Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/AX-n7HhkHxvDPL10YmyupjkkniY.roa
File: AX-n7HhkHxvDPL10YmyupjkkniY.roa (raw, json)
Hash identifier: e7aazYsABy4fL8XFHRDJsVwByMS3enuQ4PElkso0LCk=
Subject key identifier: 01:7F:A7:EC:78:64:1F:1B:C3:3C:BD:74:62:6C:AE:A6:39:24:9E:26
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 01857315BC6210608576F82BF6B8F3AC4865
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/AX-n7HhkHxvDPL10YmyupjkkniY.roa
Signing time: Mon 02 Jan 2023 15:24:42 +0000
ROA not before: Mon 02 Jan 2023 15:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 45.13.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:bc:62:10:60:85:76:f8:2b:f6:b8:f3:ac:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jan 2 15:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=017fa7ec78641f1bc33cbd74626caea639249e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:dc:77:88:71:ff:a1:44:8b:a4:3d:fb:82:
03:33:b0:05:1a:ac:07:8f:6d:43:df:7f:2a:4f:65:
e1:89:c5:69:24:2e:94:b6:e1:9d:cf:48:e0:ca:85:
31:6c:57:bf:46:2f:09:b0:31:45:46:c1:a8:c8:be:
a7:a6:37:8d:24:a0:d0:8c:a4:3a:80:9a:cc:0b:6c:
b3:0d:c3:e1:a5:fc:8c:10:a8:1f:25:4e:c8:5b:c8:
e8:cd:d5:4c:a7:03:05:dc:00:ed:f3:d9:76:89:ad:
f9:18:3f:3f:dd:c3:5f:59:8e:60:58:6d:9b:ca:98:
3c:cc:57:b6:0a:53:c2:a2:a4:b5:6f:d6:5d:9e:82:
df:40:6b:8d:e5:b6:61:57:7d:4f:81:b9:59:0c:cd:
05:28:7b:70:45:9f:f4:4b:3f:36:70:5b:10:5a:59:
55:62:0a:fb:50:3a:4c:37:aa:24:8b:aa:15:ee:7c:
8f:6f:5f:b7:84:ac:93:a7:bc:7b:2f:da:39:2c:f6:
0a:5a:6a:38:ec:4f:00:d9:c1:e1:49:cb:a9:34:02:
3d:da:e0:d9:88:ca:93:7a:3d:d2:69:e7:ed:b2:97:
b9:7a:01:63:94:62:f8:b0:80:c9:79:6c:6a:63:3f:
c0:79:b8:52:30:c7:d1:56:92:84:b0:ec:cc:ee:27:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:A7:EC:78:64:1F:1B:C3:3C:BD:74:62:6C:AE:A6:39:24:9E:26
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/AX-n7HhkHxvDPL10YmyupjkkniY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.12.0/22
Signature Algorithm: sha256WithRSAEncryption
17:14:88:91:1b:c9:8b:b1:e6:00:15:09:ac:99:b0:3f:ee:2e:
5e:a1:4c:20:04:a1:97:12:0f:b0:5c:b2:e7:c0:13:c2:52:f8:
5b:77:f2:ce:db:7c:9e:e6:bc:ad:4a:a6:64:8a:ce:96:eb:71:
c1:36:3c:07:6e:15:18:5d:4a:c6:b3:16:a4:b2:85:2d:2f:e7:
8d:97:36:09:8e:90:2c:99:96:99:fd:d4:18:fd:0a:e8:5f:51:
54:47:ed:ec:41:26:02:d2:19:30:43:21:fc:7c:19:6d:40:8b:
22:6d:c5:24:7a:49:42:bb:62:5e:61:a8:1d:c9:cc:e7:03:15:
ab:5c:3b:87:74:aa:66:25:e1:28:a1:9c:40:b4:98:11:ad:de:
31:05:88:c6:c6:3e:0d:ef:be:50:1f:d0:93:b7:81:cb:73:a0:
1c:1d:38:f4:79:47:99:1a:f0:3e:c9:ec:6f:f2:cf:e7:07:99:
8f:7e:99:12:83:1b:1f:35:be:72:8c:61:bd:59:0a:93:05:e7:
6a:f8:fc:4a:f8:aa:de:e3:f7:40:bc:f9:40:6f:ee:8d:3d:08:
c2:cc:cb:9e:9e:41:dc:93:60:e0:cc:cd:b1:71:26:e6:d0:4b:
fe:8c:a5:05:ca:0c:0f:73:06:cd:8c:b8:21:0d:54:af:0d:aa:
51:bf:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:18 2025 by rpki-client