Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa
File: 9TTs61SIHvJ52zmJjnjOewPlA9I.roa (raw, json)
Hash identifier: pgiDjissuartF4IgyqeRKjs4vlT/qtfuvI34296eClc=
Subject key identifier: F5:34:EC:EB:54:88:1E:F2:79:DB:39:89:8E:78:CE:7B:03:E5:03:D2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B5443ABD2EF86A19B56A5D6764928
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa
Signing time: Sun 01 Jan 2023 18:15:02 +0000
ROA not before: Sun 01 Jan 2023 18:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:54:43:ab:d2:ef:86:a1:9b:56:a5:d6:76:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f534eceb54881ef279db39898e78ce7b03e503d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:80:0b:01:d7:bd:ac:6b:f7:5e:6f:b6:ef:
5d:6a:d1:38:9b:2f:92:86:2f:0e:55:4f:1e:c2:28:
e9:94:88:75:b2:44:ff:57:b0:d7:88:69:da:60:df:
de:ba:07:c1:0d:b4:6e:6e:a7:6f:30:e4:cb:ee:75:
be:c1:cc:de:0e:a1:a8:b3:1d:47:1a:52:0f:ec:8f:
99:3c:cd:15:90:82:9f:6d:54:7c:dc:f8:ff:8f:b6:
04:fb:01:ed:68:92:27:29:da:d0:d7:6a:d5:b4:94:
b2:e9:c8:57:61:b5:13:f5:66:ff:94:b0:9d:52:1f:
54:c1:85:25:dc:21:dc:7c:30:02:a7:f5:a0:1f:5f:
30:4a:f8:00:4a:e2:b0:04:c7:67:38:c8:92:9a:38:
21:2c:22:eb:3b:b6:22:6a:a6:16:e3:a3:7b:ab:9c:
9f:ec:b8:1d:98:db:0f:53:1a:67:f4:40:48:b4:f6:
40:a9:f6:1c:5d:a2:a3:36:8c:85:70:c8:97:97:e7:
b1:8c:09:46:ca:0e:53:bf:28:79:9e:36:f1:27:e8:
05:93:37:5a:2a:a6:63:f3:76:31:25:ad:5d:8c:80:
29:85:12:de:fc:bc:70:85:d5:24:89:cf:5a:f9:45:
29:82:06:98:8f:56:ff:71:0b:17:32:0c:ee:25:68:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:EC:EB:54:88:1E:F2:79:DB:39:89:8E:78:CE:7B:03:E5:03:D2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ca:15:69:b7:a3:30:92:bf:4f:88:9d:b3:34:3e:51:d5:4d:
8f:84:e0:89:e7:50:7a:df:f2:3d:e5:5e:e9:80:17:ac:7d:94:
bb:11:51:7a:15:77:5d:26:f1:fe:2b:62:a9:4b:00:c4:69:2a:
58:22:29:3b:7a:23:69:06:29:31:89:9b:da:1e:63:2f:08:78:
48:71:e3:11:37:17:cf:37:46:46:76:0f:f4:2b:20:31:7c:be:
1c:91:8d:97:fd:23:e0:2e:23:ae:1a:74:99:b7:31:8a:b7:61:
8a:f2:db:b4:61:5a:62:6e:11:ff:e2:f1:2e:82:8a:13:b0:dd:
d5:fe:9d:d7:e2:09:20:c3:24:db:9f:0a:b6:41:87:05:1d:f7:
f6:44:ef:f8:d8:38:7c:68:dd:45:7d:72:22:79:e4:57:eb:24:
f6:2d:4e:af:64:9c:4d:ce:d8:9b:1b:d3:76:54:8a:7e:ad:87:
53:1d:00:59:90:ef:63:a8:f5:25:99:74:29:1a:b6:42:b6:c4:
58:d0:04:2a:6d:1f:05:fa:04:a9:77:8b:e1:5a:5b:9b:f8:2a:
ae:74:6e:80:50:64:a6:81:fa:c8:c8:6a:01:7d:e8:cc:67:28:
17:ce:b4:7b:f5:4d:bf:75:e4:a3:63:99:b0:ce:f7:42:cc:66:
93:50:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:16 2025 by rpki-client