Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/e0tcXkT7bS5YIK9OKfsrFLkJYLI.roa
File: e0tcXkT7bS5YIK9OKfsrFLkJYLI.roa (raw, json)
Hash identifier: wA3b9r6B3iVlvByfa+72Qx3lGczTao2xourZVisOqFg=
Subject key identifier: 7B:4B:5C:5E:44:FB:6D:2E:58:20:AF:4E:29:FB:2B:14:B9:09:60:B2
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0112CDE8
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/e0tcXkT7bS5YIK9OKfsrFLkJYLI.roa
Signing time: Sat 21 May 2022 21:40:28 +0000
ROA not before: Sat 21 May 2022 21:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272611
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18009576 (0x112cde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: May 21 21:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b4b5c5e44fb6d2e5820af4e29fb2b14b90960b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:3b:aa:61:84:4c:20:57:cc:30:1f:04:58:
23:f4:75:da:8d:90:39:ea:ef:a1:e0:f1:1d:08:72:
1f:62:b5:10:0e:81:0e:cc:98:a8:84:f9:dd:66:24:
e4:83:f5:c8:e6:67:40:1d:3d:e0:51:c5:a4:c3:47:
29:5d:19:ff:fa:47:3a:43:2b:a4:88:87:0f:f9:01:
fc:8d:07:15:a1:2f:c8:3e:d8:31:6e:aa:d9:cc:2a:
24:f7:b1:48:37:a8:be:05:0a:cf:f9:da:a6:6f:33:
be:61:d8:b3:7e:1f:e8:c7:81:ce:70:00:c4:87:b6:
c5:1d:f3:bd:df:e7:42:28:43:7f:8f:4c:17:7e:8c:
3a:98:e3:b6:06:f4:c7:dc:d7:50:6e:05:4a:77:76:
d8:41:8d:d6:21:42:c9:7b:85:fc:2f:77:48:87:d3:
53:92:b7:ef:d1:83:c3:83:5f:76:5c:f8:48:6f:78:
6d:d6:6f:dd:50:18:ce:50:7e:9b:54:1a:fd:ef:54:
27:b5:ec:af:ae:7f:cc:6a:a3:cf:ac:79:ec:d3:69:
5a:15:96:68:60:d6:e6:c2:5e:0d:74:69:b8:01:eb:
02:5b:22:ab:4e:f6:fd:60:1d:3c:49:01:d2:26:ec:
c4:76:95:6f:ad:a6:09:e8:9c:5a:91:36:93:3e:9b:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:5C:5E:44:FB:6D:2E:58:20:AF:4E:29:FB:2B:14:B9:09:60:B2
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/e0tcXkT7bS5YIK9OKfsrFLkJYLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
03:80:4f:a3:8a:7c:4d:42:65:f8:34:00:3c:d9:80:c9:ec:83:
0c:ff:8b:38:ab:50:13:93:8b:9c:02:68:6b:af:cd:b9:e1:59:
29:45:e6:e3:f3:2c:5a:29:b8:73:b7:c8:dc:d4:15:4d:d9:91:
27:50:5a:e7:98:12:d5:99:45:1d:57:32:84:6d:53:d0:d1:84:
78:f9:6b:a2:83:ad:67:5b:b3:93:7f:0a:59:f6:78:d4:52:bd:
b4:db:8d:d9:a4:58:d5:6a:d4:d9:0f:b6:47:51:c6:0d:b6:ee:
40:ea:8d:4a:c0:66:c0:45:2a:95:49:18:61:f7:f6:d9:15:fa:
0f:82:03:58:b3:36:32:42:fe:23:99:78:be:b7:13:e6:fd:14:
81:51:d1:af:4a:2e:d9:39:5b:ca:f9:26:30:c6:4f:c4:f8:00:
5d:2e:d3:b2:d5:a7:2f:6f:2c:cb:35:ad:1e:63:97:23:f3:bc:
fb:04:f3:91:59:55:29:29:6a:ab:5b:08:28:fd:00:30:58:00:
87:6d:dc:a9:d2:03:a9:84:c0:e4:e5:42:e5:fa:f5:3c:37:71:
9a:41:62:7f:30:fe:3f:2a:be:96:c2:65:64:20:76:2f:3d:48:
f5:a4:17:18:f5:3a:29:33:b4:5a:48:38:59:e8:a8:ff:4d:04:
ea:1c:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:32 2025 by rpki-client