Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa
File: l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa (raw, json)
Hash identifier: XRL5lF6FLcxPMQGBGXTsAv/iBMTuF7JmU79LD3EK0GI=
Subject key identifier: 97:FC:A3:D0:F6:9E:2A:5E:99:29:0D:77:0B:E3:58:FC:19:5B:5B:3D
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 01856DC1A3E7FF633C5371939C0925293A4F
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa
Signing time: Sun 01 Jan 2023 14:34:44 +0000
ROA not before: Sun 01 Jan 2023 14:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212745
IP address blocks: 45.81.228.0/22 maxlen: 22
2a0e:6080::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a3:e7:ff:63:3c:53:71:93:9c:09:25:29:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jan 1 14:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97fca3d0f69e2a5e99290d770be358fc195b5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:7f:1d:a8:b6:e3:1c:23:de:34:c3:b5:d3:
10:8f:64:3d:45:28:34:43:04:d3:ee:53:87:74:30:
f5:4a:f4:2b:82:fa:7e:21:20:d2:fc:fc:5a:09:a5:
c5:f3:49:23:56:b4:4c:11:9c:9b:4b:ed:55:62:86:
95:38:11:b9:93:c7:45:d3:ef:82:46:19:02:58:76:
1a:8a:14:b4:a9:b9:a6:34:ec:08:ce:de:18:9b:bb:
f1:93:4a:eb:87:0c:6a:fa:4a:c8:ec:00:97:69:8b:
ef:3b:fc:eb:fb:4b:5f:1d:80:d7:5d:46:5d:93:5a:
a9:ef:58:ec:a2:c9:37:36:72:fe:59:0b:34:6b:57:
01:2e:05:88:10:fb:77:2c:69:b9:89:58:bf:7d:ce:
36:f3:d1:4e:be:1d:cc:c9:f8:47:6e:7c:42:62:ea:
95:f6:e8:71:d7:79:bd:c8:a2:3c:10:fb:49:d9:06:
4a:3c:9b:79:71:a0:35:e0:ec:d8:20:62:8e:ba:99:
84:b3:cf:ec:49:4b:a4:eb:f1:16:d8:14:de:4d:6f:
ce:79:2e:9c:86:3d:4e:36:bc:4f:ca:44:c5:16:14:
fe:7a:2a:ee:0b:cb:72:d2:31:00:89:eb:74:49:0a:
77:c3:f2:7a:4b:55:27:a1:0a:e4:9b:3f:69:b7:c0:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:A3:D0:F6:9E:2A:5E:99:29:0D:77:0B:E3:58:FC:19:5B:5B:3D
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/48
Signature Algorithm: sha256WithRSAEncryption
7d:93:53:33:b3:4c:0e:79:d9:01:6d:4e:22:b2:6e:42:6e:e1:
a9:b7:95:3e:6e:35:80:64:dd:34:ac:68:6f:2e:d3:04:61:f6:
78:f4:7e:00:d9:57:c0:58:d6:f1:eb:fa:60:4f:03:9d:ce:21:
be:2c:96:cc:f1:75:ab:6b:f5:05:86:5b:51:c2:0c:2b:cd:84:
1d:6b:8f:62:42:0c:f0:7e:7a:74:d7:66:a8:10:88:99:5e:57:
83:2a:4e:a4:da:01:60:13:cb:0f:34:77:12:7c:49:62:b3:aa:
58:cf:3f:58:5f:00:89:b5:97:a6:c4:84:63:bf:a5:84:61:59:
97:cf:7e:16:8a:d7:d1:b1:3a:d9:91:50:0e:25:ed:81:15:1e:
f2:d1:62:d9:8c:86:ad:b1:37:a4:d5:c4:26:99:d2:e1:ba:64:
78:a8:f9:8b:14:3e:f3:94:a6:0f:80:38:37:8d:2b:c9:bc:cc:
83:fd:f4:5e:b1:e6:84:5b:f5:78:ca:2a:e5:48:5f:89:7c:5a:
7f:4b:a5:7f:4a:7e:12:13:3e:c6:c6:85:61:3e:61:99:29:68:
2b:03:4e:81:bb:e4:f4:88:db:e0:65:59:94:c6:c2:95:22:05:
f9:d5:2a:56:af:46:b4:7f:be:66:3b:13:05:db:90:63:46:aa:
57:f0:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:56 2025 by rpki-client