Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/2MtG7N6XKraTh7sAzzAswDnyl60.roa
File: 2MtG7N6XKraTh7sAzzAswDnyl60.roa (raw, json)
Hash identifier: b+okECXIU5bWZwhEP3fKpE5DiQIoqZDZsqK6fp+VWV0=
Subject key identifier: D8:CB:46:EC:DE:97:2A:B6:93:87:BB:00:CF:30:2C:C0:39:F2:97:AD
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0624E647
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/2MtG7N6XKraTh7sAzzAswDnyl60.roa
Signing time: Sat 01 Jan 2022 15:04:43 +0000
ROA not before: Sat 01 Jan 2022 15:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 176.119.217.0/24 maxlen: 24
45.117.232.0/22 maxlen: 22
2a07:9340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103081543 (0x624e647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Jan 1 15:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8cb46ecde972ab69387bb00cf302cc039f297ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:41:0f:7d:fe:3e:fa:ef:30:b2:1a:9c:30:
72:85:7b:54:2f:cf:f7:48:73:42:6d:4d:da:19:10:
fd:1f:a4:a9:76:1c:4a:d6:8b:f4:40:31:38:9d:a6:
fb:52:2d:e6:51:d3:a6:c5:79:d9:01:f5:fd:ce:fe:
cd:68:45:60:c5:22:95:62:0f:86:82:f6:0e:2f:f5:
3c:b1:a6:5e:27:5a:e7:ca:4f:7e:d5:b0:f2:af:a6:
5c:56:25:82:7c:22:92:a3:51:56:a6:f6:dd:77:62:
7c:3a:d4:21:4b:bb:a9:35:82:3a:97:d0:80:f3:dd:
cd:47:e4:e0:6e:5b:42:aa:7b:ed:6a:6c:ed:bb:da:
53:ea:33:f8:e3:08:55:b9:4c:c8:28:8d:a4:f3:e7:
b3:f1:40:b4:79:ae:d2:d9:63:37:54:77:35:46:fd:
2a:4a:eb:86:63:62:82:ba:65:31:59:cd:c1:07:f4:
8b:32:d0:2e:80:5c:0e:8f:01:ef:20:b0:2a:a7:4b:
fd:f3:74:d0:64:c8:29:57:52:c2:6f:2b:13:0b:a1:
00:9c:e8:af:9f:6d:31:2b:8a:b0:de:11:e6:4e:40:
fd:49:c8:9c:5a:d0:88:90:fa:4e:78:6f:a9:5a:f3:
34:9b:bc:7c:78:1b:d8:9a:d7:36:51:50:f3:11:11:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:46:EC:DE:97:2A:B6:93:87:BB:00:CF:30:2C:C0:39:F2:97:AD
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/2MtG7N6XKraTh7sAzzAswDnyl60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.232.0/22
176.119.217.0/24
IPv6:
2a07:9340::/32
Signature Algorithm: sha256WithRSAEncryption
4e:bd:26:6f:d6:04:12:0f:81:29:93:d9:a1:18:fc:c8:36:d7:
74:2c:7b:31:80:03:70:85:fd:8d:df:42:76:b0:58:45:ad:cf:
47:09:f2:6a:f8:90:8e:32:10:6a:cc:5e:54:a3:0d:ec:f7:df:
62:b0:10:f4:09:45:61:de:97:2b:be:fe:86:fb:08:ff:cf:31:
71:51:69:99:e8:71:19:da:47:a9:ca:6f:a7:ca:12:f2:74:8c:
6e:67:41:72:35:c2:11:9e:e5:dd:11:62:55:87:4c:cc:80:a6:
90:13:d3:73:7e:8d:13:4e:b3:9b:f7:95:ba:4c:29:c6:c2:7f:
c0:8c:6c:71:90:f3:83:06:cf:84:bf:31:44:36:15:2a:c3:79:
f2:a6:bd:ca:b0:d0:25:03:41:d1:6a:be:2c:68:be:d8:83:e9:
a9:42:c4:c5:98:3f:1f:ca:87:0b:b3:20:cd:5b:16:6a:6f:98:
c2:7b:8d:fc:94:33:8a:e9:0b:9c:bc:be:85:f3:91:1c:f7:61:
2d:53:49:97:be:b4:29:e9:4f:e6:f8:39:5e:d4:a1:3a:4b:3a:
8a:24:80:d3:ef:df:3b:a0:64:13:b2:f3:fc:7b:1a:bf:47:f5:
1a:65:73:a0:91:55:c0:42:36:9b:3c:af:42:58:a3:e3:79:fc:
61:f5:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:36 2025 by rpki-client