Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa
File: b6Lz3MZDycMLXQ7E154LzQaY6TI.roa (raw, json)
Hash identifier: NKkKbsb4dfHNn6MeBAzOxY8TIht9Y1LMknJ3ZpsS/Ho=
Subject key identifier: 6F:A2:F3:DC:C6:43:C9:C3:0B:5D:0E:C4:D7:9E:0B:CD:06:98:E9:32
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 01857246BA6B368626DD39E5539C69B375A3
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.143.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ba:6b:36:86:26:dd:39:e5:53:9c:69:b3:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa2f3dcc643c9c30b5d0ec4d79e0bcd0698e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:57:42:d7:5a:4b:6b:c6:da:92:ab:c6:74:
0b:e5:52:8a:9a:a3:b6:0a:04:1c:3e:48:20:d4:8c:
e0:77:4e:86:1d:ab:df:26:f2:06:66:3e:c2:44:25:
17:5d:64:a5:3d:23:07:90:c2:bb:42:45:8b:42:08:
70:9b:77:af:7c:89:39:85:1f:95:0b:7f:2b:20:79:
65:96:f6:c9:95:27:8f:a3:7a:fa:7d:b7:92:09:17:
56:27:10:ae:ee:f8:a0:05:fd:20:ba:41:fc:6a:8d:
ff:4c:0d:2b:b9:15:8c:f9:30:e3:9c:dd:ce:41:48:
dd:95:f1:9e:a3:33:38:3d:94:d2:f7:e4:b6:08:15:
a1:94:f6:9b:25:ef:6d:74:71:78:5a:f3:1e:99:9a:
24:21:95:f1:84:95:44:74:c7:6c:94:d7:21:39:c1:
77:96:db:da:0a:cb:00:9b:2b:09:63:2d:2b:58:04:
49:16:cd:da:8f:2c:1f:a0:0c:41:85:b2:51:97:da:
31:21:0b:08:08:12:00:d4:c5:d0:e8:ee:8e:94:5a:
fe:87:24:cd:de:af:8e:fc:46:b7:ec:af:bc:bb:a6:
71:ad:32:15:bf:22:95:81:d2:94:48:93:67:77:22:
b6:73:3d:40:57:2e:87:14:e3:c3:bd:97:63:d7:18:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:F3:DC:C6:43:C9:C3:0B:5D:0E:C4:D7:9E:0B:CD:06:98:E9:32
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.132.0/24
Signature Algorithm: sha256WithRSAEncryption
99:08:0f:4d:bc:f0:b2:12:05:9c:6e:f4:50:de:a3:e8:d2:ad:
32:e8:9a:fc:93:05:7a:f4:a5:d1:72:53:ed:1c:8a:6e:c9:df:
37:c1:bf:fd:71:82:3f:42:7d:d1:dc:c0:6f:49:4c:4b:b2:15:
f1:90:ad:af:95:17:73:54:f4:4e:7a:1f:21:7c:07:70:ec:12:
e2:4b:29:dd:1b:7e:12:24:b0:f2:13:48:e5:86:5d:f7:d1:c6:
54:e9:8d:18:b3:7a:03:9f:5b:c1:d4:d8:9e:7c:cc:35:8b:43:
72:7c:35:10:04:48:5b:89:ff:2f:c6:f0:36:dc:4c:45:62:3f:
71:cf:dc:9d:38:54:fb:fe:e3:d7:5a:f5:26:21:0c:ef:ff:12:
29:b5:8c:94:bb:20:d2:f6:b6:d2:9f:a1:23:db:0b:db:f0:3c:
be:e7:9d:a7:42:ad:d9:8c:fd:f0:a1:1e:6e:cd:4a:37:d1:73:
71:0a:7b:b8:83:d1:dc:52:92:49:eb:12:b1:c4:d2:c5:97:dc:
d4:b4:82:81:2a:25:4c:5f:a1:f2:48:54:a8:8c:e4:f9:d8:fd:
3c:32:8f:3e:ce:ba:1e:32:0c:e8:71:f7:de:a6:15:30:55:3e:
f2:f7:7d:7a:60:a2:7f:8c:47:37:87:6f:25:0e:2c:3c:b0:ac:
45:19:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:57 2025 by rpki-client