Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/t6RyYZj7aDm7ZlCuhywKI8uBlak.roa
File: t6RyYZj7aDm7ZlCuhywKI8uBlak.roa (raw, json)
Hash identifier: WSj8sSg2zG6bIm+R3DJg8vRiB8pHx2kwvOXvsgn8Tvc=
Subject key identifier: B7:A4:72:61:98:FB:68:39:BB:66:50:AE:87:2C:0A:23:CB:81:95:A9
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018656B3DAC422A339C12259924940B8DAB0
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/t6RyYZj7aDm7ZlCuhywKI8uBlak.roa
Signing time: Wed 15 Feb 2023 20:11:12 +0000
ROA not before: Wed 15 Feb 2023 20:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 45.81.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:b3:da:c4:22:a3:39:c1:22:59:92:49:40:b8:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Feb 15 20:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7a4726198fb6839bb6650ae872c0a23cb8195a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:6b:82:15:33:0f:1d:3e:44:ac:12:d8:d5:
69:05:66:ea:1e:62:53:2f:f1:f4:03:a9:8c:7c:6c:
68:a0:aa:f5:ed:33:95:7b:bc:55:72:fa:db:99:10:
6e:00:e2:8d:81:28:da:4f:79:81:4d:8d:70:a4:0a:
e7:d9:df:b2:b9:60:14:10:3e:ea:2e:7e:ad:d0:f0:
ff:09:a8:cf:33:cf:83:0c:99:1e:b2:13:dd:d6:b1:
3a:17:73:fb:49:8b:90:fa:7a:eb:7b:35:cf:e7:79:
23:29:c5:53:cd:34:ca:47:1a:e8:ae:e1:4b:30:dc:
c1:c3:91:09:5c:60:54:78:5d:02:44:ab:9f:3a:36:
1e:5e:57:73:11:fa:61:35:c5:10:91:2f:c3:b3:3b:
cb:9d:28:b0:b8:d3:3f:57:04:e4:ce:de:4e:81:eb:
90:a4:3b:e8:9f:ea:1d:01:3b:30:4f:1b:60:51:31:
da:47:75:eb:5a:14:e3:1f:df:e5:51:80:13:2f:af:
46:29:d2:a5:48:e6:3d:c1:0f:21:82:01:b7:15:2d:
90:6d:2b:ec:13:92:03:fa:52:95:c0:b4:1f:01:75:
9b:2d:ff:99:84:f9:e3:b8:26:70:0c:c5:1d:a3:8d:
d7:22:7a:6e:4d:b9:5f:85:e7:37:66:91:60:c0:6d:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:72:61:98:FB:68:39:BB:66:50:AE:87:2C:0A:23:CB:81:95:A9
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/t6RyYZj7aDm7ZlCuhywKI8uBlak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.26.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:f9:b8:ed:2d:f1:7e:c2:fe:03:3e:7e:e0:f3:fe:4f:f8:72:
07:75:bd:d2:02:c5:fa:81:9a:e6:24:88:dc:f8:93:66:40:9d:
22:9d:6d:bb:ff:02:6a:54:2a:4a:bd:98:b1:44:a8:cc:e8:2c:
8b:2c:d6:70:f3:0c:6a:48:0d:c6:5c:0d:eb:2a:43:47:94:65:
bc:56:ff:0d:ed:26:17:b4:37:c7:fc:4b:f0:6f:ed:30:f0:85:
0a:3b:81:cf:ce:86:34:c0:87:4c:d5:1f:2e:f8:34:e9:36:e9:
2f:d0:92:6d:0e:b0:a9:e1:61:47:b9:25:1e:3f:20:f4:33:cf:
2d:dd:c4:f3:4f:53:41:41:8a:06:98:bb:2d:ff:4c:9a:23:45:
6a:86:c6:5f:f6:07:41:30:03:cc:ae:03:41:7b:8b:87:34:84:
dc:a3:fe:95:eb:9a:b2:52:f9:6a:2a:af:2c:58:4a:b4:d6:1f:
50:e9:27:07:22:27:3f:e3:d3:b5:d3:95:6c:dd:00:25:11:0c:
80:2b:70:f1:25:ca:88:6c:6c:51:f7:f9:ee:cf:61:03:63:db:
8b:4c:17:1e:99:32:7b:ed:24:0a:22:86:90:5b:32:9d:bd:2d:
1d:05:93:44:04:20:48:4f:db:45:4d:58:a3:98:ac:e0:ae:cf:
39:85:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:16 2025 by rpki-client