Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/8_EItbKZ7FocSrgf_9KlXHU0QCc.roa
File: 8_EItbKZ7FocSrgf_9KlXHU0QCc.roa (raw, json)
Hash identifier: RyWeRqCuj+huUmCKigiIYrhOD3Mk/2VBVxDJYyQbA+Q=
Subject key identifier: F3:F1:08:B5:B2:99:EC:5A:1C:4A:B8:1F:FF:D2:A5:5C:75:34:40:27
Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial: 0498B29F
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/8_EItbKZ7FocSrgf_9KlXHU0QCc.roa
Signing time: Sat 01 Jan 2022 06:52:07 +0000
ROA not before: Sat 01 Jan 2022 06:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208230
IP address blocks: 45.152.111.0/24 maxlen: 24
45.152.110.0/24 maxlen: 24
45.152.109.0/24 maxlen: 24
45.152.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77116063 (0x498b29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Validity
Not Before: Jan 1 06:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3f108b5b299ec5a1c4ab81fffd2a55c75344027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:f9:7c:f8:45:a0:48:f3:aa:5c:f0:5d:d4:
a4:f4:d9:44:f3:36:02:64:70:f9:6e:6c:72:0c:02:
f9:94:a5:3c:84:cd:61:37:f6:ca:d8:44:7b:e5:88:
c9:a6:a5:62:50:f8:14:b0:0b:28:d7:5a:f7:00:c4:
db:42:36:d1:1e:26:85:79:fc:bb:04:c4:49:d5:87:
cb:83:8d:f2:7f:69:04:bd:6b:44:f9:64:e8:f3:5f:
28:28:12:80:c0:5f:77:e3:7b:95:5d:9b:0a:d6:45:
e4:33:43:55:48:85:2b:37:78:12:4f:6e:b7:5b:98:
eb:41:aa:69:74:23:65:32:8d:f3:ee:d5:dd:80:2c:
97:7e:eb:fc:1a:86:fd:63:07:77:7b:b9:d9:28:7f:
b3:e1:8a:a2:e8:c4:bc:18:c2:85:98:1b:57:9c:6c:
c8:61:16:6e:87:b0:ef:75:95:85:9e:70:a0:2d:8c:
f1:48:35:d3:59:ed:b0:8e:c4:03:5f:7a:4b:08:eb:
b1:fd:a0:6c:fc:f2:c1:4b:04:07:b9:37:9c:5e:f4:
e8:66:9f:8d:f5:ae:ae:7d:a5:d7:6d:6f:f6:cc:8d:
64:9b:4f:75:7c:3e:bc:8a:d2:c7:01:b1:da:3f:19:
59:78:41:30:80:ef:e9:51:2b:b7:51:15:1e:10:90:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:08:B5:B2:99:EC:5A:1C:4A:B8:1F:FF:D2:A5:5C:75:34:40:27
X509v3 Authority Key Identifier:
keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/8_EItbKZ7FocSrgf_9KlXHU0QCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:16:f8:ac:9b:0e:cb:15:51:2b:12:e9:9a:9c:08:87:39:2d:
e6:5d:95:0f:ba:ff:1a:ef:17:07:f9:7c:68:96:ee:9f:35:0c:
66:3a:eb:2f:23:af:4f:d6:16:b4:2a:97:b5:27:7d:9d:72:ed:
5f:39:5c:c3:c8:5d:f2:32:48:f0:f7:29:d3:be:58:4c:3b:a2:
c1:bd:f7:15:76:8b:58:70:b9:59:cc:fc:4a:c2:1a:69:cf:4a:
6f:92:78:63:c3:09:1f:90:b0:02:92:8e:a4:5f:e8:5e:63:e9:
1d:b6:44:91:b4:04:ae:67:7e:10:99:d2:de:a0:d8:e2:f6:2f:
26:57:31:73:44:63:d0:fe:78:c3:70:3e:37:25:93:3d:8e:38:
6b:a6:56:a3:c4:4e:9f:1b:34:29:71:4b:fe:76:5b:46:e1:72:
7c:9c:14:05:59:1e:94:11:af:07:3f:e9:c3:04:3b:db:7b:6b:
a5:4a:0c:f7:d4:81:88:d7:4c:f4:ff:95:e4:81:51:63:b5:bc:
ec:38:06:af:f7:87:71:ea:53:41:c1:7e:ac:4c:95:e8:c6:8a:
87:ef:ca:70:37:9d:cd:1f:db:3f:9c:86:c6:b0:f9:3b:72:1e:
98:ab:ec:7d:7a:10:4c:64:a2:4b:7c:47:16:86:10:78:c6:16:
63:37:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:55 2025 by rpki-client