Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/05CKLGTsVXSs8EXLLyCoBhY1KGo.roa
File: 05CKLGTsVXSs8EXLLyCoBhY1KGo.roa (raw, json)
Hash identifier: YWHCvISXIuikayU1t+lb7C7AvYhKtqNnmrDs9lLTwYE=
Subject key identifier: D3:90:8A:2C:64:EC:55:74:AC:F0:45:CB:2F:20:A8:06:16:35:28:6A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01897585BEAF9CAA09213D6A37B735031106
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/05CKLGTsVXSs8EXLLyCoBhY1KGo.roa
Signing time: Thu 20 Jul 2023 22:57:26 +0000
ROA not before: Thu 20 Jul 2023 22:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:85:be:af:9c:aa:09:21:3d:6a:37:b7:35:03:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 20 22:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3908a2c64ec5574acf045cb2f20a8061635286a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:85:5f:12:aa:58:79:dc:41:8a:02:c3:9f:
4a:90:d1:1e:61:55:06:ba:5c:e9:82:d0:d8:ea:3a:
86:cd:15:b1:08:5c:65:d1:fd:f2:ad:bc:d7:df:af:
68:3c:8a:14:61:31:fc:de:98:bd:0a:9e:3d:ca:07:
8e:d0:f7:e0:60:0b:e3:ec:16:2d:85:d3:e2:b0:e0:
90:d7:82:67:fa:a5:89:0c:79:de:cd:fd:b0:3b:e9:
df:63:9a:b8:5f:67:82:6d:a0:d9:58:4d:d4:ce:02:
c6:fb:52:53:6f:48:be:eb:aa:df:d5:8f:45:d0:f1:
d7:99:94:91:ad:89:91:0a:1f:f3:f9:5a:24:59:37:
62:2a:8f:72:f4:e7:8a:ed:da:4f:47:09:d9:5c:22:
86:b5:56:ea:3e:9b:51:11:0d:89:5f:22:9e:8b:58:
38:12:90:6a:06:d4:cc:66:7f:49:24:ad:39:c9:79:
84:d5:d1:a8:a5:0b:91:a2:1a:b3:f4:47:a2:62:1a:
66:f8:c1:6f:21:51:ab:09:b8:ca:95:ef:48:08:98:
53:da:cd:ab:a8:c2:12:c1:9b:4b:76:a9:11:db:fa:
72:a2:19:70:54:89:9c:af:77:96:6f:46:fd:9e:73:
e3:3b:40:1b:d8:ee:c7:40:81:31:4a:61:1a:77:29:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:8A:2C:64:EC:55:74:AC:F0:45:CB:2F:20:A8:06:16:35:28:6A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/05CKLGTsVXSs8EXLLyCoBhY1KGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a6:c6:38:10:2d:bd:ec:34:39:db:49:1f:3f:27:51:88:2b:
38:52:9e:31:81:33:a0:29:67:ba:a5:78:fe:fb:f1:d6:78:1e:
7d:a2:75:7c:40:fb:48:d5:e7:76:01:14:25:70:c1:c9:9e:87:
c2:af:04:6c:3f:95:08:d4:4e:2e:22:88:32:c2:c2:6a:36:de:
f1:fb:19:b9:2f:2e:88:d3:ed:42:3c:eb:8b:11:5c:f1:b5:1a:
73:cb:42:fd:3a:44:84:23:dc:95:86:54:59:d3:29:ce:bd:9f:
92:86:d0:38:1d:17:69:e9:7d:05:8e:ba:e0:0e:19:d3:6b:3e:
19:b3:07:55:b7:8c:56:7d:23:74:74:7d:3f:f4:59:ea:2b:87:
83:0b:7e:f0:a0:f3:66:ee:1d:94:68:03:1f:60:1c:9e:53:1b:
1a:b8:8d:df:36:ca:93:4c:f8:43:82:9c:7e:0f:ed:6f:f6:0b:
a4:41:0f:49:bd:17:9b:a4:9e:13:b1:cd:ea:7e:8f:59:5b:55:
a8:5c:dc:7b:0d:58:59:ba:f1:31:1a:cf:07:e9:e0:c1:26:56:
65:25:7e:bf:6c:65:3a:cd:4c:1f:ae:9c:d0:31:f6:91:6b:04:
d1:c2:44:9b:8b:9e:43:89:2c:11:2e:47:14:f0:6a:49:5c:90:
a9:18:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:47 2025 by rpki-client