Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/LJatn1eJt-NWNaCCoCQizjZK4_Q.roa
File: LJatn1eJt-NWNaCCoCQizjZK4_Q.roa (raw, json)
Hash identifier: HsKspOHTM7bR6rLSSl8GSgD5y77mH0GBaMY+UJd9kcU=
Subject key identifier: 2C:96:AD:9F:57:89:B7:E3:56:35:A0:82:A0:24:22:CE:36:4A:E3:F4
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01856D4ADEAE6DBDCB029C2839AB1EFCA5C6
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/LJatn1eJt-NWNaCCoCQizjZK4_Q.roa
Signing time: Sun 01 Jan 2023 12:25:01 +0000
ROA not before: Sun 01 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.143.11.0/24 maxlen: 24
45.143.9.0/24 maxlen: 24
94.143.225.0/24 maxlen: 24
45.143.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:de:ae:6d:bd:cb:02:9c:28:39:ab:1e:fc:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c96ad9f5789b7e35635a082a02422ce364ae3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:15:f0:de:5b:d2:47:ce:46:55:6e:49:46:
71:0b:f2:a5:f5:ec:d0:cf:c1:c1:29:f0:2c:1f:3f:
84:24:c7:c5:96:72:48:ce:dc:6a:e4:0e:ab:60:09:
f8:01:df:db:87:e6:05:34:85:12:20:72:3a:2a:78:
4f:c7:c5:2a:f9:e3:17:5f:d8:5f:99:68:a4:c9:f1:
fe:2a:57:ef:9e:f7:7d:fa:90:66:32:02:00:39:d9:
e1:2b:85:79:d4:65:15:57:b2:44:48:be:7a:66:b0:
ea:36:c3:93:76:d1:b1:22:58:4d:59:9b:4b:ae:41:
98:d2:6a:c8:78:74:20:0a:ce:8b:22:96:9a:b3:c2:
54:d7:27:87:87:e5:fb:d1:fd:00:0e:72:61:d6:f6:
8d:9e:c9:92:96:82:2e:25:bf:68:87:dc:98:d6:ae:
3d:6c:8e:6e:e8:64:ac:2a:f8:50:2a:a8:d5:be:83:
31:48:fa:5e:a8:1b:41:76:0d:3f:0d:55:2e:c0:82:
ae:9a:4f:0d:ae:46:78:44:5a:81:88:59:25:1a:a4:
74:5c:83:7c:8c:70:90:3b:d6:5e:27:fb:c4:63:7a:
fb:d5:0c:14:70:02:02:6f:c1:c7:2c:cc:d4:21:9b:
7e:44:f3:6a:41:3f:8e:ac:4c:1c:d9:87:67:e2:97:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:AD:9F:57:89:B7:E3:56:35:A0:82:A0:24:22:CE:36:4A:E3:F4
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/LJatn1eJt-NWNaCCoCQizjZK4_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0-45.143.11.255
94.143.225.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5a:3b:3e:f1:81:53:ee:a0:07:a4:26:49:9c:2f:b3:e4:83:
05:f8:0d:2e:61:b2:33:6f:25:ef:05:8e:ab:3c:1f:12:8f:91:
6e:3c:f3:07:16:40:7d:a9:2e:df:74:81:1b:3e:ca:56:8b:5e:
be:f5:21:54:c0:c1:d1:a1:09:d0:6a:d4:3c:41:0c:ee:da:67:
3a:ad:4f:87:7e:99:bb:da:4a:25:c8:e4:72:b5:88:e3:07:b8:
8d:c0:f9:39:64:fe:40:84:9d:8c:21:f5:f4:62:a7:7e:75:74:
b1:47:96:83:4a:90:29:67:ac:44:79:ca:a9:fc:8e:49:d6:16:
74:aa:74:69:0a:e1:39:5d:7b:aa:ea:3d:c2:71:00:a5:db:56:
c6:48:46:7f:52:06:07:50:7d:d7:63:4a:46:58:7f:ad:5f:88:
5c:2d:b4:05:9d:03:e9:6c:3a:d3:5a:19:17:02:f5:87:c7:d1:
5c:46:ae:30:ab:8e:b1:b3:6c:75:2a:13:71:4c:e5:40:e5:89:
ac:11:df:2b:c2:8e:8a:57:a0:e2:ad:58:bb:48:c3:29:be:e9:
e5:86:20:26:84:f8:47:28:c0:b5:76:2d:d7:94:f4:86:cb:d7:
9b:cc:c2:ab:25:48:a6:41:c2:1e:61:cd:f6:13:5d:0c:11:fe:
e6:0a:d5:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:49 2025 by rpki-client