Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/hHx-Y6Ux8aHXBLYX8piVx3YzxrM.roa
File: hHx-Y6Ux8aHXBLYX8piVx3YzxrM.roa (raw, json)
Hash identifier: d8DDiBeBfhb5jIqVhWKrihv37eCKQYd7j7RZxdEhYLA=
Subject key identifier: 84:7C:7E:63:A5:31:F1:A1:D7:04:B6:17:F2:98:95:C7:76:33:C6:B3
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 018571E79C2BB24023E8E146293224C785C7
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/hHx-Y6Ux8aHXBLYX8piVx3YzxrM.roa
Signing time: Mon 02 Jan 2023 09:54:42 +0000
ROA not before: Mon 02 Jan 2023 09:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60398
IP address blocks: 45.142.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:9c:2b:b2:40:23:e8:e1:46:29:32:24:c7:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 2 09:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=847c7e63a531f1a1d704b617f29895c77633c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:e4:99:36:1a:61:1d:c0:0d:21:ce:40:df:
6a:6a:0c:e0:84:5e:8f:fe:c0:91:c5:ee:58:45:3b:
03:63:23:28:90:8e:9a:8e:30:74:7b:31:f7:3b:69:
95:85:a4:83:7d:ab:bc:5f:e8:66:f7:68:ae:8c:62:
41:dc:57:34:ae:2f:f6:3c:52:4f:e7:80:5d:6b:65:
e0:f6:3f:d1:ca:46:8d:93:30:b2:de:08:62:f9:2a:
3a:5d:0c:4a:4f:88:9a:66:c0:1f:9d:f4:90:66:8c:
3c:c4:ff:e3:25:be:f8:80:24:8f:dc:1c:02:ab:23:
42:83:57:9f:52:f6:8e:40:0f:b9:b4:4a:0b:e7:75:
d0:a7:75:94:73:7f:79:e2:73:0d:cf:55:a4:d5:f4:
10:80:7c:a3:ea:74:0f:41:6d:87:f4:90:16:71:d0:
70:77:c0:f0:f6:57:9d:2a:1a:b3:0c:84:a9:98:6c:
93:44:28:5d:42:c2:6e:2e:b8:60:5b:4b:63:8e:11:
08:a9:91:21:26:c1:b8:db:c5:0b:fc:6b:88:33:6c:
61:a3:54:4d:ea:ab:a4:1d:63:c5:f7:af:a5:8e:0c:
a0:2a:47:eb:3b:1f:a9:d2:54:f4:09:8f:b6:ed:a5:
b3:71:5c:ac:d7:e6:3c:dc:4c:5a:bc:74:44:a9:25:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:7E:63:A5:31:F1:A1:D7:04:B6:17:F2:98:95:C7:76:33:C6:B3
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/hHx-Y6Ux8aHXBLYX8piVx3YzxrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.138.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ae:ad:67:fc:e8:b6:e1:98:f1:f0:e2:7e:dc:f6:d6:80:c5:
de:5d:0e:5e:0a:fa:a9:ff:0a:d9:23:9c:9a:af:53:10:cf:94:
6b:85:d4:a6:8e:40:79:31:39:1b:e0:9c:3e:74:0f:bf:83:1e:
2e:b7:ea:f2:7f:59:46:17:04:23:fb:07:6a:89:92:97:91:00:
54:bf:8b:85:fc:5a:b7:0c:95:f4:59:db:44:6a:2f:78:b3:51:
4e:31:08:2e:10:8f:a7:af:26:73:a5:96:2d:81:6a:7e:7a:93:
d3:c6:b6:7f:88:29:88:04:be:ac:fd:4d:81:6b:08:17:c1:e4:
ef:be:cb:b0:3a:20:5c:6b:28:65:bc:f1:d8:81:fb:97:a5:9b:
51:07:63:01:21:59:4d:e3:34:62:9a:ef:54:f5:1d:ad:47:a6:
e0:6c:88:58:8d:b9:27:06:c6:c8:77:e0:3f:46:84:8f:c9:14:
bb:51:0e:73:85:97:39:ea:05:41:b2:a0:36:17:46:3c:e5:8d:
21:79:73:56:79:ff:0e:5d:e3:fa:fd:2a:01:72:30:44:1a:44:
0a:ba:6a:60:3d:e2:3a:68:55:02:a5:71:b0:01:63:d4:88:38:
b4:b1:69:d3:d4:fe:69:f3:93:9b:0b:d4:14:52:c8:cd:ad:c0:
e4:29:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:31 2025 by rpki-client