Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/f1J4tGR1_N88CmbVqXkUQJo0aaM.roa
File: f1J4tGR1_N88CmbVqXkUQJo0aaM.roa (raw, json)
Hash identifier: g7xGEeMRdJ2uyaTRsiTPblzKlFvo+KqivHw23P0tHtA=
Subject key identifier: 7F:52:78:B4:64:75:FC:DF:3C:0A:66:D5:A9:79:14:40:9A:34:69:A3
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018AFEA0088B4C33EAE4FEE4EFF15E861F32
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/f1J4tGR1_N88CmbVqXkUQJo0aaM.roa
Signing time: Thu 05 Oct 2023 06:56:55 +0000
ROA not before: Thu 05 Oct 2023 06:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.93.16.0/24 maxlen: 24
185.243.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:a0:08:8b:4c:33:ea:e4:fe:e4:ef:f1:5e:86:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 5 06:56:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f5278b46475fcdf3c0a66d5a97914409a3469a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:63:ad:a8:f4:68:a4:e8:2f:07:ac:fa:64:
c3:21:b7:99:2a:c9:10:60:cb:0e:20:73:26:1d:5e:
1e:d3:78:fb:d4:2f:49:ed:92:45:41:90:ad:40:90:
4b:01:aa:c6:90:27:a1:ac:44:58:ac:59:df:43:af:
52:8b:56:1a:db:f1:7f:97:bb:a3:3d:f6:47:bb:dd:
7f:ac:0f:29:66:d3:c6:5f:06:59:3c:3d:19:c9:de:
f7:cf:71:e3:75:13:53:6a:b2:16:d6:ff:32:7f:e9:
0f:84:1c:57:50:05:77:06:e3:8f:2d:20:12:6a:29:
81:75:47:f3:4f:29:42:a0:81:c0:20:aa:68:7c:d8:
61:43:59:77:f5:bb:08:67:f5:83:1c:a3:bf:99:2a:
98:6a:0e:8f:a3:0d:27:93:3e:b7:8e:96:35:65:63:
8b:d3:c1:c4:5c:fa:8d:15:f9:4b:9b:fe:a9:6e:ef:
e3:97:0e:e2:df:8d:37:c3:27:71:fe:9b:6a:8d:a1:
65:7c:27:61:93:5e:84:dd:29:87:af:9e:a1:11:30:
5f:e4:4f:dc:7c:55:ef:b4:17:1f:9d:6a:98:c8:a1:
b3:f6:17:4b:02:49:aa:9c:10:98:99:ce:60:94:e9:
25:13:92:32:fc:92:4c:cf:58:e2:c7:98:58:14:54:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:78:B4:64:75:FC:DF:3C:0A:66:D5:A9:79:14:40:9A:34:69:A3
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/f1J4tGR1_N88CmbVqXkUQJo0aaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/24
185.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
37:65:5e:3d:5f:c6:7b:c5:b4:6b:bf:0b:b9:3b:2e:01:bb:d8:
f5:d0:ea:dc:31:58:f9:68:c2:54:5b:f8:55:ca:ce:4a:c3:0b:
04:9a:a9:9b:2a:92:46:e4:73:76:2e:07:62:fc:22:89:2f:8d:
e1:87:ee:63:69:06:8d:78:c9:7e:92:69:a3:b6:26:d4:82:c7:
4f:a4:36:11:9f:37:e1:a6:58:e0:1d:84:c2:c5:3f:75:79:3e:
0c:28:d0:be:5b:75:c6:d7:b5:3c:26:9b:bb:1c:37:81:41:91:
9a:f6:0c:a1:2b:43:75:f8:c7:13:1e:a8:15:42:8e:24:a4:2b:
d7:c3:d8:13:fa:37:57:64:fb:1c:07:04:d2:ef:5e:b9:e2:8e:
75:9b:fc:49:08:b5:5f:55:e0:30:23:75:29:bc:b1:15:56:85:
e1:45:86:b8:25:45:c9:80:8b:c0:eb:f2:3f:89:50:2c:ac:b1:
0a:9d:b3:2d:06:a6:45:ee:59:0c:22:63:c1:52:06:b0:45:b4:
08:12:db:45:5d:9c:7d:62:79:91:59:d1:8c:ab:67:60:a3:71:
5c:54:f9:57:ae:7b:c9:0b:71:05:d3:e5:42:12:61:e7:61:36:
01:7b:9b:ca:27:8b:80:a8:5f:02:20:f7:14:ec:1f:d6:e0:d0:
8a:36:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:51 2025 by rpki-client