Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/0X-SAosgQb43OhF6ZItJhSV-Io8.roa
File: 0X-SAosgQb43OhF6ZItJhSV-Io8.roa (raw, json)
Hash identifier: 98O3MuwV3RpCooh5b26DPwLD/YuGCIdwRcySdwm+fNA=
Subject key identifier: D1:7F:92:02:8B:20:41:BE:37:3A:11:7A:64:8B:49:85:25:7E:22:8F
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0183A38ACD76CAD878C7795984BB72C6E789
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/0X-SAosgQb43OhF6ZItJhSV-Io8.roa
Signing time: Tue 04 Oct 2022 15:08:46 +0000
ROA not before: Tue 04 Oct 2022 15:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200781
IP address blocks: 45.13.124.0/22 maxlen: 22
45.13.124.0/23 maxlen: 23
45.13.126.0/23 maxlen: 23
185.96.42.0/23 maxlen: 23
185.96.40.0/23 maxlen: 23
185.96.40.0/22 maxlen: 22
2a03:fd80::/32 maxlen: 32
2a03:fd83::/32 maxlen: 48
2a03:fd80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:8a:cd:76:ca:d8:78:c7:79:59:84:bb:72:c6:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 4 15:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d17f92028b2041be373a117a648b4985257e228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:e0:00:af:d6:dd:9f:cc:de:e8:e3:ba:50:
c6:4f:b7:0a:da:e1:b6:b5:59:8d:60:92:52:60:c4:
c3:ef:9f:4d:e7:70:c4:15:f5:46:d2:f2:d0:38:41:
81:9a:6f:18:3a:07:95:41:e1:53:fc:0c:bd:69:2c:
32:dd:ff:77:0d:39:3e:05:d8:d2:7b:34:8e:9c:9d:
27:b3:2d:82:32:3f:23:23:7f:66:27:78:3f:b5:77:
19:9b:05:01:27:dd:b9:87:60:7a:d0:90:37:8a:ec:
16:ac:c9:1d:25:f2:1d:59:c3:4c:74:68:b7:74:2b:
97:29:1a:6f:64:5d:49:a5:20:84:68:e7:e8:48:bf:
cc:4b:98:55:01:86:e3:c8:11:18:b1:ae:e7:3b:e6:
ed:59:7f:69:5f:4f:5e:5b:01:96:87:51:af:d0:90:
5c:4e:db:1c:67:66:3d:58:24:2a:10:c3:1e:fd:43:
48:81:87:bd:d0:8a:49:27:4b:bb:01:8f:66:d5:63:
de:94:c2:41:6f:e0:8d:36:da:d5:e0:40:dc:4e:a6:
0c:55:49:44:89:f5:d8:37:74:f3:30:c1:98:f1:7c:
b7:48:14:5c:6e:cb:fe:81:03:76:d5:8b:a6:65:3b:
ad:69:92:d4:47:db:b7:06:d3:1b:78:75:7f:d0:9b:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:92:02:8B:20:41:BE:37:3A:11:7A:64:8B:49:85:25:7E:22:8F
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/0X-SAosgQb43OhF6ZItJhSV-Io8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
04:95:54:63:77:e8:b1:39:d3:36:16:41:a7:bf:e8:cb:15:eb:
22:b0:7b:6d:47:58:c5:e1:a6:bd:b0:9c:b9:10:d3:bc:92:d8:
84:6c:15:52:7e:11:64:56:02:c7:b0:3f:f7:18:73:5f:d0:0a:
c8:9a:c2:08:87:10:e0:c8:1c:8d:1a:c5:20:06:73:91:ae:c2:
08:fd:de:17:92:09:d8:78:35:b1:46:f5:c1:9b:3e:28:27:b8:
7d:eb:cc:f3:ba:43:9c:e2:1e:14:28:c7:a2:d0:86:bc:89:ac:
6a:12:a7:6d:9a:b4:15:87:39:70:f2:c4:01:ce:05:42:e4:0c:
ca:49:48:94:8f:ef:bc:14:60:6f:cb:0f:69:8d:3f:9f:9d:79:
69:87:12:b3:60:ff:b9:1a:d6:13:09:3b:61:96:84:1b:59:97:
1a:71:07:e7:30:60:57:fa:5f:b7:e9:3f:ad:de:3c:5b:e3:98:
ba:c4:7d:10:a7:00:0f:d7:09:21:3f:2d:b7:83:6d:e4:a0:34:
ad:06:80:c5:43:4f:e2:67:67:03:c9:4c:ec:83:1d:c2:55:e4:
32:67:8f:d0:94:f6:5a:2b:88:13:d3:89:f0:89:80:fb:39:a8:
1b:4d:8c:47:76:77:1e:cd:8e:4a:3d:cc:73:7d:36:7c:49:df:
a7:0e:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:12:45 2025 by rpki-client