Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/XKP0cewxxwnHWUPudriDhsB51gs.roa
File: XKP0cewxxwnHWUPudriDhsB51gs.roa (raw, json)
Hash identifier: E6/2bxdey6Wgg2UV6OBOqHQhkRnF1/hzYMzbXJ0/lqc=
Subject key identifier: 5C:A3:F4:71:EC:31:C7:09:C7:59:43:EE:76:B8:83:86:C0:79:D6:0B
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 06B72CD3
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/XKP0cewxxwnHWUPudriDhsB51gs.roa
Signing time: Sat 01 Jan 2022 07:02:48 +0000
ROA not before: Sat 01 Jan 2022 07:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51185
IP address blocks: 45.157.67.0/24 maxlen: 24
45.157.65.0/27 maxlen: 27
45.157.65.0/24 maxlen: 24
45.157.65.128/27 maxlen: 27
45.157.66.0/24 maxlen: 24
45.157.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112667859 (0x6b72cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jan 1 07:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ca3f471ec31c709c75943ee76b88386c079d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:0c:b0:54:b6:c0:f5:77:60:48:ce:0c:1d:
03:d3:89:c1:7e:76:c0:47:45:55:88:a3:5b:66:29:
d5:f7:d4:51:9b:14:a4:6b:fb:ef:09:da:bf:f7:fd:
df:84:40:49:5d:2f:ef:61:04:ec:26:fd:90:98:8f:
e5:ed:65:37:28:fc:cf:d4:7e:4d:fc:1a:2b:8c:a7:
39:02:7e:a4:2c:7c:6c:c4:71:62:f3:f2:c9:13:43:
0e:bc:bb:af:bd:76:19:58:92:76:cb:8c:fe:0e:5a:
ac:db:be:f4:0e:22:3c:5d:92:2f:c2:24:60:67:c6:
cb:44:57:b5:86:7e:77:b4:a0:36:d0:ed:41:e0:bb:
73:15:08:d8:90:9d:2e:12:26:2e:3d:1f:13:6e:3a:
30:ce:5b:8a:8d:86:4f:1c:27:7b:45:bc:6e:81:8a:
8e:70:2f:92:8f:21:94:2b:04:81:a4:fa:2f:48:35:
55:8c:49:89:3c:0f:cf:8e:70:27:86:60:cb:0e:22:
82:a6:b4:85:1d:a3:83:9e:97:d1:df:29:a0:1b:46:
d1:10:c3:e9:ac:59:a0:d7:7e:6b:51:93:70:f5:16:
fc:a1:5c:c9:99:b1:11:a6:1f:ab:18:8b:8a:03:5b:
50:d9:89:9a:af:04:38:6c:02:a9:ca:6a:f2:f4:d9:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A3:F4:71:EC:31:C7:09:C7:59:43:EE:76:B8:83:86:C0:79:D6:0B
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/XKP0cewxxwnHWUPudriDhsB51gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:38:9b:1a:9c:8f:4d:b4:40:bf:65:29:98:f1:32:d1:9f:59:
05:1a:eb:e0:79:e4:a1:f9:4f:80:25:b5:4d:94:1a:e7:6a:c5:
7e:d2:64:4d:4f:0e:79:a5:39:2c:0a:29:df:ac:4a:58:ef:55:
74:42:ce:29:1f:9b:2f:f8:97:63:e1:e5:9f:92:ea:94:d5:68:
53:a7:e3:fa:84:5a:df:a7:f4:59:cf:96:02:ba:32:a0:2d:a0:
31:de:b5:5c:90:2c:92:d7:56:5f:f2:76:a5:4e:1a:ab:c9:3c:
e5:e4:34:99:6e:e8:8d:15:60:36:7a:89:6a:9b:83:38:4e:39:
05:09:28:0b:09:ce:8b:58:a8:9c:ed:c2:d1:ce:3c:4f:e1:e9:
65:d1:73:a1:5c:e0:53:fa:8c:8f:3a:2f:40:ce:ab:b3:3c:05:
a1:3f:74:91:7a:e0:e0:46:e0:94:7d:06:ae:02:4a:84:72:de:
b7:ce:ee:9c:45:fb:d0:a8:fd:0c:e9:c8:93:3f:a3:26:fe:3a:
ce:22:40:70:ff:b5:00:7f:8d:0f:64:5b:43:89:24:09:6c:2f:
c9:c7:db:b9:ba:1f:a4:ad:db:db:12:a9:46:86:84:97:be:bc:
db:77:3d:20:cd:68:6e:12:3d:28:5b:2b:12:7b:f7:e0:69:4f:
16:a2:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:05 2025 by rpki-client