Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/mxVwf-tVJm1Yx8Vux0dBm11mO04.roa
File: mxVwf-tVJm1Yx8Vux0dBm11mO04.roa (raw, json)
Hash identifier: pv+zrLjZvAPDfMuJwhaVAZnYtTgwxmVv5MRlzRxrH7I=
Subject key identifier: 9B:15:70:7F:EB:55:26:6D:58:C7:C5:6E:C7:47:41:9B:5D:66:3B:4E
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 01887165BA13EB20C84EB0610F3A9DE3A71B
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/mxVwf-tVJm1Yx8Vux0dBm11mO04.roa
Signing time: Wed 31 May 2023 10:41:12 +0000
ROA not before: Wed 31 May 2023 10:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.156.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:65:ba:13:eb:20:c8:4e:b0:61:0f:3a:9d:e3:a7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: May 31 10:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b15707feb55266d58c7c56ec747419b5d663b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:2d:d7:ad:5d:df:f4:0a:74:56:24:f0:2d:
69:d4:08:66:be:b0:65:69:b2:b7:cf:e6:0d:cd:02:
76:f1:86:7a:cb:26:5c:41:4f:91:7f:9c:64:c1:26:
c8:84:f4:a2:85:f6:a6:b6:56:fe:57:ef:5f:ec:ac:
61:8d:3f:ce:27:da:18:ca:2b:27:f7:fa:dc:43:2b:
35:a9:3b:c5:68:46:32:ee:5b:6c:a1:92:b2:ff:8b:
b3:43:80:95:5c:64:84:e8:ec:9b:2d:48:ff:a0:ef:
fc:17:34:f1:94:a1:b7:20:d8:4c:d5:01:db:a4:b9:
5e:23:27:21:97:95:61:a2:8a:42:7b:73:83:45:16:
61:2d:a9:70:57:ef:94:9c:9d:80:0c:dd:c8:37:03:
b3:bb:5a:19:76:4f:2f:fb:f3:76:f5:97:63:b9:c2:
6e:ba:91:3b:d7:5c:94:b3:e2:13:1b:53:fb:26:24:
cf:c2:2e:51:ff:a4:cd:81:88:a4:c7:3b:50:34:f9:
73:dd:91:2d:92:c5:c2:01:75:27:4d:42:59:23:4e:
75:ad:37:e2:8d:c8:22:26:df:43:b2:d6:17:3d:d8:
64:1e:1d:16:2f:4c:d3:5d:4b:fe:fd:32:e1:a3:ba:
90:c3:da:15:7a:d8:6a:84:a9:24:ff:62:8d:17:68:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:70:7F:EB:55:26:6D:58:C7:C5:6E:C7:47:41:9B:5D:66:3B:4E
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/mxVwf-tVJm1Yx8Vux0dBm11mO04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.87.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f7:3b:30:7d:9a:a9:2e:11:29:1e:3a:ce:e5:97:2b:05:e9:
63:3c:f2:3c:0a:ae:33:0d:fb:95:4a:7b:f4:91:34:0d:9f:79:
a6:0a:4a:66:f3:e0:5b:72:33:b9:58:92:20:05:be:f4:bd:47:
de:cf:fc:c8:72:e2:66:c7:ed:b8:30:fa:ac:14:22:00:8b:b9:
17:b7:40:7e:af:97:3b:1d:fe:48:6f:13:e3:3c:06:c9:ff:11:
7b:95:5d:d1:52:e7:84:34:50:2c:e5:4a:fe:04:da:b7:35:30:
cf:43:36:39:40:a6:f0:9c:99:bd:10:09:05:66:ba:57:43:2f:
66:00:32:d8:ca:18:3b:0c:05:2d:9e:65:1d:cc:2e:7b:99:1f:
1d:e8:e4:2d:90:30:56:7f:a0:c4:ee:03:b0:b9:9e:ae:b3:be:
b0:a3:17:43:c3:33:e7:8e:ab:6b:e7:c5:db:a4:2e:99:13:3e:
27:a5:03:13:6b:8f:b4:8b:e3:33:67:41:65:8f:71:09:e3:c5:
95:40:43:fa:87:22:b6:3e:bc:94:f3:e4:36:76:f4:42:2e:37:
50:39:82:33:1d:ee:f5:5e:9e:6f:88:66:df:30:0c:ad:46:2d:
dc:7d:14:01:15:34:75:d0:0b:70:92:1c:de:4d:8f:ed:71:fe:
9e:7b:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:31 2025 by rpki-client