Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/zM9D5qg8pKKjwEWpqsdS64Drmjw.roa
File: zM9D5qg8pKKjwEWpqsdS64Drmjw.roa (raw, json)
Hash identifier: 6XmnzWO5MB5MX4ml1Fou/Hv8jYIvWDeQPiIxR3JymQQ=
Subject key identifier: CC:CF:43:E6:A8:3C:A4:A2:A3:C0:45:A9:AA:C7:52:EB:80:EB:9A:3C
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 0183D6BA98622F8A517950BCD0DE8077DF97
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/zM9D5qg8pKKjwEWpqsdS64Drmjw.roa
Signing time: Fri 14 Oct 2022 13:41:36 +0000
ROA not before: Fri 14 Oct 2022 13:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 45.143.224.0/24 maxlen: 24
45.143.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:ba:98:62:2f:8a:51:79:50:bc:d0:de:80:77:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Oct 14 13:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cccf43e6a83ca4a2a3c045a9aac752eb80eb9a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:57:ee:1a:eb:a7:09:9d:bf:05:5c:5e:be:
e1:92:27:8f:6b:ba:8e:3a:77:4e:b9:a5:3d:66:eb:
e6:6f:c1:4d:2d:55:c1:2d:61:81:5d:dd:f2:96:89:
2a:df:b6:43:f2:00:9a:b4:f5:cd:df:0d:8b:ea:ec:
d7:0b:9a:0e:2c:65:10:6a:de:ae:40:f9:47:1e:01:
0f:9e:4b:80:fd:f7:a1:10:1a:d3:79:c4:c5:06:bd:
f2:32:3d:c1:0c:05:1d:14:1f:3d:46:47:a5:58:e7:
0a:aa:95:11:55:97:e2:0c:9e:af:f8:b1:8f:da:61:
85:6b:37:d2:36:86:2a:b5:02:bd:6d:4d:4f:cc:b9:
d6:ae:1a:43:23:35:a8:68:26:1f:31:19:d6:08:51:
7c:21:4b:2d:b4:81:eb:e9:0a:2a:27:cf:e6:b7:d7:
fe:11:a7:b8:83:ce:5b:bc:b9:46:a3:73:85:1c:45:
f9:63:a5:8f:1c:9c:a1:5f:2b:b5:bd:b0:53:40:33:
98:97:7e:a9:6f:bb:e8:44:82:89:14:4a:a1:f8:e3:
02:0e:a0:31:c7:da:77:dd:1c:19:85:7e:a8:9c:16:
04:e5:62:80:a0:a1:58:5a:3b:64:af:10:b5:a5:89:
d6:95:8a:7c:04:f9:35:c1:85:b2:80:2a:64:cd:b7:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:43:E6:A8:3C:A4:A2:A3:C0:45:A9:AA:C7:52:EB:80:EB:9A:3C
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/zM9D5qg8pKKjwEWpqsdS64Drmjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.224.0/23
Signature Algorithm: sha256WithRSAEncryption
89:b6:2b:77:03:7d:7c:e7:34:1e:cf:88:aa:5c:57:22:13:2b:
22:92:22:6d:04:e2:be:d8:b2:30:4c:d9:45:47:0f:4c:3c:48:
10:e8:5e:51:0f:ac:bf:72:88:c4:0f:2b:3d:6e:19:ab:ea:53:
74:30:4a:84:ce:15:ef:14:fa:5e:fb:40:7b:09:0a:d7:5a:25:
0a:77:b2:d0:fd:16:6f:c4:f0:a3:53:b5:f2:f4:a3:60:c2:62:
0d:d8:02:db:36:1c:f5:c4:bd:68:85:e1:7b:ea:55:2e:a9:a6:
37:11:45:59:a8:1f:6d:6d:34:0d:da:f5:55:15:6e:09:c4:bb:
70:aa:3e:d2:63:5b:2b:dc:c9:35:1e:b5:3c:6d:d5:0e:ad:1b:
c6:52:47:6c:72:25:61:d7:3c:9d:3b:c1:d1:de:58:a0:f6:c8:
8e:9f:36:10:0c:fa:3f:78:3c:e8:2a:c9:02:2d:9a:9f:42:52:
d2:0a:4a:b4:f1:cb:13:34:ba:18:6d:39:d2:d1:63:92:b2:c4:
5f:bc:34:58:4c:89:e1:a8:e5:f9:84:ca:dc:52:b8:dd:70:e0:
95:fe:c0:8d:b9:52:76:e0:1b:12:8c:b8:e3:08:b6:22:86:92:
5c:bb:50:af:ac:f7:f9:7b:fa:b8:f0:37:ca:6a:1d:80:41:ff:
18:6e:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:00:54 2025 by rpki-client