Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/d16njtdMa_1nSMWtFcBMZoh1NEk.roa
File: d16njtdMa_1nSMWtFcBMZoh1NEk.roa (raw, json)
Hash identifier: Lvl5fhcFlHAxoDE55dJsHmJ1PlMZCA9cw+B8zICH14U=
Subject key identifier: 77:5E:A7:8E:D7:4C:6B:FD:67:48:C5:AD:15:C0:4C:66:88:75:34:49
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01B234EA
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/d16njtdMa_1nSMWtFcBMZoh1NEk.roa
Signing time: Sat 01 Jan 2022 16:06:40 +0000
ROA not before: Sat 01 Jan 2022 16:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208337
IP address blocks: 45.143.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28456170 (0x1b234ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jan 1 16:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775ea78ed74c6bfd6748c5ad15c04c6688753449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:6e:6f:40:2c:46:5d:7d:6d:4c:26:54:c4:
94:75:29:24:a7:e6:df:76:d4:01:21:06:64:13:60:
b0:af:01:c2:9d:72:9a:d3:fa:c8:18:16:c9:21:62:
40:40:f8:ba:57:3e:35:53:8f:e0:ca:9b:4d:ac:a0:
84:50:aa:79:94:d4:49:3e:41:85:8b:9e:89:68:b4:
d1:7a:2d:59:79:eb:f4:43:ee:fb:3a:5c:c4:c3:4d:
ca:85:73:33:07:e0:43:5f:67:d2:26:89:c1:6d:f9:
a2:ea:af:ab:5f:4f:de:bc:4b:f9:84:4f:61:1e:32:
6a:f9:b5:aa:6b:5c:87:46:e0:25:c1:8d:f4:7d:b1:
c8:b1:a3:43:aa:e4:27:6c:46:51:97:40:e0:2a:d7:
e4:2f:a3:4a:be:af:18:95:3e:8b:3b:79:5c:b2:e3:
8d:16:39:2d:c4:cc:f2:01:1f:6f:52:b6:c5:6f:11:
bc:c6:07:60:89:83:51:33:0f:0f:63:10:10:ef:8e:
45:4d:3d:43:04:17:99:0a:a9:40:d6:3b:b0:77:66:
b7:0e:bd:eb:68:26:26:9f:cf:63:c6:0a:91:eb:7c:
4d:d0:25:f4:24:cd:38:55:7b:35:d8:1e:d2:ee:1b:
14:9b:68:1a:c3:8c:15:dd:c3:a9:25:ac:16:3a:50:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:A7:8E:D7:4C:6B:FD:67:48:C5:AD:15:C0:4C:66:88:75:34:49
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/d16njtdMa_1nSMWtFcBMZoh1NEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.182.0/24
Signature Algorithm: sha256WithRSAEncryption
23:59:60:ba:97:5d:21:3d:df:bb:0b:84:33:5e:da:3e:16:48:
2d:5c:ed:04:5f:60:59:06:69:30:c7:0f:0e:5b:bf:0a:85:56:
f7:88:28:a5:55:dc:bc:30:d2:ae:f5:7b:51:3d:7f:25:8e:ab:
68:12:50:f3:2f:b5:3d:d3:d0:6c:d6:f1:bf:19:a9:5b:33:5d:
78:47:1d:94:db:a0:7e:c5:ff:03:f6:69:3e:8a:81:7d:e5:28:
39:92:d0:ad:e2:4b:65:a3:33:95:5a:1a:12:55:fd:90:4a:98:
1c:85:9b:2c:ec:f8:ad:ff:52:d9:eb:cb:2c:a5:d0:21:b1:a4:
26:83:19:28:7a:a0:6f:5b:68:fd:38:55:fb:f1:48:3d:3a:46:
83:70:ef:28:b0:8d:7e:17:e8:09:42:a2:12:61:18:5a:66:ce:
14:37:a3:bd:48:21:d0:8b:9e:d8:16:16:3f:fa:a8:62:a7:ab:
d6:52:09:7b:8c:a5:ee:95:1c:fd:be:01:76:f4:a6:5f:62:ad:
a9:ae:6c:2a:25:74:8d:49:ae:15:69:74:0e:af:6e:ed:f1:c0:
52:93:95:df:06:ce:77:40:ce:52:85:e9:e4:12:ea:91:ff:18:
61:26:3e:b1:06:45:99:b4:28:c4:25:5f:cd:9b:cd:bb:5e:69:
43:17:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:35:05 2025 by rpki-client