Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/x3XUSmo-ewcmn7Y2AQx-rybSt2M.roa
File: x3XUSmo-ewcmn7Y2AQx-rybSt2M.roa (raw, json)
Hash identifier: UFzDdGc7v4NBaQXLz3rDbRpoX99VfBXuYCcIk95By1w=
Subject key identifier: C7:75:D4:4A:6A:3E:7B:07:26:9F:B6:36:01:0C:7E:AF:26:D2:B7:63
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 076CAC9F
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/x3XUSmo-ewcmn7Y2AQx-rybSt2M.roa
Signing time: Sat 01 Jan 2022 06:59:11 +0000
ROA not before: Sat 01 Jan 2022 06:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208234
IP address blocks: 45.145.61.0/24 maxlen: 24
45.145.62.0/24 maxlen: 24
45.145.63.0/24 maxlen: 24
45.145.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124562591 (0x76cac9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jan 1 06:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c775d44a6a3e7b07269fb636010c7eaf26d2b763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:0e:9c:ee:d6:47:8a:0c:40:a3:06:b7:1f:
45:4c:da:4f:f6:c5:55:57:77:bd:0c:4e:a1:2b:84:
aa:c5:95:82:69:04:29:65:67:0a:00:fa:fd:d6:2e:
4e:3e:82:13:99:c0:9c:4e:ab:d2:f2:34:39:44:d5:
7a:5f:ef:15:b6:d6:1a:89:9c:b2:a5:a4:43:cc:77:
57:8e:59:c3:73:ed:e9:16:7d:c2:66:3a:81:bc:9a:
fd:65:64:d2:4b:ce:31:72:72:ca:b4:e3:c3:61:20:
02:1e:05:85:ee:79:84:44:a5:42:8c:25:8f:97:c1:
44:96:fc:81:c4:a9:c0:5d:71:a5:ec:6a:c5:af:97:
59:cf:28:e7:14:fe:0a:45:5e:d3:0e:af:f9:95:a2:
a7:86:cf:1d:ed:c1:54:c4:20:6b:68:16:dd:3c:f7:
5a:ef:08:a0:32:e5:0c:e1:8b:41:59:92:d2:45:ac:
ba:ce:e0:6a:4c:1d:c5:16:a5:cc:ed:01:0b:5f:07:
cb:cc:04:99:97:fe:be:44:8f:47:1a:36:2f:90:36:
db:b3:33:5c:9b:7a:ef:57:bd:d6:e8:d5:d1:04:89:
cf:8b:b2:46:cc:36:11:8c:f5:07:11:8e:f1:76:23:
6f:0c:61:92:f1:59:07:28:89:f8:72:91:b2:30:b4:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:D4:4A:6A:3E:7B:07:26:9F:B6:36:01:0C:7E:AF:26:D2:B7:63
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/x3XUSmo-ewcmn7Y2AQx-rybSt2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:eb:7a:32:f9:9c:c1:88:03:de:ba:70:7e:fa:e5:18:0c:e8:
c4:43:e4:cf:2f:c1:04:01:e2:0a:6e:3a:49:a0:8b:69:bb:69:
7d:bd:3a:ef:ee:3a:0d:a7:b4:dc:7d:18:27:cc:e6:bc:6e:fc:
47:2e:64:63:44:5c:9c:fd:1c:61:10:ae:61:da:84:22:50:72:
30:0b:20:69:69:1c:68:e4:10:66:18:3c:fa:39:83:6e:2e:7a:
2c:72:17:dc:c3:31:67:0f:fc:37:0e:d0:b1:6d:f0:e0:bc:31:
08:d2:cc:0e:5f:6a:7f:92:0d:20:5d:cf:fa:d4:26:e5:86:e7:
c7:b2:00:e5:ce:ef:e7:f3:a3:04:97:b8:93:2f:2d:84:c1:d3:
82:c8:a9:15:58:8c:3f:5e:f8:1c:d3:d0:88:d0:6e:4c:48:6c:
92:84:c7:13:eb:c9:67:1c:33:e4:a9:c7:b6:63:43:79:87:95:
5b:60:c8:da:9c:93:99:ad:22:49:0d:e9:2f:d1:8c:fc:f1:12:
91:8f:5f:1b:24:29:f2:c9:95:71:84:e6:49:2d:62:6f:a6:19:
1a:ce:fd:00:d5:fb:41:e7:2b:95:7b:45:45:bf:e9:a2:18:5b:
bb:c7:d8:b1:95:08:f3:5f:3d:30:ac:9d:27:c3:42:7e:e1:4e:
c3:3f:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:45:55 2025 by rpki-client