Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/E76Hy44yfNT_FwJ3VUbLsFjeV8E.roa
File: E76Hy44yfNT_FwJ3VUbLsFjeV8E.roa (raw, json)
Hash identifier: rZH8txkxHpU8FRlQMVO4nItDUq2cIcsVMka/JdS6rGE=
Subject key identifier: 13:BE:87:CB:8E:32:7C:D4:FF:17:02:77:55:46:CB:B0:58:DE:57:C1
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 01857139ADB1A084070991090D01663A741D
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/E76Hy44yfNT_FwJ3VUbLsFjeV8E.roa
Signing time: Mon 02 Jan 2023 06:44:43 +0000
ROA not before: Mon 02 Jan 2023 06:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48817
IP address blocks: 45.67.64.0/22 maxlen: 24
2a09:7140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ad:b1:a0:84:07:09:91:09:0d:01:66:3a:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 2 06:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13be87cb8e327cd4ff1702775546cbb058de57c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:ee:e4:47:e6:42:54:43:7a:aa:06:7d:74:
22:c5:4e:0c:66:af:f9:f8:8a:44:db:a2:4a:8d:c3:
bf:63:08:36:c9:38:d3:3f:58:c5:9d:e8:f3:2c:8f:
a1:44:83:16:98:50:0e:33:e8:34:f3:a2:0c:12:35:
85:e8:6d:d0:8e:9b:06:76:43:d1:2d:6a:37:c9:95:
6b:9a:b7:88:c3:06:cc:db:dd:9a:b7:1c:60:df:9d:
31:98:fa:e2:cf:13:41:f6:83:46:97:25:26:6c:0b:
bd:a0:87:e1:a4:d3:7c:84:19:a3:31:1b:8d:44:d7:
e0:40:28:49:13:bd:e7:a1:46:42:fd:5b:15:9c:04:
1e:41:86:9b:cf:69:7f:47:67:90:88:7b:cc:b1:e5:
a3:21:2f:b3:af:a3:e5:94:f3:aa:7c:00:d2:6d:f2:
e3:d4:81:7e:ba:8b:09:ef:c4:d3:15:cb:04:ee:ee:
f7:fd:cb:07:b7:2d:32:14:d5:c8:34:a0:71:a0:22:
97:86:52:e3:cf:a7:5e:2b:5b:6d:57:4a:4f:b9:22:
85:25:6f:0e:9c:5a:fe:56:d1:76:6e:a2:ba:74:2c:
1b:75:01:39:f0:fd:f5:30:3c:d7:c7:57:3b:2c:60:
dc:bd:35:df:0e:bc:06:fd:12:51:fe:97:e1:28:f9:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:87:CB:8E:32:7C:D4:FF:17:02:77:55:46:CB:B0:58:DE:57:C1
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/E76Hy44yfNT_FwJ3VUbLsFjeV8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
IPv6:
2a09:7140::/29
Signature Algorithm: sha256WithRSAEncryption
99:56:9d:f8:51:34:ba:9a:60:7d:4e:8e:f8:4e:cc:d6:e3:5c:
f2:61:37:a0:37:77:94:1b:94:71:a6:9f:7e:83:b8:f3:8f:a1:
4c:6e:26:0c:f9:87:38:09:7c:29:68:7b:8d:e3:4c:c0:a5:39:
e4:ae:93:ad:db:e5:7e:a9:92:2f:1c:51:c0:0d:24:84:48:87:
81:e3:60:4c:41:8e:51:57:11:32:88:bb:7c:0e:a6:78:70:51:
c0:7c:8d:28:30:e7:7c:e8:29:50:4c:d7:f3:4e:95:86:c7:7c:
f8:ec:e6:30:05:68:2d:2b:91:fd:de:90:ee:f3:ff:27:42:ae:
c9:bb:55:d9:e5:28:aa:09:9a:35:14:be:27:c3:bc:bc:f5:fe:
1b:22:b0:96:32:e7:65:8a:44:a9:44:fc:6b:12:41:89:b3:b4:
e9:a6:e7:05:10:e6:bb:25:f0:51:6a:41:d5:75:de:8f:00:2e:
9b:41:0f:12:83:03:ad:65:f8:6c:bd:e5:7a:4b:6c:5f:71:b6:
13:c4:4e:4e:1b:17:7d:2e:c2:80:b4:da:0d:cf:11:56:06:50:
91:6d:4f:3c:73:10:3b:8a:a6:43:0e:a5:d0:91:22:ce:d1:32:
90:fc:e6:7b:d6:08:fa:2d:cd:65:1c:7d:1d:c6:fc:04:7d:1f:
53:a8:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:03 2025 by rpki-client