Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/V9UUV4dPTwqyyEG3-_uY0BUR9Xo.roa
File: V9UUV4dPTwqyyEG3-_uY0BUR9Xo.roa (raw, json)
Hash identifier: HtCDABJhAsQSzv4tVokt8g+4Rsk3VlT2tDzLiExQkT8=
Subject key identifier: 57:D5:14:57:87:4F:4F:0A:B2:C8:41:B7:FB:FB:98:D0:15:11:F5:7A
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 07471E83
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/V9UUV4dPTwqyyEG3-_uY0BUR9Xo.roa
Signing time: Sat 01 Jan 2022 14:55:29 +0000
ROA not before: Sat 01 Jan 2022 14:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208221
IP address blocks: 45.153.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122101379 (0x7471e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jan 1 14:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57d51457874f4f0ab2c841b7fbfb98d01511f57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:1c:9e:44:88:f6:8a:26:9b:fe:5a:79:73:
39:21:1b:48:cf:b4:49:4f:93:11:2a:a1:c1:38:f2:
5d:36:0c:3c:9c:c3:d2:22:9f:d1:b8:18:d7:9c:ec:
ad:ab:3e:13:45:88:fb:4e:48:84:4c:92:84:ad:29:
cd:47:e0:0c:9c:dc:c2:dd:7b:d9:cd:a0:09:e7:2d:
8c:8b:ea:33:e9:64:20:40:01:e1:4b:63:70:ac:64:
29:c8:e3:22:fb:d7:fe:a8:72:dd:20:ef:7d:be:02:
7d:ee:39:4a:b1:22:29:9e:bd:a7:e4:1f:e4:97:96:
96:8a:17:cd:68:4f:0e:ce:4f:8c:c8:08:87:9c:f5:
19:e1:08:a7:11:ca:b6:2d:60:be:58:3c:3d:26:4d:
79:0d:3b:9b:8a:d7:ca:58:ee:93:66:3e:6c:58:7b:
ba:0a:c7:27:95:d4:be:2e:60:c7:d4:21:50:bb:25:
96:f0:35:bf:b0:54:67:98:10:70:0e:b4:67:33:ef:
e9:e7:a6:7f:c9:c6:1a:27:ae:2a:2d:b5:f2:b5:f9:
06:32:98:c5:aa:b7:a5:ba:2f:a8:0e:44:10:28:db:
97:1c:26:15:70:d2:4d:7c:8c:91:4c:2c:cc:0c:3e:
59:82:58:c4:f0:d2:2a:22:a7:84:51:89:91:1f:c3:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:14:57:87:4F:4F:0A:B2:C8:41:B7:FB:FB:98:D0:15:11:F5:7A
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/V9UUV4dPTwqyyEG3-_uY0BUR9Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:45:bf:d4:ed:40:dc:7d:a0:11:6c:8d:21:c9:d9:22:7a:93:
2a:e1:3e:8b:d0:3a:b3:aa:12:c1:a4:c8:0a:f6:32:71:64:ad:
21:92:33:09:c4:a3:dc:3b:64:2b:88:6d:f4:2b:14:6a:5d:a7:
c8:f5:ff:aa:ed:ba:f8:1b:2a:3a:60:29:a8:ef:b1:f5:6e:fc:
ac:bc:ea:db:89:a1:27:03:3a:89:fa:c7:8a:de:4f:8b:7a:a1:
37:ad:5a:d4:45:49:87:ff:19:a4:29:bb:f3:ab:14:3e:74:43:
b1:e3:dd:31:20:aa:5e:3b:dc:3e:63:05:ed:e1:89:39:8e:40:
81:ad:a6:cf:f9:03:d4:7e:f0:86:ea:4f:a1:20:e6:d5:80:42:
aa:e6:d0:6c:a6:56:ce:74:a2:ba:1c:a8:e9:38:34:39:75:fe:
b9:bf:65:2d:5a:42:dd:9c:e1:3a:29:12:43:1b:41:5f:99:84:
72:c2:1b:b9:37:e8:74:9c:00:b1:6c:e7:75:9d:fd:a3:28:91:
07:81:06:49:0c:ea:a1:b7:ab:0c:ca:b5:d9:61:97:f9:a5:0b:
8c:39:32:eb:59:62:a7:9c:ef:99:87:c5:0d:c6:34:c2:67:b5:
53:63:ee:5e:71:24:20:54:5d:dc:25:95:e7:ae:a0:35:f6:1b:
07:46:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:48 2025 by rpki-client