Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa
File: IiCTYi6Wzz7PZc65FZMbZud3AkA.roa (raw, json)
Hash identifier: UzVkN9NdkwGbXaHnTRj839T7kpHZTD8UQAR28GWtL5c=
Subject key identifier: 22:20:93:62:2E:96:CF:3E:CF:65:CE:B9:15:93:1B:66:E7:77:02:40
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 01856CB8503BC645D484F1F6B499FE635041
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa
Signing time: Sun 01 Jan 2023 09:44:56 +0000
ROA not before: Sun 01 Jan 2023 09:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197637
IP address blocks: 45.67.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:50:3b:c6:45:d4:84:f1:f6:b4:99:fe:63:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Jan 1 09:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222093622e96cf3ecf65ceb915931b66e7770240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:6a:ed:cd:cb:71:8c:64:5e:67:60:78:c6:
0a:63:d0:e9:ab:31:4c:5b:53:17:23:56:e6:ae:26:
67:bd:05:0d:54:d8:8f:2b:d2:5c:7a:b1:e3:64:db:
b7:67:c1:02:56:ec:2a:11:bb:ba:9c:32:44:7b:54:
88:44:72:49:c0:98:c9:99:1a:0b:a7:0c:49:87:e1:
ee:bd:74:68:5c:01:ca:6c:e5:4a:92:a5:ff:28:7f:
5a:59:0c:b7:81:0e:bb:ee:9e:e0:8f:ea:c6:c1:61:
cd:70:42:ea:62:2a:2a:f4:2d:89:95:b8:52:5b:f3:
f8:27:13:f3:88:9c:67:ac:65:a9:00:05:b8:63:ed:
55:7e:bb:1b:b8:0a:53:d0:74:fb:fd:0c:33:b6:1f:
a0:80:6b:a4:b4:b8:be:62:12:30:9e:2a:a1:23:7b:
72:17:bc:f5:21:75:89:a7:b3:c0:dd:3c:30:00:56:
ea:67:dd:c3:20:b8:92:c2:24:1f:9a:91:f2:fa:23:
bf:8c:7a:80:7c:a4:ef:f6:cd:30:dc:30:c6:9d:f4:
1d:bf:02:b8:ed:1d:ea:72:74:59:67:7a:68:f0:42:
b7:75:96:2d:d7:9f:02:65:51:d4:2f:d0:87:96:a8:
7c:b0:1f:4f:a3:cc:15:70:fe:a1:22:95:1b:f9:20:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:20:93:62:2E:96:CF:3E:CF:65:CE:B9:15:93:1B:66:E7:77:02:40
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.28.0/22
Signature Algorithm: sha256WithRSAEncryption
18:57:98:51:92:37:6e:75:ac:db:4b:76:ed:30:7b:ba:bf:78:
5d:e7:26:60:c0:a0:83:fd:5c:13:8b:d1:32:40:fe:3b:7b:06:
b3:90:f5:49:34:79:e2:b8:f6:b9:69:b9:92:92:e6:10:83:4a:
8b:3f:c0:3c:75:25:fd:b3:63:cf:bc:8d:e3:3f:2a:8d:e7:c0:
c9:1d:4b:1d:aa:ef:f0:89:7b:dc:09:f5:f0:c7:c4:ec:12:31:
9d:a8:2f:2b:1c:c0:3b:d1:1e:54:84:be:3e:03:2e:43:4a:42:
26:44:0c:1e:25:6b:f6:0b:d9:eb:6d:14:0f:40:a6:66:43:8d:
6c:cf:a3:e4:7f:4c:7c:3b:9b:6d:f8:04:15:93:70:95:18:4c:
bc:8b:fe:6c:84:a1:65:34:27:24:91:0b:9b:88:92:79:6f:6d:
5b:18:ab:80:05:03:cb:1f:65:69:14:99:ce:17:8c:c0:2c:29:
15:ae:4e:fb:7e:a7:04:96:0e:88:98:30:71:24:d6:89:ed:43:
3c:51:9e:a1:34:b5:ba:f6:ca:3f:dc:00:ab:21:1f:2b:6d:4b:
1a:cb:3a:15:1b:82:0a:a0:38:07:36:a3:6a:4d:ec:99:4b:29:
a8:d9:d9:ba:47:78:f7:a3:5a:d2:e3:a7:8e:f0:cb:f1:ec:2e:
15:ac:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:48 2025 by rpki-client