Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa
File: zADANQcZ7AzoOXzq-N3LwMuKAxA.roa (raw, json)
Hash identifier: qwFd1s78VpSBcKl6yBckp/qvw/yfjjCzWDalNQW0cS4=
Subject key identifier: CC:00:C0:35:07:19:EC:0C:E8:39:7C:EA:F8:DD:CB:C0:CB:8A:03:10
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018618683AEF779D496C2B8A546D3F3D5A42
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa
Signing time: Fri 03 Feb 2023 17:52:09 +0000
ROA not before: Fri 03 Feb 2023 17:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202265
IP address blocks: 45.87.162.0/23 maxlen: 23
45.87.161.0/24 maxlen: 24
45.87.160.0/24 maxlen: 24
2a04:5b81:1fff::/48 maxlen: 48
2a04:5b80:53::/48 maxlen: 48
2a04:5b86:1::/48 maxlen: 48
2a04:5b81:1000::/40 maxlen: 40
2a04:5b87:1::/48 maxlen: 48
2a04:5b84:1::/48 maxlen: 48
2a04:5b81:2010::/44 maxlen: 44
2a04:5b81:2060::/44 maxlen: 44
2a04:5b82::/44 maxlen: 44
2a04:5b82:8::/48 maxlen: 48
2a04:5b80:200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:68:3a:ef:77:9d:49:6c:2b:8a:54:6d:3f:3d:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Feb 3 17:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc00c0350719ec0ce8397ceaf8ddcbc0cb8a0310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:fa:43:7c:18:83:3a:ef:ee:cd:ab:cb:44:
79:21:87:d6:e3:d4:6c:c7:f9:b0:99:c8:5a:0f:b9:
e4:10:21:08:50:15:f8:3e:29:c2:ac:f1:01:ac:a7:
25:6e:fb:6a:a4:3a:3c:db:7b:47:15:65:8a:be:97:
89:65:89:b9:bb:34:3f:c0:e4:cb:d2:94:49:f2:8f:
1b:70:b1:1b:ef:cf:9b:25:1f:20:17:92:cc:8b:e7:
d6:c3:ab:6e:63:56:19:37:50:a1:4a:25:63:5c:ab:
3e:9a:75:11:9b:a7:40:b7:01:69:d1:a2:d8:77:b0:
0d:85:f3:cf:39:24:c8:0a:f4:e4:6e:d4:7f:f0:a9:
12:7a:a2:7d:fb:cb:38:23:c5:8d:a6:77:31:2e:81:
e9:76:91:44:57:ec:89:56:75:fe:cb:31:5b:c3:e1:
d8:2e:eb:7d:4d:75:69:30:a8:6e:0a:49:9d:b6:e8:
cd:e9:72:68:85:fd:5b:fd:1a:74:26:4d:4b:b9:59:
ec:de:58:03:92:94:eb:1b:ac:77:73:e3:30:d9:7e:
29:41:1c:ca:9d:78:a8:c6:34:df:1a:2a:e0:1f:17:
01:48:9b:10:0c:0f:90:16:f2:7a:62:35:c3:cb:51:
3b:82:99:08:dd:1a:de:61:fa:ef:e3:15:43:c9:97:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:C0:35:07:19:EC:0C:E8:39:7C:EA:F8:DD:CB:C0:CB:8A:03:10
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
IPv6:
2a04:5b80:53::/48
2a04:5b80:200::/48
2a04:5b81:1000::/40
2a04:5b81:1fff::/48
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b82::/44
2a04:5b84:1::/48
2a04:5b86:1::/48
2a04:5b87:1::/48
Signature Algorithm: sha256WithRSAEncryption
33:16:ec:49:79:15:2c:52:a7:49:a8:89:57:03:8a:a3:bf:2e:
9f:70:d9:5f:59:2e:f2:12:e0:18:3e:28:f3:fc:1b:20:1d:61:
67:14:a3:67:fb:93:b7:5b:61:83:ff:19:b9:75:f4:f7:e1:c1:
97:a9:89:ac:4c:0d:7c:5a:0d:28:f4:8d:37:d1:21:6d:4f:68:
b5:11:3f:77:fe:05:fa:8b:77:f1:a9:81:ef:86:ae:11:39:e7:
f6:91:79:3f:43:b7:b5:1c:45:38:83:ef:72:09:e8:55:58:67:
20:a1:c3:84:7b:c9:33:74:92:bc:0d:8c:81:83:e7:64:4c:49:
1b:39:21:a3:a3:f7:39:82:1c:28:a9:84:92:84:10:8c:47:4f:
91:79:ce:fa:5b:18:b4:5f:9d:c9:25:fb:d0:e8:8b:a3:85:eb:
a9:37:50:58:dd:31:26:53:f9:4a:b3:6a:4a:90:16:d0:e2:8d:
2b:3e:9b:65:90:0a:8a:31:63:22:18:4b:00:1f:b2:0d:49:e7:
54:45:cb:ba:52:76:cd:fc:1b:a8:8e:56:cd:95:cd:f0:78:78:
e7:5c:87:ab:30:a4:42:a1:fe:7e:25:96:93:5d:e4:a7:f3:72:
72:a3:d6:15:3b:34:22:d7:75:b3:db:9d:d7:50:bc:61:df:ff:
74:e5:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:03:23 2025 by rpki-client