Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ROn-DVge5NWACLk9Z6hOIJJHGlE.roa
File: ROn-DVge5NWACLk9Z6hOIJJHGlE.roa (raw, json)
Hash identifier: putOjKaTXbsQyHnenxbOj09rVShP3/Ez+rrYPVhYBKg=
Subject key identifier: 44:E9:FE:0D:58:1E:E4:D5:80:08:B9:3D:67:A8:4E:20:92:47:1A:51
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 018BF0C9899CD3BA1CA362B8CCC3383B5C6D
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ROn-DVge5NWACLk9Z6hOIJJHGlE.roa
Signing time: Tue 21 Nov 2023 07:30:21 +0000
ROA not before: Tue 21 Nov 2023 07:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212692
IP address blocks: 45.10.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:c9:89:9c:d3:ba:1c:a3:62:b8:cc:c3:38:3b:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Nov 21 07:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e9fe0d581ee4d58008b93d67a84e2092471a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:c5:9b:67:76:bd:48:50:89:1c:e9:61:bd:
b0:7e:3e:b4:26:8e:48:3a:d0:0a:35:dd:80:04:64:
e3:8e:9d:76:6d:6d:78:9d:97:a7:6e:48:15:ae:c6:
82:9b:41:e8:5c:60:ee:60:d0:16:b0:12:7b:e8:b8:
98:a4:5f:f9:d9:8a:d3:ed:85:90:20:9a:e5:1c:59:
62:4c:60:ff:ca:a5:18:03:85:72:95:50:a8:d7:a9:
4e:b1:bf:b8:32:04:a5:15:fe:a2:6d:0d:10:b9:50:
9d:32:df:0d:8d:a4:39:15:e6:f1:6e:69:63:f4:34:
ed:5b:2d:8a:b2:1c:f4:89:94:27:18:5e:b9:bc:51:
41:d2:68:61:fb:fb:82:fd:b6:f5:d1:16:31:d3:ad:
63:a8:cf:01:c3:5e:3d:38:5f:6f:bc:52:2c:92:20:
a0:20:b0:c5:55:f9:f4:78:a1:bd:01:59:91:ba:e4:
31:cf:96:3b:ec:b5:70:b1:dd:68:a4:cd:34:85:a9:
30:49:07:e7:4d:4d:22:45:ab:57:e8:98:fe:61:8c:
a2:a7:49:0c:87:2d:87:c8:63:41:d2:06:85:55:f4:
60:4e:ff:e1:c0:7b:86:d0:e9:2e:db:ca:aa:17:24:
f8:c0:7e:7e:8a:0d:35:e1:21:a9:36:34:bd:94:cc:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:FE:0D:58:1E:E4:D5:80:08:B9:3D:67:A8:4E:20:92:47:1A:51
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ROn-DVge5NWACLk9Z6hOIJJHGlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.202.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d5:60:68:29:69:26:e6:14:48:92:64:33:ff:af:82:08:b4:
3b:da:59:ee:2b:7f:aa:8a:f8:79:7c:53:d9:c7:8d:4d:a1:c7:
6f:03:a5:68:74:f0:c0:b4:57:a0:97:fd:f7:4a:12:57:05:24:
23:db:b5:2c:26:7c:30:98:ae:3d:6b:bb:f7:f1:53:35:0c:de:
68:d8:85:f4:e8:eb:fa:d7:34:37:0d:ba:f3:c9:bc:94:83:d8:
20:48:66:f0:fb:49:bd:3f:8e:5a:c1:ae:68:ac:00:86:48:64:
6c:b7:5d:36:d7:bb:6d:1b:5d:25:ae:95:00:30:fc:65:10:36:
9d:13:c2:e3:4b:56:0d:f2:68:3f:43:97:6b:2b:06:3b:fe:eb:
0f:d5:2e:3c:42:37:c0:03:07:28:a6:a0:13:e2:05:77:d5:0e:
bb:00:4c:8b:b9:fe:09:e0:e8:e1:05:70:d3:94:b6:3a:1d:3b:
a3:97:f2:98:27:51:b5:ba:1f:d1:e4:e7:04:52:42:1e:3e:ea:
6f:0a:31:ea:4a:08:19:54:a1:36:2f:f2:20:eb:60:7f:fe:08:
da:7d:26:26:0a:0f:58:3c:06:d4:e0:81:3d:26:e9:3f:73:0e:
ee:f3:f8:2d:d8:a1:3e:72:9e:41:ea:76:c3:9e:18:3a:9c:f4:
8f:4a:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:18 2025 by rpki-client