Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/59PpHW-KiRV0J6h92RJTCv2RD8U.roa
File: 59PpHW-KiRV0J6h92RJTCv2RD8U.roa (raw, json)
Hash identifier: yRDxYFOMFgB3cszhoz0nU5LTRqoYhDJoLknkThiLyk8=
Subject key identifier: E7:D3:E9:1D:6F:8A:89:15:74:27:A8:7D:D9:12:53:0A:FD:91:0F:C5
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 074D6C5C
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/59PpHW-KiRV0J6h92RJTCv2RD8U.roa
Signing time: Sat 01 Jan 2022 14:05:12 +0000
ROA not before: Sat 01 Jan 2022 14:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48412
IP address blocks: 45.154.16.0/24 maxlen: 24
45.154.16.0/22 maxlen: 22
45.154.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122514524 (0x74d6c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 1 14:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7d3e91d6f8a89157427a87dd912530afd910fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:d4:10:f9:6c:9e:f6:84:2d:ec:f9:b7:28:
0c:37:d1:ca:51:d7:4e:ce:83:8a:5e:d2:21:f9:8a:
e8:ec:1e:02:ad:a7:e4:71:c8:20:a6:64:a6:2f:94:
4e:f7:ac:a7:88:0b:54:dc:31:88:15:bc:a1:b1:ea:
c1:fa:fb:24:d6:a2:5b:d5:12:eb:23:a8:a2:ba:a4:
a3:fe:a5:f9:9d:2f:e4:be:56:3c:17:e5:d7:00:c1:
3f:4b:09:1c:49:bd:c3:6d:01:3f:83:01:23:ae:cb:
c8:2f:c4:9b:1a:e2:a9:2c:80:31:9f:aa:4c:8e:bc:
be:d9:a4:e7:a8:5a:21:7b:f8:1e:78:f4:cb:9b:66:
f7:6a:bc:a0:b0:3f:9d:93:19:37:c8:f8:f7:24:b3:
73:c1:ab:c3:0f:53:7c:df:43:4d:cc:75:51:93:d3:
72:a2:fb:b4:f7:fc:9a:89:fa:cd:43:73:73:79:81:
52:d3:88:a3:e8:a8:27:39:3a:45:a0:fe:85:51:fb:
3a:31:f4:54:df:22:34:b2:c9:0d:36:33:b0:3e:69:
4a:10:4d:31:f3:d1:12:d2:ec:e4:62:77:5f:7a:05:
e7:fd:42:df:4c:97:b6:94:9e:c8:30:c0:d6:ca:73:
3f:76:a8:e4:33:fd:ff:f6:9f:bf:41:a3:69:ac:b1:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:E9:1D:6F:8A:89:15:74:27:A8:7D:D9:12:53:0A:FD:91:0F:C5
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/59PpHW-KiRV0J6h92RJTCv2RD8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.16.0/22
Signature Algorithm: sha256WithRSAEncryption
82:e3:13:1c:68:16:0e:9f:53:2e:3a:e4:5a:48:66:e6:d1:cb:
61:49:2d:de:55:7f:d5:0b:99:b1:34:ea:df:57:5b:03:66:b2:
d2:33:57:62:01:7d:f0:2c:98:6e:d1:26:d0:1f:75:77:ec:3b:
4b:b9:f4:c2:ea:68:35:9c:73:75:af:ff:68:76:09:97:56:dc:
49:40:36:84:f5:60:40:5c:19:c3:13:ef:05:09:64:10:d9:6c:
cb:31:ab:27:ab:2f:3a:b2:a1:de:a2:43:53:33:39:25:4b:58:
71:89:4f:c9:a5:3e:cd:8b:47:50:4e:29:39:64:6e:bb:4a:0d:
2a:60:c3:0f:bc:08:c8:3c:63:29:e1:d8:83:e4:f3:e7:8c:90:
c2:7a:a9:c8:ac:90:e2:f1:5c:3f:7b:73:41:68:34:6d:23:50:
67:08:04:77:32:29:5d:7c:77:55:0f:b8:76:7e:ea:c9:dc:e7:
66:7c:6c:e7:d3:17:6e:05:54:c9:2d:52:1c:93:ea:fe:43:f2:
f8:e4:5e:31:f6:3d:27:c3:49:49:bb:9a:6f:5a:e1:b7:2a:0e:
12:b9:18:64:58:0d:d4:3d:9c:55:ec:67:a9:d3:27:e0:99:30:
73:6d:8e:1a:9e:db:10:6a:a5:e4:80:eb:bf:6e:64:00:a3:f2:
69:7d:85:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:37 2025 by rpki-client