Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/Txpkyb_QU-FkKUdhm1wYFuUrOHE.roa
File: Txpkyb_QU-FkKUdhm1wYFuUrOHE.roa (raw, json)
Hash identifier: 7tqQYzYNQPdhwz02SoJ9ClJnO/1PaWSWoIoLQHmWNQU=
Subject key identifier: 4F:1A:64:C9:BF:D0:53:E1:64:29:47:61:9B:5C:18:16:E5:2B:38:71
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01856D4ADE7E638BFA8CB3831798B41D576F
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/Txpkyb_QU-FkKUdhm1wYFuUrOHE.roa
Signing time: Sun 01 Jan 2023 12:25:01 +0000
ROA not before: Sun 01 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208337
IP address blocks: 45.143.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:de:7e:63:8b:fa:8c:b3:83:17:98:b4:1d:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jan 1 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f1a64c9bfd053e1642947619b5c1816e52b3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:61:c6:b3:a6:aa:0a:5c:13:cf:78:a5:ae:
e0:b4:f2:14:84:aa:a2:3a:0b:79:59:01:43:a6:ab:
42:3f:ac:50:32:16:15:c3:70:43:c4:1f:84:94:22:
d0:8d:c7:bd:d5:2c:78:bd:04:d0:74:e2:c5:24:6c:
78:ff:b1:7a:25:b9:18:3a:3d:0b:cb:6c:99:16:be:
2a:fd:96:ae:21:94:71:25:f0:4d:7b:80:c4:ca:a7:
20:e0:66:2d:04:a7:95:d8:b3:67:84:a4:d9:3a:35:
94:d7:31:9c:a4:eb:4b:58:6b:8e:b6:67:9d:93:33:
43:12:7f:a9:8e:d8:cb:fa:ad:b4:37:15:73:9e:b5:
72:86:5b:0f:74:cc:5b:ae:9c:eb:14:13:97:12:ae:
ec:d5:1c:3c:a0:1c:23:7a:9a:83:14:99:20:02:88:
fb:f9:75:51:40:24:2c:f2:97:3e:e7:64:ed:db:f9:
ef:b7:55:0b:a4:27:6c:13:ee:9f:4d:a1:19:65:fe:
b0:2b:05:91:a2:24:d5:62:77:ba:1a:a3:85:c9:f4:
ef:85:45:9b:ed:08:e4:c7:09:b9:98:8d:5a:8f:65:
ed:3f:fd:7c:62:bc:86:33:f7:cd:d3:d7:0b:d6:03:
92:bc:0f:84:da:7f:ce:8c:38:5f:42:68:b5:bc:5a:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:64:C9:BF:D0:53:E1:64:29:47:61:9B:5C:18:16:E5:2B:38:71
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/Txpkyb_QU-FkKUdhm1wYFuUrOHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.182.0/24
Signature Algorithm: sha256WithRSAEncryption
df:c7:f2:0d:7d:81:91:29:97:e1:82:fa:9a:d4:cc:84:fb:fa:
07:7e:28:cb:b8:0a:37:ba:09:98:cd:ff:97:41:14:9e:b9:c2:
83:89:35:cd:76:a3:7d:99:57:b7:05:8b:84:65:31:4d:2b:5b:
4e:66:ba:1f:7f:c6:7d:f4:50:bc:a9:dc:73:93:82:11:db:5d:
8a:f9:d7:b6:13:cb:7c:9d:b8:b7:5d:29:0e:b8:bc:18:4f:f0:
bf:ff:9b:c5:9f:69:a1:d4:af:95:9d:7c:5a:ad:49:8c:28:f8:
49:cf:c0:7f:cb:ee:34:b1:85:50:1c:da:db:b4:0f:f6:8e:e6:
49:fc:6f:0d:25:44:d5:f4:ed:d4:74:d6:84:2d:17:c0:cd:b1:
34:7a:f9:f0:9c:67:c9:85:cf:84:6a:b8:59:ca:ab:0e:cc:b8:
3e:68:86:a9:3f:10:89:70:83:3d:bb:4e:30:30:48:45:43:38:
a8:81:15:12:f0:90:9a:12:0d:7d:4b:e2:5f:af:da:55:47:c6:
45:ca:f9:73:6d:35:64:36:c8:dc:5e:8e:3f:b7:85:9e:02:89:
46:19:6f:60:09:5a:16:82:5d:bc:09:51:03:de:3d:ab:3c:bd:
c6:c4:bb:76:1b:54:a0:aa:8f:8f:17:e8:58:d2:44:a8:59:b8:
1d:91:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:39 2025 by rpki-client