Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CadroqtRSI9NlE1FMGfieBIm-EI.roa
File: CadroqtRSI9NlE1FMGfieBIm-EI.roa (raw, json)
Hash identifier: hLeUeiEzCNJ3WyWRRfF1Ds5Y/HIq/c+V/WMYfyBqEnc=
Subject key identifier: 09:A7:6B:A2:AB:51:48:8F:4D:94:4D:45:30:67:E2:78:12:26:F8:42
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0186F47FE21B62B057B695A09919FAB53FEE
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CadroqtRSI9NlE1FMGfieBIm-EI.roa
Signing time: Sat 18 Mar 2023 11:34:27 +0000
ROA not before: Sat 18 Mar 2023 11:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208555
IP address blocks: 45.129.36.0/22 maxlen: 22
45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
45.129.38.0/23 maxlen: 23
185.126.202.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/24 maxlen: 24
185.53.140.0/24 maxlen: 24
185.53.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f4:7f:e2:1b:62:b0:57:b6:95:a0:99:19:fa:b5:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Mar 18 11:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09a76ba2ab51488f4d944d453067e2781226f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:7b:e4:61:51:d1:42:96:c5:8a:21:00:8d:
85:98:df:b3:88:19:8e:18:df:7f:dd:00:d1:be:e6:
bc:cb:86:29:a3:4d:e4:ca:af:8a:6d:47:28:50:0a:
8d:e5:7e:54:a2:82:1b:5c:d4:37:3f:21:70:8c:ec:
79:46:74:a3:08:e6:31:84:c6:b4:e1:71:a6:6d:42:
78:98:bd:36:c0:32:da:bc:f4:74:a4:71:7d:ee:71:
37:73:f5:99:e3:32:95:70:0c:7e:93:17:d1:d6:cf:
7b:ec:77:25:3f:25:b5:d2:08:4b:c4:47:93:10:1b:
9a:cb:bb:27:db:46:2e:5b:ab:6d:49:66:98:9b:e1:
47:82:e4:6b:23:d1:77:a7:32:f3:eb:33:4d:6f:dd:
75:12:22:4d:de:47:94:1f:d7:c8:46:3b:84:a7:c4:
62:53:10:05:60:87:0d:b3:c2:9d:a3:a4:53:30:7a:
bb:01:8a:75:cb:ac:4d:80:f3:7f:6e:37:ff:c7:08:
4b:4f:87:04:36:75:ce:86:f1:44:5a:d1:aa:b7:63:
ca:a6:d1:71:93:74:86:bc:43:f9:ce:dd:ca:fb:89:
81:b5:fe:a0:3f:63:f4:7c:e3:d9:d9:62:36:28:82:
8d:f2:d1:4e:33:63:90:84:67:e3:c4:c0:b0:d0:b1:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:6B:A2:AB:51:48:8F:4D:94:4D:45:30:67:E2:78:12:26:F8:42
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CadroqtRSI9NlE1FMGfieBIm-EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
185.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2a:92:a7:7c:8c:0c:77:d2:5a:87:c8:dc:97:ad:46:cd:02:
a3:4d:59:a5:5b:18:4f:84:35:91:35:ec:06:7f:cb:f6:e3:fb:
c0:74:6a:89:71:bc:06:61:74:3b:02:ed:64:cd:d9:9e:be:a4:
e9:ce:69:b9:87:99:87:70:83:0d:55:b4:f9:65:5c:ef:5f:c2:
f9:d3:92:cc:ff:df:f1:89:a0:56:af:8e:96:fd:1c:ee:5f:e1:
1b:0f:94:a6:95:eb:4e:76:12:84:c1:3a:a2:9d:bb:36:8b:03:
c5:d7:bb:a2:89:fb:18:0b:eb:43:a7:e0:d4:66:3f:d1:76:b0:
d5:5d:9e:0e:01:87:67:47:1e:ce:a0:e8:0e:62:d1:cc:d8:24:
a5:32:c0:ef:e5:3d:89:5d:9e:b6:a0:3b:73:1f:87:78:08:ca:
31:72:e6:c2:28:48:61:8e:0e:c2:67:dd:40:3c:5a:07:0a:7d:
9e:2f:99:b1:33:4e:9c:47:b6:e4:da:0c:1b:94:54:5d:db:65:
b4:f8:d8:d2:b8:f0:1d:c2:7d:a9:3a:79:38:c1:18:8f:a2:70:
bb:12:a5:3a:a2:d8:a7:65:e2:10:c6:ba:a9:33:b9:d1:48:16:
bf:5d:18:32:b6:7c:be:90:41:1c:79:05:ca:94:87:30:ec:c2:
51:37:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:05 2025 by rpki-client