Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fUWN29jjFHN7x_C9ljkPc6BLPtA.roa
File: fUWN29jjFHN7x_C9ljkPc6BLPtA.roa (raw, json)
Hash identifier: Q6pfVGRf8Z2N7I0Tw9vnBf0KZ8ryT0Ep9RPdAfYNtq8=
Subject key identifier: 7D:45:8D:DB:D8:E3:14:73:7B:C7:F0:BD:96:39:0F:73:A0:4B:3E:D0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0184E2C283C37D44D2BDCA399C189407EEC9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fUWN29jjFHN7x_C9ljkPc6BLPtA.roa
Signing time: Mon 05 Dec 2022 14:48:29 +0000
ROA not before: Mon 05 Dec 2022 14:48:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400529
IP address blocks: 45.8.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:c2:83:c3:7d:44:d2:bd:ca:39:9c:18:94:07:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 5 14:48:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d458ddbd8e314737bc7f0bd96390f73a04b3ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:fa:7d:46:f2:24:a0:92:d1:c4:8e:2e:f4:
d2:4b:3f:7b:67:d4:88:dd:71:14:11:1e:e6:be:dc:
3b:96:93:67:85:78:64:c0:15:a8:d1:1b:b5:39:ae:
9d:88:1e:6f:78:48:36:5d:4b:b5:f6:29:aa:05:2e:
be:46:52:64:fe:30:4e:90:86:ba:aa:a9:b3:b9:6a:
98:1c:ee:05:6a:cb:0f:ea:4e:17:94:fc:92:b3:e0:
c2:69:c7:0d:93:7e:71:5f:7d:15:21:a7:7d:cc:17:
8f:18:b0:bf:69:d3:0f:68:d8:4f:40:10:a7:a8:63:
0a:74:c6:26:d5:73:34:5a:c1:f7:bf:28:99:a0:00:
8a:27:d2:92:d7:75:8e:fa:d2:22:e3:1e:58:34:0f:
88:81:1e:88:d2:09:d7:9a:5e:bc:06:c0:e8:a2:09:
db:b5:96:fc:29:17:6f:73:32:08:01:9f:0a:c1:68:
0b:6c:0b:a7:bb:6a:48:81:91:17:be:28:3e:a8:51:
0b:66:1b:d2:87:d2:5a:67:3f:ab:18:8b:00:eb:3f:
14:44:6b:b5:94:80:dd:86:39:cd:1b:6f:fb:7d:5f:
79:dd:81:9e:80:e1:ed:8e:6a:f2:29:fd:73:34:58:
1e:ef:4f:1b:c7:7f:af:85:3a:d3:37:65:df:59:24:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:8D:DB:D8:E3:14:73:7B:C7:F0:BD:96:39:0F:73:A0:4B:3E:D0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fUWN29jjFHN7x_C9ljkPc6BLPtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:80:58:09:fa:39:1b:8b:68:99:93:53:41:c6:72:b9:c5:3b:
94:06:f9:7b:3c:ab:bc:37:e7:3c:6e:45:f9:2e:e8:ce:d1:0f:
3d:fb:b5:32:98:33:c7:9c:91:5b:e0:52:4c:71:eb:46:ab:8a:
b1:96:5f:56:07:c9:6f:4c:d9:68:77:4b:b0:c9:67:56:b1:a1:
44:36:b3:52:7a:67:07:ee:04:c9:b6:e5:05:09:c8:c4:78:81:
11:a0:3a:80:40:bc:8c:6e:14:bc:22:d9:7c:05:04:4e:50:2b:
77:e9:c8:3c:72:a9:f0:97:33:0d:49:b8:0e:e5:4b:a3:f4:7b:
65:ea:64:79:96:bb:27:66:8b:db:18:e8:49:d5:c7:03:8f:1e:
74:c6:e8:8e:9b:57:3a:a2:a7:69:4b:41:c0:0e:da:d5:51:a2:
68:bb:cd:da:f0:45:e4:c1:59:21:c4:28:6d:05:33:0f:c7:a9:
d0:b9:0f:3d:f8:1d:4e:09:c8:bd:c2:ae:00:58:89:74:c3:3a:
95:9f:1e:73:91:ae:a3:55:7f:c2:e8:10:c7:5c:9d:c3:56:31:
5d:72:e6:97:9f:6a:6e:29:cb:ef:28:19:e4:b5:a8:36:47:78:
f3:2b:8d:87:9a:97:35:0e:e6:85:1a:15:62:74:c4:73:89:3d:
30:e2:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:55 2025 by rpki-client