Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/w9SjEOE_An1gs9Ha5IgfrE0r0_E.roa
File: w9SjEOE_An1gs9Ha5IgfrE0r0_E.roa (raw, json)
Hash identifier: yJIQW6y5k6793LZtN34VEGAkPALZz8v1uWKE9Squx5g=
Subject key identifier: C3:D4:A3:10:E1:3F:02:7D:60:B3:D1:DA:E4:88:1F:AC:4D:2B:D3:F1
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018221F41F4568E578ABB0ADC2E4E9E36E24
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/w9SjEOE_An1gs9Ha5IgfrE0r0_E.roa
Signing time: Thu 21 Jul 2022 18:10:23 +0000
ROA not before: Thu 21 Jul 2022 18:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35077
IP address blocks: 166.108.128.0/19 maxlen: 24
45.13.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:f4:1f:45:68:e5:78:ab:b0:ad:c2:e4:e9:e3:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jul 21 18:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d4a310e13f027d60b3d1dae4881fac4d2bd3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:eb:73:a7:d5:fc:99:a1:7d:84:f1:6c:61:
6e:04:bd:5f:64:fd:0b:fa:75:b8:79:bb:be:d2:c9:
93:35:21:ff:10:96:a9:8f:6c:5f:5f:07:e4:80:41:
fa:db:b9:9d:00:8e:cf:7a:a1:1d:43:2d:18:8d:25:
ea:e6:3b:6d:fb:3f:e2:e1:8d:b9:f3:aa:ce:17:35:
37:e7:0e:fc:35:02:46:95:73:3e:37:84:7e:28:d1:
7f:6d:aa:86:e0:0d:38:8f:97:03:92:37:93:ae:ec:
42:0e:d3:8f:e8:00:bb:6a:f4:58:ee:9f:86:f7:78:
fb:ad:91:c0:37:b9:ba:94:54:b6:f8:b6:24:ad:f3:
b3:b7:41:9a:7f:8a:f4:05:33:44:ad:bf:9f:6f:01:
f7:0c:93:88:17:d9:f3:be:bd:18:b1:58:9e:4e:ba:
4e:ee:09:21:ef:ea:ff:1d:f4:60:f3:7b:88:9d:9a:
da:e2:58:bd:5c:49:96:df:ec:0a:23:32:48:65:64:
7b:3d:ad:49:d8:c5:cd:bb:88:8b:41:4d:77:ae:65:
33:91:67:c6:42:b3:fb:62:ca:c4:7f:a5:13:14:32:
82:82:ab:a1:32:ce:f3:2f:4d:b7:30:77:e3:8f:9e:
a2:06:68:f6:e2:2e:8e:0b:73:7d:52:43:54:6b:19:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:A3:10:E1:3F:02:7D:60:B3:D1:DA:E4:88:1F:AC:4D:2B:D3:F1
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/w9SjEOE_An1gs9Ha5IgfrE0r0_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.32.0/22
166.108.128.0/19
Signature Algorithm: sha256WithRSAEncryption
52:e9:a9:26:dd:fe:6a:da:94:e6:a8:4f:86:97:21:dd:93:8a:
f5:e5:e9:59:8e:6b:71:de:fc:a0:5a:fb:11:d1:d6:31:0f:4d:
31:58:c4:b9:17:a2:e6:e5:61:63:41:91:1b:0d:7e:7e:73:04:
fe:44:39:f9:9e:95:63:0c:d6:ab:e8:50:43:ac:d9:be:2c:35:
70:4d:e3:d1:8d:4a:34:00:54:d4:36:a2:43:51:80:a2:c5:f1:
c5:d2:62:7d:46:f5:09:98:e6:fe:f1:e0:62:68:9d:c5:db:b9:
f5:52:f1:01:cc:fb:94:1b:ef:f7:92:d6:c7:57:f3:ad:ff:10:
8b:5f:72:da:bd:69:87:36:84:6d:54:6c:38:92:0f:37:06:d8:
c6:9d:9e:f0:2a:a2:72:bd:2d:84:3f:59:42:ff:80:c8:bb:e6:
d4:40:04:63:2a:42:80:84:f6:5e:85:5f:f2:b4:a7:b8:21:f5:
f5:27:de:ab:d7:fe:7e:65:e6:60:73:f8:d8:7c:ac:18:23:64:
12:78:b5:cb:57:42:cf:36:08:42:7e:80:ab:52:c4:5d:71:b7:
c0:9b:83:90:46:34:c8:48:8d:9a:c7:56:a4:fa:cb:58:9e:57:
cb:4b:28:7e:16:28:8e:bf:7b:fc:5d:16:ce:92:ca:f1:0b:63:
88:3e:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:49 2025 by rpki-client