Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/1-zWFU4jFENsQFmTa877I26GFWZI.roa
File: 1-zWFU4jFENsQFmTa877I26GFWZI.roa (raw, json)
Hash identifier: DcAGdLPK36wjfFEIlJTckOcancLQMei8jjhUpR+pofU=
Subject key identifier: FB:35:85:53:88:C5:10:DB:10:16:64:DA:F3:BE:C8:DB:A1:85:59:92
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01824A3F5E8F0A78D25100F3815C0A5AD797
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/1-zWFU4jFENsQFmTa877I26GFWZI.roa
Signing time: Fri 29 Jul 2022 13:57:23 +0000
ROA not before: Fri 29 Jul 2022 13:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 45.67.254.0/24 maxlen: 24
45.67.255.0/24 maxlen: 24
45.67.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:3f:5e:8f:0a:78:d2:51:00:f3:81:5c:0a:5a:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jul 29 13:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb35855388c510db101664daf3bec8dba1855992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:20:3e:02:8c:27:01:52:df:3e:2b:40:c8:
ec:b3:60:5a:24:8a:d8:b7:4b:7a:83:30:76:fa:50:
12:f1:80:cf:ee:0f:5b:c3:12:e7:95:07:59:bd:83:
89:2a:b7:48:85:3f:b4:ec:62:ff:c9:ff:1c:77:44:
c2:43:10:f4:b0:aa:37:90:53:d0:08:1c:03:a7:99:
25:e9:3a:2b:d9:ea:13:af:a7:ed:a1:76:c7:73:e5:
42:2d:74:0d:a1:b5:40:4a:e2:20:5f:96:5c:00:9e:
dd:c7:26:0a:ee:bb:c9:5a:9d:bc:2f:c5:cb:4b:c7:
f0:4e:ee:61:fb:56:53:c4:71:7e:c4:8a:16:3b:c1:
6b:f4:b4:ac:eb:26:df:23:3b:50:6d:05:1c:16:e0:
49:79:19:e7:a4:9b:12:db:d1:08:b9:99:eb:13:c4:
bb:b7:99:c5:dc:59:ee:6b:f7:24:b1:18:c5:d1:01:
30:1d:7f:ac:1e:16:b1:fe:38:8c:01:ec:a6:2e:f0:
76:a5:6d:4c:18:11:f4:31:fe:3b:88:03:1f:5c:43:
97:67:b3:40:e1:ff:d4:be:1b:55:c1:3f:1f:06:06:
10:dc:50:cc:1a:be:0d:55:3b:b7:88:ab:c7:11:86:
e5:c0:f3:b7:81:af:2b:b8:da:ea:f4:ff:b4:5e:80:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:85:53:88:C5:10:DB:10:16:64:DA:F3:BE:C8:DB:A1:85:59:92
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/1-zWFU4jFENsQFmTa877I26GFWZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.253.0-45.67.255.255
Signature Algorithm: sha256WithRSAEncryption
1d:46:7c:c7:44:1d:7f:d3:28:0b:95:4f:3d:39:a6:05:12:e1:
6e:4e:9c:1f:f6:5f:dd:fe:ba:72:98:a5:5d:30:3d:63:88:94:
8b:25:25:31:fe:c5:e5:54:2c:0e:01:fe:66:ac:74:ed:2b:0a:
2d:b9:36:c9:a5:c5:7e:ce:e6:3c:da:f5:a6:03:30:47:29:87:
72:c4:ec:f3:7e:b5:3b:b3:60:01:10:98:62:8b:02:ea:67:9c:
03:f2:53:e4:76:25:d6:e7:ea:a7:8b:51:f2:03:8e:10:16:36:
62:37:f4:c8:8f:c3:21:20:25:a7:2a:dc:f4:41:2d:4b:b6:1e:
50:e6:98:0b:ec:cb:56:77:7e:0a:b6:95:b1:d3:92:36:26:e6:
e1:0f:af:7b:63:58:17:2f:36:9b:8d:5c:2a:68:42:bc:dd:fe:
f6:b1:a6:1d:15:ab:09:04:cd:09:90:8b:24:a8:87:5f:b5:6a:
e3:64:9c:98:f4:4b:58:5a:a0:82:42:81:4a:b6:07:9f:f7:7f:
6c:ce:8e:83:eb:48:de:d5:40:f5:87:b7:5a:7d:16:32:fe:8d:
1d:37:2e:a4:5e:a8:9d:70:63:c3:fb:57:6f:d1:01:b1:6d:d0:
e2:00:0d:b2:50:d8:9b:c3:e8:a9:aa:13:4a:4a:3b:16:44:30:
5f:0d:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:06 2025 by rpki-client