Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/k7dPcZ8C2DsqUFux8OX2SLbrZLY.roa
File: k7dPcZ8C2DsqUFux8OX2SLbrZLY.roa (raw, json)
Hash identifier: L2izUsVXUUgC//apPPNqZH643yFhEO2G/Omm6oSxVFA=
Subject key identifier: 93:B7:4F:71:9F:02:D8:3B:2A:50:5B:B1:F0:E5:F6:48:B6:EB:64:B6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07A65C26
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/k7dPcZ8C2DsqUFux8OX2SLbrZLY.roa
Signing time: Sat 01 Jan 2022 16:05:59 +0000
ROA not before: Sat 01 Jan 2022 16:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.128.56.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.92.140.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.160.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128343078 (0x7a65c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b74f719f02d83b2a505bb1f0e5f648b6eb64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:40:30:e5:4c:84:c6:c5:85:bc:20:76:86:
b8:b2:f3:f4:da:03:74:12:13:8c:d8:31:9e:0d:50:
cc:50:0d:1b:cc:46:19:2a:82:bd:1d:73:6a:60:a1:
85:87:0a:27:db:d2:15:04:a8:48:18:a7:b2:07:2c:
af:6e:d4:34:bc:b8:f5:f3:06:e3:42:d3:9e:b1:da:
67:06:1f:1e:49:3d:9f:14:56:f2:8e:7f:01:0d:e9:
eb:36:4d:7e:9f:45:76:2b:71:2d:e1:ff:8d:3e:ad:
35:b2:b9:59:bc:04:35:b4:c2:5d:d5:d7:3f:56:52:
90:4e:10:25:c9:7f:0a:da:6c:ae:b5:61:a3:ad:14:
23:8e:a4:54:a7:b2:cd:d1:28:81:3d:7e:d7:8a:1d:
09:94:ed:d1:fe:57:05:f7:72:3c:28:27:f6:6c:81:
fc:65:62:77:7e:fb:e3:a1:a5:7e:a0:92:88:e5:3e:
a2:dc:e8:ba:0b:86:67:66:20:3e:8f:23:f7:7c:2b:
84:77:24:f5:6f:03:4d:2e:1a:c6:b4:82:1f:ce:e8:
27:f9:7d:88:e9:f7:28:99:8b:f4:70:8b:75:db:12:
8d:a7:7d:18:0f:0c:b9:3c:c1:43:d0:8a:57:ae:64:
70:57:64:55:20:9f:f0:fe:2a:03:d9:75:0f:fa:f4:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:4F:71:9F:02:D8:3B:2A:50:5B:B1:F0:E5:F6:48:B6:EB:64:B6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/k7dPcZ8C2DsqUFux8OX2SLbrZLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.140.0/24
45.92.160.0/24
45.92.164.0/23
45.128.56.0/24
45.128.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c4:29:47:ea:6b:8f:54:e5:bb:a3:36:48:31:8b:0a:86:0e:
ef:06:61:2b:5b:32:9b:ba:c1:3c:7a:0e:2e:4d:64:7f:10:5f:
f7:fb:6a:68:d4:b8:55:bc:81:e1:a0:c8:f5:51:f3:32:c6:dd:
3e:98:d4:fc:90:2a:24:e0:1c:07:99:98:9a:1a:18:14:63:8f:
fb:9a:72:3c:e4:88:38:f1:cc:f3:f5:c7:50:47:89:56:d9:5d:
23:20:37:85:00:e1:89:42:a4:fa:32:fe:24:6e:2f:3f:b7:44:
25:52:63:6c:05:b5:0e:68:20:38:ac:8c:29:e9:4b:56:ee:dd:
01:dc:fd:c6:4a:bc:d4:f9:bd:91:8e:59:21:cd:40:c4:dc:7a:
db:5a:5f:8f:4f:ac:12:7e:16:fa:17:1e:04:29:f7:ca:3e:01:
9e:f3:33:61:df:0f:f8:49:36:75:c9:58:6e:b2:08:69:ef:f8:
58:fc:25:09:d5:cb:21:7c:9e:f6:ea:91:f7:4e:46:04:ee:a2:
c0:e2:7f:ed:8c:95:1f:1a:df:90:f9:28:ab:f0:a7:4b:01:d2:
8b:b4:f3:62:66:66:28:3b:b9:44:69:32:d6:ce:54:81:59:6f:
50:50:d9:85:48:ce:af:fa:d2:b9:4f:2c:fc:3d:b9:b9:51:c7:
cc:73:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:04 2025 by rpki-client