Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rxOk5lBnmdE9Eq-PWlYP5LFv8EE.roa
File: rxOk5lBnmdE9Eq-PWlYP5LFv8EE.roa (raw, json)
Hash identifier: vV5hYNk9tZr0pdnOD6ggGjrEOMaeE6QTcZRAKPxhtzw=
Subject key identifier: AF:13:A4:E6:50:67:99:D1:3D:12:AF:8F:5A:56:0F:E4:B1:6F:F0:41
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0188FDDBBD17AC6EF02C2AF0F008ABA3B679
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rxOk5lBnmdE9Eq-PWlYP5LFv8EE.roa
Signing time: Tue 27 Jun 2023 17:16:56 +0000
ROA not before: Tue 27 Jun 2023 17:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:db:bd:17:ac:6e:f0:2c:2a:f0:f0:08:ab:a3:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jun 27 17:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af13a4e6506799d13d12af8f5a560fe4b16ff041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:db:a7:a5:1b:8a:d5:a6:83:31:a2:4a:f5:
ba:cc:81:96:e5:05:0e:f7:ac:a7:58:07:ca:02:bc:
17:c7:ed:72:51:aa:af:e1:4a:ee:32:ec:ab:42:bb:
6b:34:cb:3d:bb:c8:49:ac:fa:d6:d5:b2:6b:4e:0e:
eb:2c:db:08:55:f5:7f:ce:0c:e9:e8:c9:f9:d3:b1:
6f:53:8a:3d:ed:cd:8b:10:2c:29:48:ab:7a:e9:38:
ee:86:b3:2b:98:f6:79:4e:53:52:00:ac:91:ce:b9:
8a:83:73:c6:37:35:f6:ed:44:e3:95:ba:52:2c:c4:
31:2d:3a:7c:96:7e:31:a5:f5:27:c2:bf:e3:74:aa:
9a:cc:a9:12:f6:d6:8c:9e:7b:2d:fb:4a:9e:ec:bc:
93:8e:5c:72:e7:af:66:99:f1:54:e8:c0:41:fd:9c:
db:df:c6:b8:51:c0:a9:d9:09:fe:70:7c:f5:26:83:
62:55:8e:f2:cb:ef:e5:06:16:43:51:f5:d4:99:3f:
67:52:40:1c:0d:6e:34:e9:0e:15:33:24:66:12:a2:
b4:63:60:13:4c:9a:68:b0:38:e7:dd:e4:8d:66:5c:
48:29:17:c7:0f:90:8e:ed:df:78:69:c5:c5:ce:05:
f5:a3:c9:c0:a6:18:fe:cc:67:0f:aa:53:e4:9d:81:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:13:A4:E6:50:67:99:D1:3D:12:AF:8F:5A:56:0F:E4:B1:6F:F0:41
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rxOk5lBnmdE9Eq-PWlYP5LFv8EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:dd:57:37:d9:47:39:2e:01:96:a0:f1:56:58:d7:62:21:
3b:2f:5b:6c:a3:01:ef:a8:3e:7b:57:b0:45:da:c0:cc:b4:7a:
2f:2f:48:39:a1:7f:6f:44:18:ed:23:fe:ea:70:4e:8a:fd:41:
3b:44:a0:2e:85:91:6f:71:ca:ed:d7:57:d7:79:9f:35:f3:a7:
22:8a:f7:ec:f7:23:7d:7d:48:f6:23:0e:5a:77:d1:b4:07:63:
93:c3:38:cc:b1:9c:1c:31:43:0b:8e:7f:2c:0c:fc:46:da:c7:
bc:95:28:1f:af:07:72:cc:f4:e9:1a:e6:ce:fa:9c:af:e8:dd:
89:d7:55:2d:b0:be:eb:8a:c5:ac:5d:f4:b2:80:42:87:46:23:
f9:40:23:53:40:74:69:47:44:93:76:aa:bd:cb:24:50:d7:64:
9d:e7:aa:d6:5a:71:5c:ee:b3:3d:66:d3:8f:ed:c2:59:26:5a:
6e:12:7e:23:3b:e7:63:5a:37:d5:c2:a1:25:b9:3a:2b:37:96:
08:21:3a:5c:10:65:e0:5c:cf:00:30:63:8f:72:3e:58:bf:75:
61:ea:e6:9b:ff:2d:e0:d8:99:60:db:72:91:2c:b6:91:ef:1f:
eb:97:00:3a:8f:37:bd:5b:4d:41:dd:38:a2:20:02:ce:a8:c6:
bd:55:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:16 2025 by rpki-client