Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/DgSVSXOi2OOJH9ShOzS0k8n8mpM.roa
File: DgSVSXOi2OOJH9ShOzS0k8n8mpM.roa (raw, json)
Hash identifier: CKv76FntV6bHo8RD6XGj60YichI7vU+tNLhqMNTiE6M=
Subject key identifier: 0E:04:95:49:73:A2:D8:E3:89:1F:D4:A1:3B:34:B4:93:C9:FC:9A:93
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 01857139E13CEA3883E21DA5F548C8994D1D
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/DgSVSXOi2OOJH9ShOzS0k8n8mpM.roa
Signing time: Mon 02 Jan 2023 06:44:56 +0000
ROA not before: Mon 02 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209031
IP address blocks: 45.9.240.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e1:3c:ea:38:83:e2:1d:a5:f5:48:c8:99:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Jan 2 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e04954973a2d8e3891fd4a13b34b493c9fc9a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:d7:fe:5c:9e:d3:5b:5d:51:22:d5:4f:cb:
a6:55:db:89:0d:fe:34:d7:f1:1c:26:18:ed:5e:22:
16:fb:31:fa:a1:ba:5e:3c:a0:e3:1a:ab:5e:5a:c0:
25:47:df:3a:a7:31:2b:d8:bb:47:62:50:4d:0f:fc:
3b:b1:87:73:e2:c2:fd:c7:a9:26:3c:3a:75:54:f8:
c0:6a:28:f9:35:16:e1:07:72:cc:b6:d9:f9:90:c5:
66:f5:b3:b4:bc:2f:04:ef:9d:c0:2f:2e:f1:8a:4a:
c6:97:a9:c3:c4:3e:ed:92:8b:2d:30:01:55:0e:e0:
07:47:f3:d3:64:95:17:68:17:4e:fa:e4:e1:a8:f1:
fe:bc:88:17:86:1b:b0:90:c2:b3:03:cd:c5:5c:77:
76:1f:90:84:b9:77:71:33:1b:02:25:85:01:be:32:
af:6a:bc:46:c8:d0:7d:e3:55:b5:24:9b:df:8c:b8:
be:cb:5c:10:9c:c2:e9:5e:a2:30:cd:b3:40:7c:7f:
71:a4:f0:eb:7b:71:08:75:a0:d6:e3:9b:30:95:62:
21:00:53:1a:91:73:d7:90:22:14:07:8e:44:57:02:
35:55:fc:35:2f:eb:78:98:63:03:8f:ea:d8:eb:6f:
7c:e0:0c:38:e1:60:c0:7a:30:1a:19:ac:2b:d6:11:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:95:49:73:A2:D8:E3:89:1F:D4:A1:3B:34:B4:93:C9:FC:9A:93
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/DgSVSXOi2OOJH9ShOzS0k8n8mpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.240.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f8:19:2e:c0:37:9a:1e:c8:3b:0e:3a:6d:24:59:52:39:23:
e9:68:e6:05:37:1d:ef:d5:5b:09:af:c0:81:47:60:4f:9e:6e:
76:95:91:36:53:30:04:68:76:13:d1:ce:af:1e:17:e5:82:00:
4d:ae:9e:0c:80:58:90:96:95:4d:bd:ed:44:d0:4d:58:e4:24:
c3:9f:ec:a9:72:c0:c0:70:f1:7a:f4:c2:db:9b:ce:18:e9:cc:
d7:0c:31:12:5c:46:05:19:cf:86:cb:2e:a9:7c:e1:eb:f1:1c:
17:00:ff:e5:45:0e:a1:78:2c:d6:eb:16:df:d3:12:3c:23:b4:
b9:29:81:48:16:68:eb:bd:b4:8b:1f:dc:b9:d8:d5:77:0a:5a:
36:d7:a0:ce:c5:50:c1:65:9c:a4:4e:de:68:95:bd:c6:dc:7a:
43:93:07:d2:07:4b:b7:a0:c4:4d:f9:a8:35:de:10:88:f2:08:
08:60:58:bc:f0:8e:92:1a:d4:81:c9:0c:46:d8:f6:8b:e1:58:
21:14:62:04:b1:05:f4:52:82:6d:ea:8b:02:70:85:69:93:64:
9a:68:48:47:f9:9f:d8:2d:60:08:18:2a:54:4e:9d:56:58:f7:
92:8c:3a:a7:07:22:6e:a0:ae:bd:ef:d5:47:67:e2:35:62:e1:
74:e2:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:58 2025 by rpki-client