Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oLdWFvdCqbQbd5DlgDTo223DE6A.roa
File: oLdWFvdCqbQbd5DlgDTo223DE6A.roa (raw, json)
Hash identifier: eSyhOR3RHM1NR+Zwm8ozRVG8o3TijrMtkaY9F0YRoHI=
Subject key identifier: A0:B7:56:16:F7:42:A9:B4:1B:77:90:E5:80:34:E8:DB:6D:C3:13:A0
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 03B7EA1B
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oLdWFvdCqbQbd5DlgDTo223DE6A.roa
Signing time: Wed 27 Apr 2022 17:06:50 +0000
ROA not before: Wed 27 Apr 2022 17:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 45.94.244.0/22 maxlen: 32
45.95.48.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62384667 (0x3b7ea1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Apr 27 17:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0b75616f742a9b41b7790e58034e8db6dc313a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:fa:d1:55:49:78:dd:bd:bf:59:61:d8:f2:
68:cf:76:35:df:68:57:9a:7d:6a:6e:6a:72:1b:e0:
e1:70:c9:d2:4d:ee:04:b0:53:9a:5d:1e:f4:81:f2:
e1:44:a2:aa:20:4f:3f:c0:39:b3:81:a9:f0:34:5a:
b1:c1:6b:64:9e:0d:3c:b5:31:c6:73:59:58:ae:ad:
91:9b:2e:45:fd:42:ac:51:7d:bd:b9:25:21:1e:32:
d6:d3:3b:4b:b3:8e:56:5e:70:4b:42:67:6e:71:a4:
15:e1:2c:5a:e5:5f:7d:a3:fb:e7:2d:50:a2:54:98:
c8:bf:c5:8e:38:02:88:af:df:b1:36:d2:f3:dd:16:
99:c4:96:62:43:f5:fa:db:97:fb:79:1e:92:8d:29:
75:90:fd:2a:0b:24:71:d7:21:d0:37:8c:90:a2:6c:
74:01:06:e9:64:e0:f7:11:ab:5d:3e:da:44:9c:60:
da:bc:eb:ae:61:92:0d:5c:06:fd:05:8e:83:08:61:
e0:d1:82:22:5d:3e:4f:1f:3f:c5:c6:e5:98:59:a4:
5c:14:68:6d:d6:3a:28:6b:0b:47:29:8a:25:78:bd:
2a:4b:5e:7f:9a:6e:2b:41:54:f0:19:ee:9d:f5:32:
ec:88:70:00:f7:af:17:0e:f8:3f:68:3b:8a:7c:0d:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:56:16:F7:42:A9:B4:1B:77:90:E5:80:34:E8:DB:6D:C3:13:A0
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oLdWFvdCqbQbd5DlgDTo223DE6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.244.0/22
45.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:4b:e0:70:c4:1d:1a:1a:67:ba:c6:74:ea:76:b3:ba:f1:2d:
2c:6d:67:be:7d:e4:87:6a:90:f1:fd:50:e0:e4:56:53:6f:c5:
2c:0b:77:00:26:28:e2:03:de:1e:e4:99:ae:cb:08:8a:47:49:
61:cb:ed:49:6c:d6:4c:4b:e7:cc:53:5d:7b:51:31:28:f3:cd:
50:95:18:3b:96:aa:90:e1:b2:72:2e:c7:9b:5f:b0:42:0a:55:
a9:64:bd:cd:44:15:d2:61:84:a0:c4:92:87:69:5b:9c:ed:7c:
20:8b:66:bb:08:77:57:86:33:c4:60:03:0d:dd:ef:ae:da:9d:
32:af:f0:1c:55:a3:f5:49:97:86:04:e6:8d:90:07:00:0e:91:
a2:52:ae:ea:f3:65:34:43:43:e0:e9:71:d7:53:1c:be:d2:40:
7a:79:aa:a3:5b:5e:10:ab:ad:54:1f:f5:a0:9c:71:1c:8a:d0:
b7:46:34:a0:1c:fb:ad:c7:2e:51:63:47:18:06:38:96:3a:e3:
6e:fa:2d:d8:55:73:84:ac:4d:94:12:21:0d:71:27:8f:25:e8:
7a:59:c0:ff:15:92:4b:7b:54:ca:c6:91:be:2c:d6:14:bd:31:
c1:fe:7f:ac:d2:0b:46:f6:6b:08:9b:3b:f6:6c:92:00:9e:cf:
1b:fd:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:12 2025 by rpki-client