Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/zEVyIGv9is5_X6wDhtvYkAAVgaM.roa
File: zEVyIGv9is5_X6wDhtvYkAAVgaM.roa (raw, json)
Hash identifier: 6ztBFnh7Mk1c0ejb7ZS67/qz/UJpmlYjDRex5oQNra0=
Subject key identifier: CC:45:72:20:6B:FD:8A:CE:7F:5F:AC:03:86:DB:D8:90:00:15:81:A3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 0883EC65
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/zEVyIGv9is5_X6wDhtvYkAAVgaM.roa
Signing time: Sat 01 Jan 2022 15:00:38 +0000
ROA not before: Sat 01 Jan 2022 15:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208999
IP address blocks: 45.10.253.0/24 maxlen: 24
45.10.252.0/24 maxlen: 24
45.10.255.0/24 maxlen: 24
45.10.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142863461 (0x883ec65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Jan 1 15:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc4572206bfd8ace7f5fac0386dbd890001581a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:53:31:fb:01:c6:63:86:0e:eb:50:51:80:
2e:f8:ff:d2:1d:d0:0d:6d:7a:77:cc:06:00:6e:90:
66:d1:28:f4:bb:96:5a:59:a6:b6:76:fc:48:f9:5d:
48:18:85:03:88:37:8c:7c:e2:41:4a:54:13:b1:28:
df:97:f6:27:f5:7b:e2:1f:b2:4d:41:c6:dc:11:7e:
48:81:65:ec:9f:91:8e:fe:b1:03:ff:7f:c4:be:dc:
e8:63:cf:2b:f7:44:c1:6e:63:e0:2c:6a:5a:76:7a:
ba:11:f0:da:39:15:21:61:0c:06:8c:52:93:87:8f:
fc:00:b2:1a:af:ad:b8:d8:ff:2e:10:39:a9:b1:73:
09:0c:47:a2:e4:26:32:b5:f7:5b:1b:ee:55:17:52:
3c:fd:aa:a0:c2:88:b6:00:b1:8a:47:e8:13:ed:f4:
53:1c:94:4c:48:2a:ca:84:1f:b2:6d:25:1a:b7:e6:
f2:86:1e:30:5f:43:67:87:46:cd:c5:f9:de:8a:c6:
67:f3:b7:cd:44:53:43:0c:4b:06:eb:76:81:b2:ae:
91:a0:01:a5:ae:0c:5a:aa:8c:7f:72:39:85:d7:13:
21:b6:1a:3d:69:9b:a5:c0:16:8b:38:ee:ce:9f:57:
c8:03:d4:4c:ba:65:86:1b:c2:42:25:44:0a:e9:07:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:72:20:6B:FD:8A:CE:7F:5F:AC:03:86:DB:D8:90:00:15:81:A3
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/zEVyIGv9is5_X6wDhtvYkAAVgaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a0:54:88:44:15:12:43:81:7e:86:71:84:ca:4a:53:5f:8c:
f6:55:b4:b0:6d:a8:2e:b9:45:9c:87:70:42:ac:f3:98:9d:d7:
aa:fe:ab:c3:f3:8d:65:5c:bb:e0:66:3b:20:14:e3:3b:6b:45:
a4:19:a7:cc:35:78:04:04:ac:17:c6:e0:5d:1f:42:40:0d:a4:
47:ed:ec:8a:b4:b4:ae:a6:1a:db:28:7c:21:90:d2:70:8f:ad:
26:cc:28:a7:6c:02:be:f3:68:22:c1:49:1c:57:df:38:d5:6f:
39:c3:4d:cc:14:22:f0:46:42:7d:08:be:b5:65:35:34:10:fd:
f3:0e:85:60:bc:9b:f7:ac:95:ea:f3:49:2d:7d:fa:95:57:44:
0f:8d:55:6b:10:be:d7:f2:b0:cf:04:12:6d:8b:c8:bf:7a:9a:
af:58:00:38:a7:c3:7d:2a:5f:f0:ec:c5:9d:61:66:0f:ba:ab:
70:7f:59:56:e1:4d:bd:c6:00:fb:0c:a2:b6:a4:71:1a:fb:40:
a9:54:15:55:d3:24:c9:ac:c9:56:88:c6:05:52:37:12:f5:9c:
f1:e0:e6:85:0f:62:85:99:0d:27:f5:a2:24:06:68:be:48:ff:
be:a7:43:a1:11:58:ae:de:f6:f4:51:de:4f:e6:6e:ce:b7:0a:
05:f8:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:42 2025 by rpki-client