Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/7rOKF36RAfvSjMxrCEPqDHyXFBQ.roa
File: 7rOKF36RAfvSjMxrCEPqDHyXFBQ.roa (raw, json)
Hash identifier: FouCf9UKk8xMh5LVTujiI275olzPwXTVEcd9QjHNBU0=
Subject key identifier: EE:B3:8A:17:7E:91:01:FB:D2:8C:CC:6B:08:43:EA:0C:7C:97:14:14
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 0188DE6C4056C6A6E59B433E8E27B443BCC5
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/7rOKF36RAfvSjMxrCEPqDHyXFBQ.roa
Signing time: Wed 21 Jun 2023 14:46:56 +0000
ROA not before: Wed 21 Jun 2023 14:46:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44125
IP address blocks: 45.152.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:6c:40:56:c6:a6:e5:9b:43:3e:8e:27:b4:43:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 21 14:46:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb38a177e9101fbd28ccc6b0843ea0c7c971414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:18:08:72:38:f3:a2:39:db:5e:7e:df:74:
c6:2e:30:c8:1f:5a:31:76:f7:bc:d0:42:ee:4c:92:
68:22:6d:2c:50:e4:86:11:0e:07:62:5f:94:ce:c9:
e8:19:9b:e3:86:0b:fc:32:f3:cc:4e:cd:1b:bc:fb:
de:44:33:de:3e:4c:ea:c6:16:28:a7:22:c1:8a:34:
ad:44:ae:da:70:42:29:c7:6f:e9:00:6b:9b:dd:ad:
f3:33:0b:52:b6:be:3d:37:b2:ad:51:b0:30:3a:13:
2d:5f:b2:b1:9f:37:71:c8:01:32:77:b9:3a:66:70:
ec:69:4d:b9:63:46:40:73:e1:ac:1f:ee:58:77:8b:
db:7b:b5:05:f1:b4:5a:0c:fb:9d:f0:13:59:c2:79:
de:31:8f:57:83:40:7c:89:bc:2c:57:3a:43:2b:20:
bd:1b:eb:c9:6d:bb:22:59:64:2e:2e:e2:5c:30:be:
41:bb:ee:ce:29:23:7a:4f:0a:c6:e8:e1:5b:0c:a1:
fc:42:09:9f:24:7f:08:f1:4b:0a:6b:2b:a4:aa:42:
e7:41:88:24:8a:a6:a9:9f:c0:dd:07:86:71:ae:e3:
1d:6a:41:52:81:38:a8:83:e5:d3:0c:de:10:1b:31:
6b:3a:8b:df:a2:fe:8c:bf:f7:39:8d:6b:4d:fe:6d:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:8A:17:7E:91:01:FB:D2:8C:CC:6B:08:43:EA:0C:7C:97:14:14
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/7rOKF36RAfvSjMxrCEPqDHyXFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:f2:97:ae:d2:9f:b0:24:88:74:2b:03:d2:ed:e9:73:de:79:
a1:6b:77:50:5f:bc:5e:d0:44:d9:7e:6c:a5:33:24:96:28:c1:
dc:76:95:a5:04:bb:47:26:37:f1:47:4d:81:32:89:70:ba:87:
d5:ff:d6:be:db:00:59:50:87:b5:82:74:77:b0:29:fb:da:8e:
28:c5:7b:c2:26:f4:2f:c6:97:47:ea:1c:d2:c7:49:c5:a6:d2:
95:8d:8d:72:4c:f2:5e:ab:2c:66:f8:4e:10:72:d3:d8:e1:05:
99:13:12:0d:3d:55:6e:67:a8:58:53:97:43:e2:9a:2e:94:e3:
ed:18:2b:08:95:20:c8:99:e5:fc:e6:15:e3:24:fd:27:54:b2:
d7:e3:38:fd:0c:45:ea:68:b6:f4:87:c4:ee:54:12:f1:5c:b7:
1a:6b:c7:c0:94:9a:6a:86:9a:78:c5:7d:e6:44:07:36:c7:58:
53:be:51:22:69:3e:84:ec:db:34:db:5d:ca:40:0c:e6:c2:0a:
aa:86:e5:2f:37:86:04:52:a6:27:51:a4:8e:f7:ff:5e:d6:3b:
79:0e:b6:71:9a:59:47:2b:9b:7b:7d:3b:c8:4d:97:1f:a6:2d:
90:40:5e:df:f6:a3:25:ef:0e:54:9e:6b:c0:e7:72:81:7e:a9:
dc:90:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:16:54 2025 by rpki-client