Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/7cKIwjPtCsF9w_hIPEIkKahCyTw.roa
File: 7cKIwjPtCsF9w_hIPEIkKahCyTw.roa (raw, json)
Hash identifier: vmfzEahcI0ZA3gYzfG2q+XySmGGqDEksDoFbvm/QkIw=
Subject key identifier: ED:C2:88:C2:33:ED:0A:C1:7D:C3:F8:48:3C:42:24:29:A8:42:C9:3C
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01202DB5
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/7cKIwjPtCsF9w_hIPEIkKahCyTw.roa
Signing time: Sat 01 Jan 2022 05:59:25 +0000
ROA not before: Sat 01 Jan 2022 05:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.85.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18886069 (0x1202db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 05:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edc288c233ed0ac17dc3f8483c422429a842c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:f6:04:59:5a:aa:e1:43:7f:a2:09:7e:4a:
21:a1:52:a7:2d:aa:50:33:74:66:29:37:ca:93:0e:
4e:08:11:e3:61:3f:12:70:2c:49:29:6d:19:bc:f5:
04:6d:ad:98:03:2b:36:62:60:b5:b5:a9:d9:75:b6:
f4:51:45:cc:86:44:82:7f:ce:86:83:ae:cf:c5:1d:
2b:2d:6f:ed:63:91:ec:9b:d6:a0:ed:89:3c:c7:49:
8f:89:ab:cc:2e:f8:e7:69:b2:20:90:85:47:59:c7:
40:60:05:c3:aa:5c:4d:4e:1d:af:68:23:13:63:e8:
43:72:9e:35:23:e1:fc:64:a8:29:3e:90:8a:d9:30:
4d:42:60:a6:3c:91:2b:94:61:18:19:86:a1:a0:7a:
36:08:f2:0a:01:b0:67:df:51:d3:9c:2a:24:a0:b9:
ec:27:13:0c:14:92:b7:24:19:84:9f:40:11:72:f1:
7e:36:f4:27:82:66:5d:e6:f7:b7:2c:8d:a1:12:b9:
86:f5:f2:9f:16:6d:1e:8b:2a:2f:c3:de:dd:fb:71:
77:72:ea:f0:1f:0e:1d:64:30:2b:9f:71:fb:2d:56:
a4:80:38:66:b6:19:05:38:c5:d1:38:99:6a:3c:b6:
4c:a1:35:ad:b9:9e:d1:d4:af:ca:28:32:08:0f:a7:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:88:C2:33:ED:0A:C1:7D:C3:F8:48:3C:42:24:29:A8:42:C9:3C
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/7cKIwjPtCsF9w_hIPEIkKahCyTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f1:d2:e2:50:d5:da:f5:20:a4:6a:eb:d9:d3:21:51:2e:9d:
37:88:44:87:38:62:c2:7f:3e:bd:e7:f7:30:d7:f9:a6:bb:f9:
1c:26:d1:cf:88:d5:56:72:67:34:05:6a:a8:90:ee:84:26:e8:
94:27:aa:eb:20:a7:82:ca:bb:e8:4e:b9:e8:94:70:c6:e3:b9:
a6:9d:40:64:38:f3:7b:f6:3a:12:7d:eb:87:ab:51:92:1c:35:
fd:3a:d5:b2:c5:cc:28:82:31:c9:ca:56:cc:ec:96:a0:f1:f0:
73:88:cd:8f:10:91:3c:d6:cd:80:3f:ed:00:f4:c7:88:78:9f:
40:3d:83:20:6a:2e:06:df:75:95:5a:cc:f2:af:49:3a:35:b7:
61:4d:a1:a1:6a:f2:1c:37:16:e3:6e:35:f9:69:3f:58:04:f5:
57:c4:44:da:68:09:ec:6d:f2:91:1f:5c:e0:e3:02:31:6c:50:
9c:e3:ec:f0:f6:43:ca:26:57:c3:b4:7d:7e:63:db:4a:eb:f5:
d7:4e:63:76:55:d5:41:90:b8:a5:2b:30:c8:0d:62:0a:1a:fe:
a6:a1:2b:70:af:5f:14:35:f4:92:b8:a5:b3:a4:58:6a:7f:bd:
44:b3:86:57:33:ab:8d:4c:cf:b9:27:ae:2c:68:d0:b2:39:e0:
c2:6f:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:23 2025 by rpki-client