjLXsJUSnu0WtrBVvrcTOmikRXIeIUTw/21YDI0=
Subject key identifier: 8F:D8:5A:33:78:82:9B:E4:B0:1A:CC:40:09:65:FF:0D:CF:15:91:B5
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07DDD5FE
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/j9haM3iCm-SwGsxACWX_Dc8VkbU.roa
Signing time: Sat 01 Jan 2022 01:55:47 +0000
ROA not before: Sat 01 Jan 2022 01:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 45.139.224.0/24 maxlen: 24
45.139.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131978750 (0x7ddd5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd85a3378829be4b01acc400965ff0dcf1591b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:dd:9b:3e:b6:2c:20:79:42:19:97:25:c4:
f4:50:52:38:45:ad:ba:db:fc:77:1e:bb:83:74:83:
18:17:73:0f:6d:5b:40:25:98:fe:90:e4:5c:82:b1:
13:09:4b:e0:69:7d:44:86:55:21:d1:78:0e:0a:37:
66:b1:1e:f2:38:5b:8b:fb:7e:4e:a1:ad:cf:75:00:
5e:e7:98:0e:41:eb:8c:08:28:58:c2:16:46:52:bf:
09:bc:fd:65:bf:87:83:86:34:35:70:cd:4d:8b:e2:
f9:fc:ba:71:00:09:78:d1:11:b0:fa:b6:8d:36:91:
05:cd:a9:bb:8a:ef:27:3b:74:e7:ed:5b:20:c8:8f:
77:78:e8:91:fe:be:8e:e0:cc:9e:f2:ad:cd:d3:b0:
97:eb:72:1a:1f:a2:32:a6:73:9c:5d:1f:4c:09:c3:
1d:77:3c:6d:05:ce:c3:4a:46:55:c4:65:62:ec:4e:
be:f6:0a:ac:e4:44:81:69:80:3e:61:98:13:f9:0a:
72:87:49:82:4b:f0:90:b6:93:fd:8f:b1:33:75:b8:
b9:70:c3:de:34:ae:77:da:ed:5f:67:c4:e5:f8:63:
b5:b7:d6:d9:a1:dd:56:a1:28:dd:52:5b:5a:f2:b8:
b1:0d:81:b0:6b:4c:23:54:4a:2e:fc:04:47:15:dc:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:5A:33:78:82:9B:E4:B0:1A:CC:40:09:65:FF:0D:CF:15:91:B5
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/j9haM3iCm-SwGsxACWX_Dc8VkbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.224.0/23
Signature Algorithm: sha256WithRSAEncryption
92:80:ff:f9:54:d7:6d:5b:ad:3c:78:aa:22:98:0a:27:2e:dd:
b4:f3:5b:25:0e:aa:10:0f:5a:53:f5:8c:3d:14:be:0f:f7:14:
45:c5:29:93:ef:b6:f3:64:bf:b6:39:f0:aa:f9:6c:f7:da:45:
cb:8e:16:fa:ad:b1:a0:55:c0:78:6e:74:7a:e0:1d:a0:e5:f5:
f4:b2:99:2c:fd:5c:b8:83:7b:db:ee:f9:0c:75:57:ae:53:ea:
25:89:32:cd:f0:89:d2:57:4d:e1:4c:c4:d6:72:19:4e:22:21:
70:9b:ef:cc:6a:1f:fe:a6:89:a5:14:e1:8a:6f:f7:76:18:e2:
77:14:96:ab:14:59:f0:e2:f7:b5:8d:0f:89:df:a5:0d:22:f7:
ef:a0:c8:93:0a:e2:b6:e2:e4:aa:3c:81:b3:16:94:fd:1f:4d:
42:8b:50:95:56:d2:9b:c6:83:a0:28:b0:07:27:f7:8f:b9:0d:
23:70:96:5f:d9:41:99:30:55:b9:cd:31:aa:82:47:fa:22:a3:
72:cd:b5:3b:26:43:36:b3:78:cd:3e:b6:b5:a2:ac:82:21:dd:
88:90:c0:fa:38:5a:da:ae:9a:01:10:16:75:cf:15:d7:88:51:
7f:2d:e2:46:46:19:a4:99:62:2d:cc:b6:6e:82:52:f4:a9:1e:
24:17:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:43 2025 by rpki-client