Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/KEPsfP7EoAfZm_SdoBNApLD-TNI.roa
File: KEPsfP7EoAfZm_SdoBNApLD-TNI.roa (raw, json)
Hash identifier: S8rkj1RM+UAo8s6Rc80ap1rXpWvpZR3QX2hBuDZbc6c=
Subject key identifier: 28:43:EC:7C:FE:C4:A0:07:D9:9B:F4:9D:A0:13:40:A4:B0:FE:4C:D2
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 0182B05B64196FEABD88253A63F1B55DDDBD
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/KEPsfP7EoAfZm_SdoBNApLD-TNI.roa
Signing time: Thu 18 Aug 2022 09:49:15 +0000
ROA not before: Thu 18 Aug 2022 09:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 45.67.254.0/24 maxlen: 24
45.67.255.0/24 maxlen: 24
45.67.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:5b:64:19:6f:ea:bd:88:25:3a:63:f1:b5:5d:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Aug 18 09:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2843ec7cfec4a007d99bf49da01340a4b0fe4cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:6b:25:e4:3a:1f:1e:f1:d5:2c:3a:92:59:
f5:18:81:1a:e4:c0:c5:4d:39:ed:a0:53:b2:61:06:
75:d3:9e:43:86:81:28:93:35:67:e6:74:e8:0b:18:
c2:96:88:a0:d3:32:d5:e2:56:6b:53:17:3f:fc:52:
cd:75:d7:f8:f5:7f:cb:8a:b3:7e:dc:b2:4a:ee:a3:
47:f8:ba:8f:62:17:c5:6c:93:df:d3:7e:e9:e3:a5:
1c:c7:f3:a8:05:db:4c:30:68:64:56:bb:7b:b8:2d:
28:30:45:bb:fe:be:ee:01:df:53:ab:1c:fc:df:6b:
1f:b3:e7:28:79:03:e9:bf:9f:18:e3:13:50:13:d7:
24:3b:86:68:51:bf:fa:55:9a:51:67:65:98:dc:3c:
09:14:0f:02:7b:64:5f:67:40:eb:d8:a0:78:f0:55:
84:54:43:5e:ef:76:a0:db:8a:58:7b:13:be:59:56:
bd:19:28:7e:6e:c6:9a:fe:d7:9f:0e:c2:91:f0:2f:
a3:4c:2e:2e:fe:a2:42:31:bf:29:64:e6:7f:67:ce:
68:ec:a6:ff:09:1f:8e:e9:af:b2:08:81:6e:12:86:
b0:ca:ea:69:e3:21:58:b5:4c:8b:dc:d4:74:84:ca:
ed:ba:8b:5c:67:15:c6:93:cc:c4:d1:24:46:6a:0f:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:EC:7C:FE:C4:A0:07:D9:9B:F4:9D:A0:13:40:A4:B0:FE:4C:D2
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/KEPsfP7EoAfZm_SdoBNApLD-TNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.253.0-45.67.255.255
Signature Algorithm: sha256WithRSAEncryption
69:24:fa:69:c2:46:11:4c:b6:71:de:ec:3f:ad:26:25:94:be:
a5:f1:68:6d:e0:d6:9b:1a:6e:21:72:d7:95:97:c8:17:3f:58:
1d:32:62:a9:1f:56:7e:0d:d1:86:62:48:0a:c7:59:8d:d2:6b:
55:d7:84:a8:77:2f:32:28:41:bf:af:24:f9:e1:f9:49:39:28:
68:12:3b:4c:ee:48:d0:e1:49:b1:2e:84:e7:a1:95:5c:32:7f:
1a:c1:d9:db:e6:44:d7:7b:f3:af:32:c6:a2:ee:d8:82:dc:6a:
5e:2f:bf:ca:e2:51:30:d9:ee:5c:4c:12:64:9a:65:bf:e9:00:
59:b9:51:1e:90:75:cd:6a:34:44:0c:71:1f:e8:fc:5c:e1:94:
67:de:e1:54:7a:6d:db:8c:f5:0c:2a:3a:ac:3e:6a:20:d5:99:
cb:fe:4e:3a:0c:c4:1d:e6:81:ea:fc:da:f6:3c:c6:1e:8e:d3:
28:ee:74:d5:c0:91:0b:47:fe:47:8d:07:06:67:46:fb:53:cd:
98:58:10:c5:6f:f3:f2:89:02:79:68:9a:6e:1f:82:e2:36:84:
e5:f3:d0:25:1f:23:d6:e0:31:40:20:8b:da:ef:9c:30:43:9c:
a0:a2:65:64:76:2d:25:ba:ef:cc:fc:1c:f1:a3:01:6b:c3:97:
13:2e:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:43 2025 by rpki-client