Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/pAETGgEjYMqNyYh4iTXPFMu9Qzk.roa
File: pAETGgEjYMqNyYh4iTXPFMu9Qzk.roa (raw, json)
Hash identifier: 9dKB2ujREDpwXpZkmKYJ2Vfv+5MBUipQAqoBdm2l/oM=
Subject key identifier: A4:01:13:1A:01:23:60:CA:8D:C9:88:78:89:35:CF:14:CB:BD:43:39
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0183113C196C1277C7B35C065EEC60580607
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/pAETGgEjYMqNyYh4iTXPFMu9Qzk.roa
Signing time: Tue 06 Sep 2022 05:18:14 +0000
ROA not before: Tue 06 Sep 2022 05:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44609
IP address blocks: 45.157.244.0/22 maxlen: 22
45.157.245.0/24 maxlen: 24
45.157.246.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:3c:19:6c:12:77:c7:b3:5c:06:5e:ec:60:58:06:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Sep 6 05:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a401131a012360ca8dc988788935cf14cbbd4339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:70:f3:f0:44:cb:67:66:30:5a:d8:8b:8f:
09:4e:e7:99:4c:70:21:98:0c:9d:e9:1d:a8:39:70:
c4:e2:df:27:00:2e:b7:2e:90:10:25:f0:4e:bd:ac:
02:94:3c:21:fe:40:2f:3b:f2:5c:ec:b7:98:e9:4f:
dd:72:20:52:ad:bf:9c:13:c6:6c:0f:4d:94:47:75:
ff:b5:e9:dd:e9:cf:cc:e1:d6:41:a4:90:f5:54:e4:
5d:a5:1c:09:81:f3:06:1f:51:b5:73:83:e7:77:5a:
b6:70:11:51:00:b9:31:1d:49:67:e6:3e:af:fb:5f:
09:17:30:06:75:ae:b0:3f:ca:30:d2:33:60:5d:ca:
44:25:6c:07:1f:d4:21:15:63:fb:8e:ce:36:95:f7:
6d:df:de:25:39:44:04:1c:11:17:a8:eb:dc:00:fd:
0d:cd:6b:b2:bb:7e:d9:b8:48:94:23:46:89:6a:a0:
93:7b:28:24:ec:57:09:c5:07:4e:94:31:2e:d8:e0:
5c:ae:3d:8c:23:05:d0:1f:f0:c9:69:b3:27:8c:0f:
ec:79:f8:44:bd:09:5d:ec:e4:6d:9c:d8:a6:c6:9c:
2c:0f:62:91:36:9d:34:ac:ca:cc:67:ac:4c:6f:c9:
23:da:b6:c8:36:44:70:eb:ef:e0:ba:f6:7a:0d:e2:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:13:1A:01:23:60:CA:8D:C9:88:78:89:35:CF:14:CB:BD:43:39
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/pAETGgEjYMqNyYh4iTXPFMu9Qzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:db:33:33:0e:93:cc:04:b2:32:50:60:f7:0b:d2:4b:dc:88:
c7:c0:d3:04:a7:46:2f:bf:ca:98:15:9f:df:3e:ff:34:85:4e:
04:cd:bd:02:64:26:06:e0:fc:e8:d0:63:cd:56:e1:e5:d0:17:
b2:c9:fb:7c:c7:1c:8a:a2:fe:ac:8c:83:a9:d4:44:af:a3:fb:
7f:4b:36:df:db:35:38:97:c7:a5:f0:48:dc:76:55:8a:e5:8c:
f7:14:27:18:c1:9d:41:de:33:87:40:c2:88:0a:a6:f9:d0:73:
94:a3:63:91:61:da:fb:33:af:45:e4:fa:ff:97:22:8e:1a:40:
10:eb:ab:11:2d:91:21:77:53:b0:ac:48:04:74:bd:c0:eb:6f:
43:11:84:dc:4d:1f:50:28:d9:61:13:be:39:ca:00:5d:0d:f8:
ba:a0:0b:68:5e:e3:a7:ea:65:94:ac:18:ec:73:44:65:82:29:
5d:f3:86:ec:37:71:8d:98:f0:bc:08:7a:22:dc:43:7e:f5:30:
46:0b:0a:d0:a3:fb:43:07:48:e2:14:5a:23:e2:9c:ba:52:a2:
d9:de:80:81:2d:3f:3e:28:42:eb:05:35:3e:7a:fe:1c:cf:f5:
70:b9:80:d7:57:2d:8a:1d:11:58:c4:78:c8:e5:2e:a2:e8:bd:
86:56:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:32 2025 by rpki-client