Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6eFMEV0qS7xYOgj29iN5MOHbXCo.roa
File: 6eFMEV0qS7xYOgj29iN5MOHbXCo.roa (raw, json)
Hash identifier: NirBU+ueimE5dZKY4nV2ChyVSczGccx7w4SNFqCzu2I=
Subject key identifier: E9:E1:4C:11:5D:2A:4B:BC:58:3A:08:F6:F6:23:79:30:E1:DB:5C:2A
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01847EFCC4C6A0CA3AEE4BC4B812BB8D1E71
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6eFMEV0qS7xYOgj29iN5MOHbXCo.roa
Signing time: Wed 16 Nov 2022 05:50:04 +0000
ROA not before: Wed 16 Nov 2022 05:50:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.139.231.0/24 maxlen: 24
45.139.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:c4:c6:a0:ca:3a:ee:4b:c4:b8:12:bb:8d:1e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 16 05:50:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9e14c115d2a4bbc583a08f6f6237930e1db5c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:13:27:af:c6:ec:37:0c:70:4f:3d:56:66:
f3:f3:19:11:36:53:d7:8e:cf:34:20:ca:31:a6:38:
51:20:2d:1d:db:78:2b:d4:fb:b6:6e:72:39:1a:4b:
93:9f:9c:16:44:ce:e2:0a:3b:08:ab:8f:5d:53:cc:
bc:22:e0:06:66:9c:c9:57:f0:21:a6:4b:2f:66:b8:
9c:b9:0f:af:38:23:0e:b0:f9:a9:a4:40:ba:d0:80:
71:56:50:44:fc:ed:49:93:b2:df:1a:12:ed:0c:4d:
31:84:be:c0:94:9e:cc:e8:0a:2b:5a:5e:bf:a9:bc:
7c:4b:9b:a6:27:b5:42:6a:e0:ec:33:3a:68:78:12:
9d:f0:23:b0:30:dc:11:07:c5:e2:8f:c9:92:61:6c:
0a:a7:d4:c9:70:2d:aa:e2:56:1b:e9:39:20:45:18:
d6:6e:9c:10:7f:3e:c2:01:02:86:23:e8:a5:4c:2d:
d7:c6:7b:bd:8f:1c:bc:c2:6e:3c:20:df:14:8f:90:
29:b2:82:a2:9e:cd:8c:d5:8e:63:82:52:54:8c:51:
8f:57:b0:66:6c:85:5b:0d:6d:97:47:78:90:31:f7:
25:51:ab:9c:61:b7:4b:33:3f:01:fc:1d:3c:fa:72:
3b:42:61:21:16:49:ab:f1:ee:cd:7a:23:4d:bb:f3:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:4C:11:5D:2A:4B:BC:58:3A:08:F6:F6:23:79:30:E1:DB:5C:2A
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6eFMEV0qS7xYOgj29iN5MOHbXCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.229.0/24
45.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
14:03:b6:cb:cd:70:52:f6:2b:23:16:4e:6e:1e:04:3b:a9:f6:
67:55:8b:f9:5f:a1:db:f1:d1:a2:e4:9a:b1:60:6f:da:70:86:
9b:58:0d:a8:d7:9d:b9:dd:95:60:d8:cf:71:45:bf:87:57:43:
7e:77:36:9e:e4:d8:36:04:75:e8:55:50:1a:ce:bb:2f:29:d8:
bc:b9:03:74:63:6d:ea:70:d9:6a:fa:8a:a4:38:c9:5b:cb:d4:
f7:9f:9b:15:ac:3c:33:f5:c5:1a:18:30:38:a3:c2:d3:c5:ba:
74:cc:88:8e:d4:3e:89:33:37:cb:12:87:82:f0:d5:94:68:79:
eb:dd:37:00:3e:21:fc:ac:73:7b:5f:3f:56:c0:f6:71:56:2f:
8f:3b:f3:ac:dd:1d:41:51:8d:42:77:b1:04:df:62:71:3c:5b:
69:2c:10:b9:93:9f:f9:a9:db:ee:ec:a2:54:62:ab:cf:5c:7e:
04:d6:e6:c4:2c:5f:79:82:94:0a:16:25:1f:dd:30:49:14:31:
a0:58:98:9d:40:0d:11:52:fd:95:cb:0b:0d:48:e8:6b:3a:06:
64:35:73:96:93:03:b7:d8:0c:8e:14:83:a4:3b:2e:1e:23:1c:
22:55:59:56:c9:d0:21:d8:a6:eb:ad:d8:4e:f1:01:ee:5f:04:
8e:50:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:01 2025 by rpki-client