Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/93M9fwI_V6HLpKyBfFbUwg_U-r0.roa
File: 93M9fwI_V6HLpKyBfFbUwg_U-r0.roa (raw, json)
Hash identifier: t5V8+WBc9xllk9/UvTSALbOrdJLzmFZz91TQlbyBKH4=
Subject key identifier: F7:73:3D:7F:02:3F:57:A1:CB:A4:AC:81:7C:56:D4:C2:0F:D4:FA:BD
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018B156E5B03C8FDDD74B18E3AAB87D8FF86
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/93M9fwI_V6HLpKyBfFbUwg_U-r0.roa
Signing time: Mon 09 Oct 2023 17:13:55 +0000
ROA not before: Mon 09 Oct 2023 17:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272877
IP address blocks: 45.80.198.0/23 maxlen: 23
45.80.196.0/22 maxlen: 22
45.80.196.0/23 maxlen: 23
103.23.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:6e:5b:03:c8:fd:dd:74:b1:8e:3a:ab:87:d8:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Oct 9 17:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7733d7f023f57a1cba4ac817c56d4c20fd4fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:98:00:c6:58:be:a8:9d:87:2a:c6:05:ce:
b6:b1:55:f5:ff:25:e5:90:9f:d7:d1:19:4a:f5:4d:
71:ab:c7:1e:34:9e:67:e2:23:76:21:f5:48:54:73:
8d:39:70:e5:dd:ec:04:2e:5b:80:89:01:92:0d:5f:
9d:51:92:96:c9:3d:25:2e:62:53:e4:8e:42:66:f6:
44:a8:20:af:0a:5a:6f:c2:a0:d5:93:2f:a0:82:fb:
50:a0:45:a9:6a:50:89:cc:5e:74:bb:94:5a:93:b0:
14:8a:2b:2e:78:16:4e:43:1a:f8:e9:31:2f:7a:41:
d9:a9:8a:a3:17:af:dc:10:89:46:ac:6d:b4:9f:d7:
71:d0:1d:35:ff:3d:a0:65:de:99:05:76:a6:23:4b:
bc:4e:61:60:38:7e:9b:2b:39:f9:73:86:fb:59:ef:
ba:9f:e7:28:72:3a:af:02:8d:74:46:46:86:ca:3e:
53:5d:fc:59:61:10:87:4c:81:27:51:c1:18:a4:59:
dd:7b:4e:4c:36:14:98:4f:4f:51:49:36:ea:bb:42:
b6:e7:df:2a:80:cf:b5:a2:aa:60:85:73:81:b3:38:
09:10:17:52:c3:83:7f:50:48:69:3b:5f:4f:9b:65:
f4:11:16:36:5e:87:a5:af:15:7b:8b:17:6f:d0:35:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:3D:7F:02:3F:57:A1:CB:A4:AC:81:7C:56:D4:C2:0F:D4:FA:BD
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/93M9fwI_V6HLpKyBfFbUwg_U-r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.196.0/22
103.23.62.0/23
Signature Algorithm: sha256WithRSAEncryption
53:19:96:13:d9:36:3e:94:fe:db:d4:c0:8e:5d:ed:5d:f1:d6:
14:79:dc:52:03:c7:e7:17:39:32:d9:d2:92:a9:6a:df:8f:0a:
3d:c0:98:59:e0:15:6f:a6:c5:6d:19:16:59:16:74:34:7f:8d:
b0:0e:13:a8:09:7a:50:23:46:47:94:a8:d4:a0:39:e7:f5:69:
d3:30:40:a4:dc:cd:0c:36:c6:59:76:0a:32:3b:bf:d9:c5:25:
a4:72:b8:a2:f7:3b:c5:2b:5c:c9:d2:6c:bd:9a:0e:e8:8f:97:
6f:6f:d8:ff:ff:62:51:b8:02:e3:2a:26:42:5e:f9:3b:c1:79:
37:14:f7:91:eb:7a:ac:40:67:94:45:92:f9:4a:4c:50:3f:b4:
2e:88:2b:5d:1b:09:97:a5:a7:77:01:6c:aa:58:f9:f9:0c:28:
1c:7b:7c:7b:d6:8d:f4:12:3a:ef:89:a0:0e:15:ee:18:f3:6a:
e2:04:27:88:4e:30:7b:ff:00:ef:b8:8f:be:58:24:9f:f4:51:
68:de:83:e4:db:ca:b5:e8:d0:ec:a9:51:f2:bb:73:4c:e4:bf:
d0:ae:15:b0:b4:ae:1a:b5:aa:51:a2:7b:35:d5:ed:8b:dd:3e:
38:e6:de:8b:f3:44:05:0e:9e:03:11:02:29:c5:03:d7:10:b6:
c0:39:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:05 2025 by rpki-client