Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/JeXfSxKULslAP-0QUOT167cfvB0.roa
File: JeXfSxKULslAP-0QUOT167cfvB0.roa (raw, json)
Hash identifier: oQy2r7LxMQs/BF7CPP52yhGfkaBnrxhJPH9CEX1+lFA=
Subject key identifier: 25:E5:DF:4B:12:94:2E:C9:40:3F:ED:10:50:E4:F5:EB:B7:1F:BC:1D
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01850FB22DCC45CEBF1766D75EC607928AB5
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/JeXfSxKULslAP-0QUOT167cfvB0.roa
Signing time: Wed 14 Dec 2022 08:13:33 +0000
ROA not before: Wed 14 Dec 2022 08:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:b2:2d:cc:45:ce:bf:17:66:d7:5e:c6:07:92:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Dec 14 08:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25e5df4b12942ec9403fed1050e4f5ebb71fbc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:99:04:bb:2c:01:75:c7:47:5a:fd:77:6b:
f0:71:8e:99:a2:7e:01:ed:5f:13:a7:d3:f7:18:93:
00:c1:e7:2b:f2:27:35:ce:26:cb:02:7d:4d:45:0e:
06:91:50:3d:0c:c2:b3:8d:b6:4e:9a:d3:1a:f2:b6:
04:44:1b:2d:11:1f:01:f6:df:36:45:39:2e:cf:76:
ce:97:6e:a9:5a:33:ff:e8:37:29:6e:5b:64:ac:bd:
9b:c4:45:bf:69:9f:08:88:6e:be:5c:43:dc:a1:a5:
92:2d:73:44:3d:97:c1:6a:22:78:61:74:60:42:1b:
54:29:f2:b5:ed:e7:e8:b8:ac:06:51:e4:b8:2e:2b:
2f:5d:43:2f:38:63:9c:4a:c1:81:32:3b:ec:b9:28:
d9:d5:56:ae:e5:35:04:7c:21:06:ba:49:a1:4d:60:
04:23:93:9e:b8:2d:eb:9a:00:0c:10:fc:30:26:0c:
51:36:27:91:b3:97:db:03:d4:27:9f:a9:cf:6f:eb:
05:17:01:a3:1a:17:c4:42:77:09:7e:8e:31:86:0d:
78:43:48:da:ed:58:d9:56:0e:e5:12:a4:01:93:ac:
8e:75:3e:0b:b3:cd:85:8d:a0:1c:86:c6:12:20:f5:
8a:56:57:d8:88:0b:b8:56:69:15:b7:e2:76:86:f8:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:DF:4B:12:94:2E:C9:40:3F:ED:10:50:E4:F5:EB:B7:1F:BC:1D
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/JeXfSxKULslAP-0QUOT167cfvB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d2:9c:5a:ea:43:04:51:37:a6:0f:e5:cb:77:83:f7:95:b6:
ae:ad:55:71:e2:5c:12:3e:48:53:3e:f9:8c:0d:f7:f1:d0:f6:
db:0e:fc:51:06:4c:55:39:bd:db:5b:38:c6:f3:48:5b:90:84:
a8:1f:16:bf:92:94:3c:d5:0c:f0:7e:45:c9:e1:fb:06:3e:81:
b7:7b:82:06:1a:68:77:30:68:ab:cf:ec:85:67:64:6d:73:74:
ba:95:f6:4b:80:09:f1:a6:5d:2f:f6:9b:62:7e:f8:60:ab:a6:
30:04:9c:af:ce:4e:02:c5:61:2d:04:2c:0d:f8:19:6f:19:f4:
5b:02:94:bb:32:e6:f6:44:2c:cf:ef:4c:3a:d7:6c:5f:3a:f4:
1c:84:65:d9:1c:1c:2c:46:4e:ea:15:2f:7a:37:d6:8a:ea:fd:
39:b7:d0:7b:b1:83:a4:dc:d4:0b:6c:5b:d7:bb:ae:fc:87:a9:
a9:b4:16:a0:ed:4e:70:3b:cf:eb:2f:72:be:a3:f7:6d:dc:98:
d4:2b:ee:86:74:42:af:65:28:57:3f:ef:9c:59:9a:a5:16:3f:
5d:f5:03:85:5b:3e:cd:bc:d9:cc:d9:d9:a3:8a:22:c2:2d:1d:
20:49:20:81:e7:51:07:00:f9:c1:6e:37:54:8b:37:4b:6c:6b:
5d:b9:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:31 2025 by rpki-client