Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jLa-7KOMH1_9ycbz2SiNZCfcWPw.roa
File: jLa-7KOMH1_9ycbz2SiNZCfcWPw.roa (raw, json)
Hash identifier: EPwOrp9OTL9f9CD1+uLXtZVsdbZdSJLPlvumZMHyMUA=
Subject key identifier: 8C:B6:BE:EC:A3:8C:1F:5F:FD:C9:C6:F3:D9:28:8D:64:27:DC:58:FC
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01836A58CE154296420AC0B9D073DEC84FE8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jLa-7KOMH1_9ycbz2SiNZCfcWPw.roa
Signing time: Fri 23 Sep 2022 12:35:48 +0000
ROA not before: Fri 23 Sep 2022 12:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:58:ce:15:42:96:42:0a:c0:b9:d0:73:de:c8:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 23 12:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cb6beeca38c1f5ffdc9c6f3d9288d6427dc58fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:ff:f6:39:e6:d9:64:b5:49:76:f1:9e:0a:
d9:82:53:77:9b:74:43:54:91:5a:b2:06:54:2e:8a:
a5:59:0b:24:05:86:33:59:1f:29:da:e4:f4:c3:00:
37:49:94:bd:17:69:6f:bb:27:56:13:4c:68:d0:49:
0c:20:fe:e2:21:4c:e3:93:fe:2c:21:06:eb:4f:ba:
3b:da:e9:6d:74:24:1b:40:44:1b:e9:ae:a3:7b:1a:
4a:9d:a8:0b:c7:0f:09:c0:91:f5:18:5c:1a:4c:c0:
95:c5:86:6e:e0:cc:f5:e8:91:ec:cc:13:f5:03:b3:
8d:48:32:55:99:d4:90:68:4e:2e:ec:ed:01:2f:01:
ef:b7:fb:32:a5:19:8e:72:73:50:ad:56:79:d0:20:
80:bd:c2:16:84:76:a0:a3:2d:1c:55:10:7c:72:db:
aa:ca:d1:57:c3:bb:eb:20:ad:e6:b6:5d:87:72:3b:
c0:dc:25:72:1b:26:b6:be:fa:43:c3:be:b2:a1:cb:
2a:fd:72:b3:26:71:ea:13:8a:8c:a6:65:61:f2:c1:
29:e5:9e:5b:2b:4e:49:ae:14:2e:1a:0e:6b:52:ab:
2c:ec:2f:82:43:f4:df:de:a0:25:20:5d:6f:9a:31:
44:37:4f:b8:67:18:9f:64:8c:46:4f:2b:ba:9e:f4:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:BE:EC:A3:8C:1F:5F:FD:C9:C6:F3:D9:28:8D:64:27:DC:58:FC
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jLa-7KOMH1_9ycbz2SiNZCfcWPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f3:04:48:43:09:fb:81:45:77:6c:64:ec:87:63:79:b1:31:
82:16:e0:d8:a8:28:bf:1c:a7:0f:aa:63:d8:b0:46:dc:a0:b8:
11:cc:a0:9d:55:d2:fa:d9:56:fb:f0:ac:14:8a:dc:f2:17:be:
5a:96:c8:b1:6d:45:20:21:85:aa:a7:88:39:01:f8:90:16:90:
50:78:17:40:27:80:00:40:82:a6:6c:ae:df:f5:a9:48:5b:aa:
3e:da:0f:87:13:fe:f3:00:11:6e:be:62:40:ee:83:a2:1d:dd:
91:a8:73:3f:21:30:64:2c:d7:9f:9d:e6:62:d7:15:d0:58:90:
83:a4:8b:6a:35:5a:f6:16:7a:85:41:cb:21:1e:b5:ef:65:47:
26:33:5d:00:7a:be:77:6f:c7:21:21:30:c8:1d:a8:25:3a:fe:
ab:e5:43:d9:57:3f:72:34:7a:ce:35:e2:60:af:6a:d8:21:6e:
08:c7:44:31:3d:48:e3:85:2a:e7:cc:39:df:b6:0f:47:27:0c:
d9:ee:ad:d5:b7:5b:ca:93:aa:2a:31:3e:04:e2:9f:90:60:60:
5a:f9:eb:52:55:1c:c4:2e:39:bd:2f:80:4f:2d:a3:88:33:8c:
a5:c8:ea:9d:f9:f7:cd:12:3c:cf:ab:10:67:3a:42:01:4f:d2:
f2:90:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:03 2025 by rpki-client