Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ieTPSk2OI7Ki05V7C6XToLzkhMY.roa
File: ieTPSk2OI7Ki05V7C6XToLzkhMY.roa (raw, json)
Hash identifier: NiRLrxBLiMST+KL1X8tynrn5cP10ULNi2lM1elH+ziI=
Subject key identifier: 89:E4:CF:4A:4D:8E:23:B2:A2:D3:95:7B:0B:A5:D3:A0:BC:E4:84:C6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182252ED8147175641EBA987BAC4EA00BB1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ieTPSk2OI7Ki05V7C6XToLzkhMY.roa
Signing time: Fri 22 Jul 2022 09:13:23 +0000
ROA not before: Fri 22 Jul 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 45.12.134.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
45.83.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:2e:d8:14:71:75:64:1e:ba:98:7b:ac:4e:a0:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 22 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e4cf4a4d8e23b2a2d3957b0ba5d3a0bce484c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:d4:f5:c2:97:c3:62:9c:67:67:39:0e:9a:
96:f1:4d:33:c2:0d:fe:f9:99:4e:f0:50:23:c9:4f:
cd:7a:e6:1d:15:96:f9:19:ae:ba:ca:8e:d6:af:8d:
22:a7:14:86:b3:a3:62:e6:9c:ec:0f:f5:de:69:ec:
4b:7f:53:1a:3a:86:ea:3b:51:79:91:8c:11:f2:a2:
42:a8:be:2d:3f:60:2e:a8:dc:25:4e:8c:da:4e:a0:
aa:86:22:2d:e3:aa:e3:25:85:2b:48:72:32:a3:2e:
85:38:83:0e:95:f2:15:bf:ef:7b:af:35:75:6a:6f:
5f:33:bf:ba:89:2d:77:bd:77:53:9a:d2:e5:f2:24:
a3:89:a2:d1:eb:8d:82:72:dc:15:e2:aa:52:ed:54:
dc:5f:ef:37:2e:45:0a:f7:de:da:50:b7:57:a1:3f:
75:1d:9e:22:33:cf:1d:c0:0a:ad:76:31:cb:8f:6d:
78:2d:f1:8f:c4:2a:55:bd:63:57:de:2a:9e:ee:0f:
ee:cc:82:83:72:cc:5c:5f:67:d2:cb:1f:10:16:1c:
fd:88:2a:87:6f:6a:28:7a:4b:99:a1:2b:e5:f7:91:
5a:5a:d3:c8:ee:f5:bc:0e:56:61:8e:ee:6c:4a:93:
15:f2:76:3c:d9:2a:d8:ed:3b:01:6c:06:93:0e:da:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:CF:4A:4D:8E:23:B2:A2:D3:95:7B:0B:A5:D3:A0:BC:E4:84:C6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ieTPSk2OI7Ki05V7C6XToLzkhMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.134.0/24
45.15.140.0/24
45.83.128.0/24
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f2:34:13:9a:f7:8c:23:1e:b2:f8:96:c8:92:82:d1:70:7e:
69:97:25:fd:d9:ac:40:90:57:b6:5e:a0:fa:56:26:ac:97:1c:
aa:23:ab:d1:de:f2:8f:67:79:27:08:84:4a:5f:1d:ed:8f:80:
34:71:78:6b:50:75:cc:e3:b3:d5:eb:22:2e:d6:20:5e:ef:bf:
ba:52:e7:cd:14:95:07:b7:d4:cc:65:23:70:e4:42:c6:a0:5d:
e2:c2:9e:4f:a3:41:db:7b:df:7b:d2:7c:f0:2f:56:ff:ac:66:
e4:d1:01:1b:d1:49:d6:9c:46:dc:36:f8:0c:7a:fa:c0:37:d5:
7b:c4:59:2a:7e:83:42:3c:91:d9:18:43:6a:f3:97:20:7e:03:
9d:94:c6:3e:ab:35:7b:4b:ec:13:43:93:77:23:46:64:99:be:
36:1c:cf:73:21:0d:e7:05:f1:b1:ba:da:30:63:89:83:30:1c:
eb:b2:c7:42:25:42:f3:86:87:4a:b3:00:c2:e8:6d:72:e7:21:
15:90:e1:f2:8b:a5:1c:48:14:08:15:a1:36:b7:79:14:52:a5:
5d:02:33:78:ac:5c:8e:45:eb:ca:54:c0:7c:a2:71:db:ba:72:
da:0f:1a:bf:14:db:af:25:16:79:f3:f4:68:fb:79:e1:c7:23:
b9:1a:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:58 2025 by rpki-client