Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/8j7pEtovPPZOYp0QRgnP3Qpq3EA.roa
File: 8j7pEtovPPZOYp0QRgnP3Qpq3EA.roa (raw, json)
Hash identifier: o29qQ6dt4WYp7SZ+oV57QkwbL2zO5hgscemExpp3oyc=
Subject key identifier: F2:3E:E9:12:DA:2F:3C:F6:4E:62:9D:10:46:09:CF:DD:0A:6A:DC:40
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0183B2B9C2C002E59553B50F93A3A21F63A5
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/8j7pEtovPPZOYp0QRgnP3Qpq3EA.roa
Signing time: Fri 07 Oct 2022 13:54:21 +0000
ROA not before: Fri 07 Oct 2022 13:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.13.124.0/22 maxlen: 24
2a03:fd83::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:b9:c2:c0:02:e5:95:53:b5:0f:93:a3:a2:1f:63:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 7 13:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f23ee912da2f3cf64e629d104609cfdd0a6adc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:2b:f8:2b:72:40:38:9a:1a:3b:6b:51:72:
d4:37:f0:21:31:2d:3a:02:0c:5b:71:4a:c1:29:f3:
63:ef:c7:41:58:bb:b9:77:7b:84:d0:07:df:02:b4:
f0:de:2d:d9:6f:26:f8:8e:92:41:3d:bf:2e:dc:b7:
02:57:f9:b7:27:27:99:84:1c:ba:47:87:4b:f6:a1:
9e:e7:58:03:7c:78:0a:de:0f:f4:bd:e4:9a:7f:87:
45:82:17:41:f4:db:f8:7c:73:2a:09:0e:87:3f:0c:
16:c0:bc:44:fb:8a:d5:6f:a9:80:58:b1:a8:30:88:
07:ed:2c:1d:0b:0a:44:e6:30:44:39:4f:79:5c:86:
24:83:c1:90:53:e5:b2:45:63:dc:59:df:88:b4:48:
5d:45:f4:f6:30:4c:51:05:0f:2d:c1:17:5c:f1:f6:
b0:5d:08:af:83:50:a0:df:c4:f9:6b:f5:8f:d1:75:
92:17:d7:90:07:63:75:bb:1b:9d:39:3d:78:c3:05:
e8:c4:e2:ab:ac:ed:77:17:83:8c:39:3b:ac:af:47:
0d:46:4d:8e:e4:b9:81:84:18:3b:39:47:f9:76:ba:
fa:f1:76:00:a2:de:5b:41:9b:27:95:6b:3b:23:2c:
4b:0f:e7:2d:52:c8:a7:05:c5:2e:a5:0d:ce:db:0b:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:E9:12:DA:2F:3C:F6:4E:62:9D:10:46:09:CF:DD:0A:6A:DC:40
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/8j7pEtovPPZOYp0QRgnP3Qpq3EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
IPv6:
2a03:fd83::/32
Signature Algorithm: sha256WithRSAEncryption
92:30:ac:1a:a5:bb:b6:0f:51:ba:2f:71:a2:9e:47:34:f4:cf:
13:a6:41:75:cf:8a:1f:c2:14:cf:bb:46:62:9e:4f:b5:0c:9d:
86:c8:0e:b8:81:11:f1:18:20:7f:53:5b:85:91:a3:e0:95:6a:
d5:12:89:ee:eb:8b:02:6a:84:17:80:32:19:53:b4:6f:ce:93:
bf:81:34:e8:c3:57:2a:68:f6:61:87:50:a9:67:19:be:0a:8a:
0d:46:89:b5:8b:4e:8d:05:7b:c6:5c:cf:da:1e:02:f7:bc:58:
43:5d:f4:ad:2a:ae:21:55:da:d9:1e:6e:4a:71:a0:a2:8d:e2:
b1:ef:a2:cb:91:f2:ef:af:aa:1f:98:0f:00:1c:e8:15:cd:85:
8d:3a:59:34:8c:18:7d:08:11:44:e8:87:d2:75:4e:18:a9:0f:
3f:79:41:cd:71:c8:e0:50:fc:38:31:e4:64:3b:44:7b:db:34:
14:ad:6a:9e:cc:65:54:dd:90:5d:b2:de:9f:35:b8:b7:a3:d5:
c0:73:b3:dc:ea:b3:f3:3d:27:26:81:85:d0:d2:99:1a:b4:1a:
7d:67:9a:54:a0:8c:39:25:f4:de:5e:2a:f5:28:4b:dc:4a:10:
51:26:af:a2:43:59:b4:5d:d9:73:89:46:65:5d:b7:95:ef:e6:
bc:16:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:23:12 2025 by rpki-client