Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ls7VlW9VG3p5d3D3-7eBJY9tSSQ.roa
File: Ls7VlW9VG3p5d3D3-7eBJY9tSSQ.roa (raw, json)
Hash identifier: SFplgOAoRR14/AX/RbiYw1xmkR08ammqCrSMpf2m8hY=
Subject key identifier: 2E:CE:D5:95:6F:55:1B:7A:79:77:70:F7:FB:B7:81:25:8F:6D:49:24
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0188D6A9AD25C2B5FD6338F547453BDF80C7
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ls7VlW9VG3p5d3D3-7eBJY9tSSQ.roa
Signing time: Tue 20 Jun 2023 02:37:04 +0000
ROA not before: Tue 20 Jun 2023 02:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 45.135.236.0/23 maxlen: 23
45.135.236.0/24 maxlen: 24
45.135.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d6:a9:ad:25:c2:b5:fd:63:38:f5:47:45:3b:df:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 20 02:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eced5956f551b7a797770f7fbb781258f6d4924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:a4:b1:b9:4b:aa:a2:d6:08:de:70:91:71:
3d:5f:d4:61:45:b5:d8:f2:f9:bf:57:f1:fa:3b:22:
76:8d:5a:6f:a5:7e:7a:15:65:c3:13:82:c7:6d:60:
c0:f8:3c:17:e0:d6:d7:18:2e:7c:5c:7f:29:5e:72:
62:03:19:0f:a5:5d:c8:80:52:2b:a4:25:8a:2d:e3:
c7:31:97:a9:31:75:56:39:2c:c4:f9:a7:f1:86:9d:
6f:38:50:b9:c5:ea:e0:0b:cf:58:ba:33:66:2e:74:
36:ef:81:62:cf:c4:23:57:79:f1:5d:5c:e4:99:9c:
28:29:78:60:af:ea:c4:4b:06:d3:76:16:98:7d:5e:
c4:84:a1:cb:38:46:7c:0f:5c:9d:10:e0:8b:b5:d5:
74:be:b9:5e:25:ce:cb:4a:7c:2e:01:3a:be:80:f9:
2f:90:e3:51:e8:78:6d:db:2e:5b:c6:13:27:be:bb:
ac:65:26:2c:af:31:1a:38:db:d9:2b:23:fa:a8:26:
a8:2f:5f:b9:0b:fb:93:0d:60:03:8c:aa:2c:05:53:
73:98:37:a2:c4:96:a9:e6:dc:df:81:9f:b0:3e:6f:
03:30:56:69:a9:73:18:be:6f:4e:40:5d:ed:bf:4e:
ca:6e:a8:54:f3:ee:38:96:ed:85:b1:6b:53:19:eb:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:D5:95:6F:55:1B:7A:79:77:70:F7:FB:B7:81:25:8F:6D:49:24
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Ls7VlW9VG3p5d3D3-7eBJY9tSSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d7:0c:40:b0:ee:e3:c7:16:7b:fb:b8:35:f9:a7:90:1e:38:
d8:6d:ca:e4:a0:1a:67:0d:15:3e:49:00:6c:44:fb:83:c0:39:
f1:b5:76:87:8e:82:99:d5:93:31:a1:d4:ec:f0:7a:bd:e7:ae:
0f:90:1d:aa:46:00:06:d6:8b:1a:75:16:21:ab:04:13:ce:8d:
ea:79:43:66:8f:8b:a7:28:b0:2e:4d:f1:cb:81:10:fb:44:af:
84:ec:bc:9b:d7:8d:eb:81:a9:bf:ed:2c:2c:18:7f:64:2e:98:
81:83:4e:13:3b:fd:bb:90:4a:6b:73:e6:28:73:96:3d:6c:22:
a2:d7:51:38:28:c4:65:3d:51:78:e0:c5:a9:47:70:13:89:b3:
10:29:32:6b:4e:d6:c5:c8:49:e6:33:76:e8:cf:13:6d:bb:94:
33:cf:e2:b7:51:d8:c6:88:20:02:98:47:66:3e:4c:e2:02:44:
b4:b3:ae:2e:b1:81:dc:7e:1b:86:31:e6:25:02:0c:5a:c1:0c:
16:f6:3f:77:be:ab:66:e8:8a:27:68:57:ac:48:8e:22:8e:35:
ff:15:fc:0f:c5:1b:2d:1c:6b:14:39:56:dc:27:9d:87:05:ab:
86:5b:7c:ff:d8:48:42:73:8a:8d:df:e6:3b:83:9e:f6:c2:80:
a4:70:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:08 2025 by rpki-client