Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/DtSCY2LexgHL22pRI4dm3ZBuV-c.roa
File: DtSCY2LexgHL22pRI4dm3ZBuV-c.roa (raw, json)
Hash identifier: XVCaOMITiAS58jieu/uXTRhCho8vcal3ZaVM8DQRk0o=
Subject key identifier: 0E:D4:82:63:62:DE:C6:01:CB:DB:6A:51:23:87:66:DD:90:6E:57:E7
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0186B83DC2718D00219223C9719D2104A358
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/DtSCY2LexgHL22pRI4dm3ZBuV-c.roa
Signing time: Mon 06 Mar 2023 18:45:00 +0000
ROA not before: Mon 06 Mar 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 45.81.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:3d:c2:71:8d:00:21:92:23:c9:71:9d:21:04:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Mar 6 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ed4826362dec601cbdb6a51238766dd906e57e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:03:c9:09:b3:4f:db:82:8f:df:a8:9c:bb:
96:33:7c:9c:26:fc:93:28:c4:7a:fa:67:94:40:82:
18:e1:38:b1:fc:c7:f4:aa:d1:b4:40:ec:f1:40:34:
71:ac:33:67:2a:84:3e:08:65:ef:d7:3d:f7:4f:29:
b2:8c:1b:cd:82:c8:7d:f1:6a:17:d7:64:de:9f:f2:
92:f2:aa:4a:1e:87:a7:b1:0b:d2:be:07:a5:24:4b:
89:89:a6:90:0e:e8:04:bc:a1:fb:4a:7d:b7:69:0d:
9f:54:36:e8:95:38:0c:7b:04:cc:90:82:16:12:42:
b7:c3:04:fd:72:a2:7a:0f:11:5f:d1:f7:5a:2e:1d:
16:f3:ad:6a:25:db:29:e4:bc:0d:b5:a1:0c:05:5c:
7f:b2:ec:05:87:ba:bd:67:2f:d6:5a:ee:05:94:f8:
e6:71:d9:cc:a1:94:e8:6f:2e:e1:f8:86:5f:8c:d9:
1e:ca:4f:ec:c3:7e:e7:8e:3e:72:1b:45:b8:cb:75:
d5:ba:10:e6:0e:ec:a2:2d:96:2b:3e:9e:d6:74:1b:
a0:19:2d:4b:8a:98:85:d0:dd:71:23:06:35:3d:c4:
9b:b7:f2:88:df:2e:59:91:62:f8:af:2d:62:fa:42:
d9:96:0a:1c:d3:d5:44:4b:00:08:37:c2:cc:9c:d5:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:82:63:62:DE:C6:01:CB:DB:6A:51:23:87:66:DD:90:6E:57:E7
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/DtSCY2LexgHL22pRI4dm3ZBuV-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.26.0/23
Signature Algorithm: sha256WithRSAEncryption
25:4a:87:aa:da:ce:38:32:f8:68:8a:9c:f5:d3:8a:2f:1d:47:
33:3d:6a:db:9e:6d:0c:ad:5d:96:c8:4c:a2:e3:8e:dd:0b:01:
85:38:77:e1:41:2d:3e:cf:4e:68:27:2a:eb:fc:2c:ca:97:33:
e1:04:76:00:16:a3:75:3e:1d:61:fe:12:26:46:2f:34:d4:c0:
e8:f9:9a:d5:d0:83:8d:8c:e2:e2:7a:72:7d:88:1e:b1:7f:bf:
ee:dd:56:d6:04:65:b8:77:83:b3:e0:45:ff:97:b8:38:e6:ef:
ed:df:f8:0d:c9:7c:87:9a:04:7d:c0:59:95:3c:4a:56:9d:30:
c9:ce:fe:3c:ef:ec:61:84:05:c7:24:c2:96:b0:05:a3:c2:11:
fb:97:b3:70:f3:6d:b7:f3:1f:0e:33:ec:99:93:64:52:b7:d2:
93:1c:2e:c3:35:9b:5a:87:13:0b:46:82:5b:e8:23:31:d6:96:
43:94:37:04:2a:7a:6d:b8:c2:5c:dd:e8:0a:bc:3b:97:b8:82:
b0:5b:f3:a2:10:2b:76:86:28:99:4b:2e:88:4e:8b:16:74:9e:
52:a1:ca:46:94:3f:d6:fc:78:41:a6:c8:71:eb:7e:12:ab:c2:
0b:23:32:a0:d6:ba:24:b4:8e:8e:d7:88:07:03:6c:02:a0:cb:
39:ec:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:03 2025 by rpki-client