Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/0EF0w2NbMfHzmmpUPn1fINLNySw.roa
File: 0EF0w2NbMfHzmmpUPn1fINLNySw.roa (raw, json)
Hash identifier: 1covrfKdsQDvSSveQmFjAwXF5RbyHlmsUPavFCbXOh0=
Subject key identifier: D0:41:74:C3:63:5B:31:F1:F3:9A:6A:54:3E:7D:5F:20:D2:CD:C9:2C
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0188B6772C8F1935E3215CDCE52C3F3FC092
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/0EF0w2NbMfHzmmpUPn1fINLNySw.roa
Signing time: Tue 13 Jun 2023 20:34:03 +0000
ROA not before: Tue 13 Jun 2023 20:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 45.155.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:77:2c:8f:19:35:e3:21:5c:dc:e5:2c:3f:3f:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jun 13 20:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04174c3635b31f1f39a6a543e7d5f20d2cdc92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:a0:04:2a:90:1b:3e:0b:07:2d:3a:73:3a:
5b:40:34:6f:0f:de:b4:cb:cd:3a:b3:62:64:54:c4:
d1:9b:7b:00:b3:04:49:f3:90:d2:43:0e:73:1b:c0:
5a:ec:20:f6:08:b0:48:5b:8a:05:60:56:e4:75:65:
6e:e9:12:68:81:13:32:2d:0e:a0:f4:78:ee:5e:74:
b3:03:6d:45:ba:82:de:67:64:da:99:94:64:9b:95:
3d:be:22:d1:aa:a8:66:5d:2f:b5:72:63:5d:84:e3:
ac:0d:1a:eb:e8:c3:a9:f3:96:38:65:d0:ee:3d:7a:
ff:ca:e8:5b:44:16:d4:8f:d4:e5:c1:cd:cc:bf:f2:
0c:94:fd:d2:fa:d7:6b:6e:e0:18:7f:bb:1f:73:98:
e6:aa:28:94:42:23:bf:95:df:24:ca:88:71:31:c9:
77:0a:22:f2:bc:68:1d:d2:fc:f4:ac:36:8c:e4:ef:
c3:f0:45:c8:1c:de:0a:64:dd:76:c3:b5:73:07:04:
14:52:72:54:91:2e:df:7a:cf:4f:2a:38:7c:72:81:
fe:95:e9:cf:b2:ea:55:22:df:68:a0:5a:0b:f0:0c:
91:68:60:32:d7:86:a1:58:f4:d7:32:17:4f:27:74:
28:d8:af:9d:b1:84:89:3a:44:bd:ce:41:f0:db:1a:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:74:C3:63:5B:31:F1:F3:9A:6A:54:3E:7D:5F:20:D2:CD:C9:2C
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/0EF0w2NbMfHzmmpUPn1fINLNySw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ff:92:0b:1f:90:20:6a:ae:7a:6f:70:dc:c1:0e:06:19:34:
7e:c2:eb:38:f2:0d:d7:be:4c:06:6f:96:33:4d:7c:11:77:2c:
b2:54:90:c0:67:24:0a:7c:eb:57:06:99:d1:23:21:6d:a0:a2:
18:62:0c:71:fa:63:28:7d:08:4e:c1:17:cb:e7:72:c6:cc:6c:
c4:ec:5b:d5:38:55:a1:1f:75:52:71:e5:60:d0:9f:d8:ad:ba:
74:b6:06:17:8a:60:f1:5d:17:ca:eb:51:95:b6:91:08:d3:f0:
e5:1a:a5:47:98:a1:0e:4c:7d:d2:49:3b:93:96:69:f7:d6:01:
ae:5c:78:cb:eb:02:58:e3:b6:cb:70:e8:e7:89:16:f2:dc:03:
b3:5a:49:66:e5:8d:3c:22:bf:c5:d7:f5:94:06:f3:81:d0:aa:
92:3e:8f:cf:8b:e7:72:1b:ed:97:8d:32:ae:ac:bd:c5:35:38:
dc:e8:fa:22:e7:3a:13:54:30:fb:77:4d:36:44:0c:36:e9:2b:
c7:29:b1:a4:62:e8:0b:ec:88:e9:82:96:90:38:3b:81:ad:9d:
78:96:07:14:d5:35:59:38:d4:27:59:a4:82:f3:b8:34:31:ea:
d6:4c:f7:41:0d:3c:3f:97:2b:44:cd:57:f4:55:4e:40:b3:8c:
e9:d7:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:17 2025 by rpki-client