Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/w44iE54tanE-CW2nZXHc7VA03Jc.roa
File: w44iE54tanE-CW2nZXHc7VA03Jc.roa (raw, json)
Hash identifier: L5tzt11FseXRqcWuYuPcDHB4hzUBMCskLLQtTcjFV6g=
Subject key identifier: C3:8E:22:13:9E:2D:6A:71:3E:09:6D:A7:65:71:DC:ED:50:34:DC:97
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 0956679E
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/w44iE54tanE-CW2nZXHc7VA03Jc.roa
Signing time: Tue 19 Apr 2022 12:57:13 +0000
ROA not before: Tue 19 Apr 2022 12:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207782
IP address blocks: 45.81.103.0/24 maxlen: 24
45.81.102.0/24 maxlen: 24
45.81.101.0/24 maxlen: 24
45.81.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156657566 (0x956679e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 19 12:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c38e22139e2d6a713e096da76571dced5034dc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:04:b7:84:96:75:ae:83:83:bc:76:a6:36:
a7:7f:4b:7d:3c:4e:a7:56:da:8c:f1:18:34:d4:97:
c7:0a:88:09:2b:09:ec:1c:c6:e1:00:19:de:51:5e:
52:ea:7e:1f:28:a3:cf:1c:2a:ed:09:1d:14:57:51:
c6:48:6f:f6:33:7e:0c:50:4c:78:57:1a:de:3a:e5:
45:25:47:9c:2d:39:b0:e1:5c:0d:b5:10:d2:d1:80:
dd:1a:d6:c1:9f:ad:a8:3e:2e:13:e0:c1:bb:47:0b:
c0:f2:39:cc:ef:f1:56:25:13:ca:e9:00:21:07:7b:
49:30:86:a5:d3:9f:5a:7b:d4:4f:8a:20:f5:b7:ac:
7c:a2:f4:8e:07:b1:f9:a9:b4:ed:f3:d3:9f:c6:36:
5e:f8:ba:d8:45:d5:18:00:76:4b:22:df:aa:95:ae:
0b:e7:6e:71:5e:c2:f1:41:79:5a:5f:23:45:7a:9e:
62:9c:98:2d:30:9c:cf:66:fd:21:35:2e:36:c4:55:
9b:b7:e7:a7:36:1e:a0:75:92:2d:4b:2e:59:a7:6c:
ee:44:c6:d0:21:8e:f6:e6:fe:e4:38:ed:7e:f3:bb:
db:ca:4e:4d:53:64:f4:38:ef:ae:58:c7:de:59:b1:
cd:98:cd:9f:4e:44:5a:73:26:5a:92:42:36:b9:1a:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:22:13:9E:2D:6A:71:3E:09:6D:A7:65:71:DC:ED:50:34:DC:97
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/w44iE54tanE-CW2nZXHc7VA03Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.100.0/22
Signature Algorithm: sha256WithRSAEncryption
75:41:35:0e:45:70:59:0b:e8:ed:65:15:3d:89:80:34:80:8d:
26:c5:15:69:3d:fc:28:40:5a:35:cc:2d:c2:f5:4d:4f:9b:a9:
fa:5b:c6:a2:0a:01:7a:9f:b1:60:83:e4:c4:f4:19:de:35:c5:
a6:63:d4:3c:f9:7a:b8:eb:16:c7:1a:b6:8d:2f:84:7e:de:e5:
42:6e:5c:e4:c4:0e:0d:1a:3c:33:16:cc:df:32:1d:56:ea:37:
5b:d0:00:34:8d:bf:a8:eb:50:cf:ab:d3:d3:5a:f0:e5:65:a4:
89:2e:85:55:02:f8:80:5c:19:3e:03:57:21:1c:ea:7c:18:9e:
ef:10:45:11:21:04:cf:aa:6a:78:1b:39:a4:7b:71:34:55:59:
10:0a:58:09:62:3f:1b:6f:aa:5a:4c:16:b7:b2:ff:c9:7d:82:
20:4d:8a:ae:42:9b:e1:da:b1:da:ff:c1:5f:53:83:12:2f:63:
64:73:0c:79:7b:63:42:60:4a:44:71:8b:16:b0:eb:c0:16:5d:
e7:7c:63:e9:ef:fe:66:29:70:83:52:8c:5f:ea:62:ba:56:66:
7f:c8:6a:2c:66:c9:e2:bb:35:1b:32:51:c9:82:8c:17:a7:94:
e4:5c:e5:83:ad:e6:5e:4a:81:41:5d:6e:e0:e9:e3:26:54:cc:
07:c8:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:18 2025 by rpki-client