Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/214RFRJhnzZ3wy2jraaFxLnrUC0.roa
File: 214RFRJhnzZ3wy2jraaFxLnrUC0.roa (raw, json)
Hash identifier: sf6z+BL4Kl+gTainS6hrYY1DK+9zJhAJh0Mq3omtTIk=
Subject key identifier: DB:5E:11:15:12:61:9F:36:77:C3:2D:A3:AD:A6:85:C4:B9:EB:50:2D
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 018570D52F148CA90C824747403D6E2C48CB
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/214RFRJhnzZ3wy2jraaFxLnrUC0.roa
Signing time: Mon 02 Jan 2023 04:54:57 +0000
ROA not before: Mon 02 Jan 2023 04:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201299
IP address blocks: 45.155.136.0/22 maxlen: 24
45.155.136.0/24 maxlen: 24
45.155.139.0/24 maxlen: 24
45.155.137.0/24 maxlen: 24
45.155.138.0/24 maxlen: 24
2a0f:c500::/29 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:2f:14:8c:a9:0c:82:47:47:40:3d:6e:2c:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jan 2 04:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db5e111512619f3677c32da3ada685c4b9eb502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:22:dc:9d:f1:f1:1a:42:98:ba:12:e0:2f:
16:87:7d:5b:a4:16:8a:2e:75:17:12:81:40:58:bf:
f0:e1:d2:73:12:ef:4a:25:d9:26:da:ac:ea:65:47:
cc:fa:2b:82:a2:8d:98:b7:7c:97:cf:21:cf:cb:d4:
f5:2c:e1:f1:d3:0a:ea:e8:06:52:0f:04:74:9c:e2:
54:89:a7:a8:4b:f5:c2:60:35:51:70:0f:ce:88:4c:
0b:bb:11:2b:db:0f:17:97:fb:26:e3:34:fc:3b:c3:
71:db:03:81:5a:88:08:41:cb:e8:35:0e:6c:6a:dd:
02:02:eb:2c:21:d8:4f:53:18:4f:21:b0:79:bd:b1:
6c:50:c1:ac:72:81:7d:91:1b:2e:24:86:d0:c4:31:
a9:a5:b4:30:fb:24:43:dc:9b:59:1c:fe:09:56:ed:
4c:f7:63:5f:c4:c8:dd:b0:44:e5:2d:90:29:0e:d9:
12:b2:04:93:82:24:38:8a:78:d8:02:70:16:e2:00:
5a:ee:86:93:5a:6b:92:72:d5:d3:05:4a:27:f1:67:
eb:28:d2:08:43:1a:7c:a7:a3:01:20:26:48:ad:25:
7c:89:d4:32:eb:12:9b:45:19:8c:32:73:a2:35:21:
c0:fc:6b:b8:93:78:1c:7b:f2:c2:ed:61:c7:d5:9f:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5E:11:15:12:61:9F:36:77:C3:2D:A3:AD:A6:85:C4:B9:EB:50:2D
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/214RFRJhnzZ3wy2jraaFxLnrUC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.136.0/22
IPv6:
2a0f:c500::/29
Signature Algorithm: sha256WithRSAEncryption
b0:5d:ba:cf:96:c8:80:37:1b:c4:8f:92:74:04:89:39:af:3f:
60:7b:ca:83:77:6c:56:45:d9:a8:78:db:9b:dc:86:c9:8d:e3:
45:29:7f:92:79:67:76:f8:ac:aa:a0:d5:77:0a:31:bc:6e:b7:
e8:b2:7e:a1:2b:7c:b3:0b:94:a5:59:6a:0d:af:4e:65:89:dc:
6d:3d:25:08:d0:a8:d7:ad:ca:59:3c:99:6a:6e:ac:0e:4d:f8:
20:59:79:97:f0:9b:07:9a:22:41:6d:7e:02:45:70:b6:da:39:
f2:a3:2a:90:3d:d5:53:14:c3:2b:70:ea:2b:96:0b:d5:27:c3:
46:56:fe:49:5e:7d:99:45:a0:91:66:4d:6b:5f:d8:1a:2d:53:
f2:64:29:c7:0d:e4:83:87:f2:57:41:cd:ef:b9:59:c7:37:6e:
56:96:fc:36:6a:d0:9f:9c:cf:b0:3a:3d:e8:e9:1c:63:55:0b:
8c:7a:0e:b1:ba:99:89:96:37:00:15:c4:8e:8e:e4:e0:da:20:
41:51:9c:e2:49:36:78:ed:00:cd:b6:e1:55:f2:c5:0c:e4:8a:
0f:96:5c:c6:65:7e:50:59:f9:06:5c:47:5d:e8:fa:4a:79:a7:
55:5e:49:54:aa:46:81:13:d5:db:45:f1:5e:c8:12:b3:c0:0d:
d2:14:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:19 2025 by rpki-client