Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa
File: v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa (raw, json)
Hash identifier: 23igtjtCGjzktccpV2Uc8QbmXRa8oGbCo7OKXt5mfvk=
Subject key identifier: BF:E3:7B:5D:58:C1:89:B2:14:B6:83:FA:7C:48:56:50:C5:60:E0:09
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 04D83C
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa
Signing time: Sat 15 Jan 2022 10:13:14 +0000
ROA not before: Sat 15 Jan 2022 10:13:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204272
IP address blocks: 45.155.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317500 (0x4d83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Jan 15 10:13:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe37b5d58c189b214b683fa7c485650c560e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:59:82:77:88:39:b2:06:f8:74:5a:1e:a8:
92:92:b1:8f:af:81:4d:a6:69:f7:45:f9:47:82:6d:
c1:a5:f0:60:ed:e8:30:33:e9:d4:55:48:5c:27:8a:
65:70:e4:4e:f5:e7:24:b9:24:ce:f0:1d:06:01:53:
ca:08:a2:70:0a:d8:ea:58:38:d4:63:f8:b2:68:a1:
49:33:cb:b8:6e:2a:02:ee:1b:a1:3b:e1:3b:20:f5:
7a:79:ff:c6:28:e8:9b:4f:e3:41:bd:a7:d5:5f:2c:
2a:64:71:d9:c5:e9:a0:47:10:48:ef:90:86:1e:23:
e0:42:2e:46:31:d8:d5:d2:a8:40:4d:90:ef:77:9e:
41:60:4b:0a:2c:d6:f5:dc:90:67:87:75:94:8a:45:
6e:38:1e:dc:81:aa:1a:c5:5d:7d:cd:90:a7:02:cf:
ef:79:13:ee:40:21:98:74:39:81:95:b4:a9:86:21:
54:05:9b:29:c3:11:9e:23:bf:c8:b6:38:e8:b8:8b:
b0:e5:bf:54:eb:89:c1:28:e4:71:94:b8:90:6e:f3:
ce:34:cf:d1:b5:ea:48:8c:9a:b8:c0:b0:67:4d:f2:
6f:cf:6c:0f:54:ca:da:64:06:e9:32:6a:82:1e:91:
e1:c8:43:02:c3:53:52:f5:38:99:9a:dc:9e:e1:83:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E3:7B:5D:58:C1:89:B2:14:B6:83:FA:7C:48:56:50:C5:60:E0:09
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
67:11:68:f7:ae:7c:c6:1f:13:8e:fd:98:bd:4f:c0:2e:52:71:
2f:a9:86:2b:79:8c:12:b2:a4:cb:aa:93:19:03:45:4d:53:21:
16:e9:b5:d2:60:5a:14:7c:60:9b:3e:af:df:4f:fa:28:ff:10:
e1:d6:95:94:50:e2:a7:f8:c5:c3:aa:7d:b9:40:15:07:78:d6:
4f:f7:84:c1:cf:eb:4b:9b:06:3f:63:80:00:d0:9c:c8:44:b1:
f5:37:09:33:3b:c8:c9:c2:6b:67:1e:5d:f0:19:50:2b:43:f5:
a8:16:af:99:6d:b7:25:96:83:6a:50:58:a2:3d:77:3b:06:cb:
2b:3a:f9:4c:4e:03:d6:a1:c5:5a:86:32:0c:69:eb:07:4a:3c:
82:91:bf:95:68:30:3e:2e:86:f7:16:91:a9:15:ba:07:e2:8e:
86:dc:a8:0f:0a:26:d8:88:1a:19:89:fe:e6:e9:73:74:3b:31:
46:92:40:41:87:92:92:19:bc:84:d4:90:92:b0:7f:4d:8e:9c:
59:28:f8:94:0b:cb:b2:95:ef:51:88:85:88:fc:8e:0f:2c:55:
22:c1:2d:2e:ae:a8:62:4d:2d:9c:c3:4a:8b:b1:d3:78:6d:16:
20:88:66:b7:c7:a6:17:21:f5:3d:52:cc:d6:51:fe:ce:89:64:
3b:60:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:23:25 2025 by rpki-client