Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/3EA0oI4K9WJAf2AOlfK0u31TqEU.roa
File: 3EA0oI4K9WJAf2AOlfK0u31TqEU.roa (raw, json)
Hash identifier: sLHpeuUfcUqaRPNksGoBgBjItfLpO0+E6Bl8uOl+qXA=
Subject key identifier: DC:40:34:A0:8E:0A:F5:62:40:7F:60:0E:95:F2:B4:BB:7D:53:A8:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 018570399F77F72E05FD62A0EF0C4B3E7AE4
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/3EA0oI4K9WJAf2AOlfK0u31TqEU.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60641
IP address blocks: 185.45.172.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9f:77:f7:2e:05:fd:62:a0:ef:0c:4b:3e:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc4034a08e0af562407f600e95f2b4bb7d53a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:30:21:48:a9:fd:4a:e6:cc:e5:7f:01:14:
db:32:ac:4f:f9:59:f8:6c:53:8e:dc:f5:4f:6f:bc:
c4:97:b6:67:75:f5:ce:87:e2:94:26:a1:d2:2f:63:
d0:74:cd:8c:85:fe:60:5f:fa:d7:78:41:e5:43:7c:
a0:91:f7:52:75:b0:cd:91:99:3d:95:49:01:7a:e1:
bc:73:2e:08:94:5c:72:f8:b2:6d:65:6c:71:ec:a3:
ab:d9:f6:6a:cc:cb:f7:9e:bb:1e:5d:42:c7:d2:b9:
88:e1:e1:ec:c0:85:85:c6:c1:ee:8e:9a:c5:2e:5f:
07:f7:90:0b:08:d2:ad:3f:4e:7f:de:e3:09:7c:9c:
ad:05:f3:f3:bf:dc:32:ee:62:0e:e5:d6:40:74:b4:
a7:10:bb:76:69:3f:2c:15:41:73:eb:c2:01:0e:81:
3a:55:40:6c:02:61:b4:68:c7:9e:f6:c2:94:27:10:
ab:6b:8c:94:9c:69:26:73:34:c8:54:df:88:b4:44:
dd:58:a2:28:20:9c:49:2a:1c:c9:cd:d7:3c:25:86:
24:1d:42:13:b1:8e:c4:da:7e:16:cd:d3:29:92:dd:
dd:b4:55:59:2d:ee:e2:53:3d:e4:b6:00:8f:a6:89:
5b:47:80:79:4a:94:39:1c:3c:7a:cb:1f:2d:e5:b9:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:34:A0:8E:0A:F5:62:40:7F:60:0E:95:F2:B4:BB:7D:53:A8:45
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/3EA0oI4K9WJAf2AOlfK0u31TqEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.172.0/23
Signature Algorithm: sha256WithRSAEncryption
95:fa:15:2c:2e:f0:1c:f5:3b:16:25:08:d8:bf:95:5d:92:5c:
b0:c4:54:03:30:d8:3c:91:9c:70:a2:9a:d4:35:a9:3f:7a:be:
51:a7:57:58:21:bb:03:d9:12:c1:66:81:52:ce:1c:66:bb:b8:
66:47:3e:cc:e5:ba:32:bc:b9:38:10:d0:fc:3a:e0:6c:0c:60:
04:64:22:54:0c:4e:36:0b:20:18:7a:2f:e4:b9:91:20:2a:3c:
09:77:75:e8:d7:a1:a7:0b:ee:cc:ac:2c:31:77:4d:9a:ca:d3:
ea:1f:21:f5:84:63:c3:34:ec:74:6f:17:79:03:67:a0:a5:6d:
6f:05:82:61:d9:74:7c:79:84:0e:a2:05:aa:62:61:75:6f:eb:
08:95:3f:31:70:a2:ec:ce:a9:83:6a:0e:d2:01:55:43:12:d4:
0d:0b:5a:23:07:5d:f3:fb:4a:aa:b1:12:c8:00:be:13:57:9d:
d4:61:81:25:81:98:a1:43:a4:3d:f5:e8:eb:37:62:cc:bb:c8:
ed:7a:39:f3:8c:32:d5:d1:9a:56:15:65:28:3c:cf:32:21:9d:
9d:62:f0:6c:57:ca:f5:e5:c2:24:ba:22:28:95:6f:6c:3e:de:
1d:83:05:0f:b9:32:33:7c:61:5e:ee:b1:2b:df:1f:af:bc:4c:
10:42:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:13 2025 by rpki-client