Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/2iFPcNNwK-OwZQ4r12UuN8bLcVA.roa
File: 2iFPcNNwK-OwZQ4r12UuN8bLcVA.roa (raw, json)
Hash identifier: C6S57jmGQ78FjDG7eJsbU8KIFhmn1TZbqtRqyBSYZQs=
Subject key identifier: DA:21:4F:70:D3:70:2B:E3:B0:65:0E:2B:D7:65:2E:37:C6:CB:71:50
Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial: 0182B4E4DDACD27E96BB11A62987BEBB316B
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/2iFPcNNwK-OwZQ4r12UuN8bLcVA.roa
Signing time: Fri 19 Aug 2022 06:57:54 +0000
ROA not before: Fri 19 Aug 2022 06:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35131
IP address blocks: 45.145.24.0/24 maxlen: 24
45.145.24.0/23 maxlen: 23
45.145.24.0/22 maxlen: 22
45.145.25.0/24 maxlen: 24
45.145.26.0/23 maxlen: 23
45.145.26.0/24 maxlen: 24
45.145.27.0/24 maxlen: 24
2a00:e280::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:e4:dd:ac:d2:7e:96:bb:11:a6:29:87:be:bb:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Validity
Not Before: Aug 19 06:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da214f70d3702be3b0650e2bd7652e37c6cb7150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:44:06:e6:77:d4:f2:c8:7b:e3:1a:be:87:
a9:f3:c0:27:7e:f2:e9:50:7b:26:36:cd:61:be:b2:
b9:7a:1d:2e:f7:5d:67:0c:8a:bb:55:f6:21:ac:5b:
67:6c:1d:83:3c:05:ab:33:09:70:b2:29:87:63:ef:
86:21:07:5b:d4:5c:4f:75:2b:d3:d6:85:0a:c0:4f:
6d:c2:3f:e8:40:24:90:0a:90:e6:95:c2:6a:ab:9f:
69:37:96:d5:8e:58:5b:19:6b:37:65:f9:d4:81:2c:
87:48:e3:6b:a0:f7:2f:c8:8e:db:db:13:97:e5:00:
c7:5e:54:53:cb:a0:29:d6:3d:65:00:a4:3d:9c:79:
86:1d:54:d6:10:45:20:d3:13:ef:12:9d:db:cb:8f:
b5:95:ee:61:be:d1:0c:92:a4:b6:1b:8c:4f:a7:ab:
b6:bd:27:54:5a:3d:35:16:3f:69:31:02:0c:2b:fd:
8c:32:ef:4c:81:47:11:19:31:a5:fa:72:bc:20:26:
fb:69:6d:88:95:d2:b7:19:d3:24:18:92:ea:23:66:
2f:db:61:4f:4f:f9:0d:bd:6e:eb:7e:9d:0f:f7:46:
0e:37:f4:34:33:7e:7a:91:79:bf:02:a5:db:74:dd:
af:63:45:6e:38:b2:c0:50:2b:dc:6a:62:a3:36:10:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:4F:70:D3:70:2B:E3:B0:65:0E:2B:D7:65:2E:37:C6:CB:71:50
X509v3 Authority Key Identifier:
keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/2iFPcNNwK-OwZQ4r12UuN8bLcVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.24.0/22
IPv6:
2a00:e280::/32
Signature Algorithm: sha256WithRSAEncryption
6d:da:c3:cb:13:4d:ff:23:16:38:ae:2e:23:38:b8:b3:c8:aa:
8b:14:75:f7:15:9e:c9:6e:dc:bf:00:5f:16:c0:bb:8c:1f:56:
df:d4:bc:43:5d:45:bf:f7:aa:b6:0c:bd:d5:48:87:e9:ed:b3:
3f:5c:c4:5b:ec:f0:4d:96:bd:dc:8c:ab:7a:59:92:81:74:a3:
af:85:8a:fc:83:9a:49:d0:01:53:1d:e4:53:1d:5a:25:13:3e:
bb:b7:8c:02:28:21:54:c0:40:df:04:cb:ce:e9:34:b7:0b:6b:
ec:6d:fa:83:c5:83:18:5e:d9:6e:92:6f:e5:0c:57:d4:bd:2f:
98:96:89:26:88:10:e8:44:d1:8c:4c:4d:3f:be:64:a8:69:8b:
58:67:a7:e7:cf:aa:09:83:6f:42:1b:e3:68:fa:2d:68:5a:6c:
ab:67:0b:89:6c:b0:02:1e:06:e8:7e:ff:bb:d4:3a:43:a7:06:
4e:30:19:6b:a1:0e:fb:af:a1:2f:d9:44:c7:73:c9:77:c6:af:
90:a3:b9:10:2b:35:fc:7b:45:94:8a:06:53:b4:e7:f9:73:86:
22:eb:44:4a:d1:ac:f7:a3:c2:5c:2c:9a:43:ce:1c:d7:28:66:
36:df:ab:8c:98:fd:ea:71:b7:d6:e0:5a:fe:5d:d0:09:1c:5b:
17:4b:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:09 2025 by rpki-client