Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/a9UCA1viyXvy4F7wIhQEWYyIq7M.roa
File: a9UCA1viyXvy4F7wIhQEWYyIq7M.roa (raw, json)
Hash identifier: yWlg1sLFAnY6Fnhz7hNnNI6AJ70piJqK1sZBbLMyyRM=
Subject key identifier: 6B:D5:02:03:5B:E2:C9:7B:F2:E0:5E:F0:22:14:04:59:8C:88:AB:B3
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 01856F26CEFCD30B1094C9EDC86D3821C3B3
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/a9UCA1viyXvy4F7wIhQEWYyIq7M.roa
Signing time: Sun 01 Jan 2023 21:04:52 +0000
ROA not before: Sun 01 Jan 2023 21:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 45.147.160.0/24 maxlen: 24
45.147.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ce:fc:d3:0b:10:94:c9:ed:c8:6d:38:21:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: Jan 1 21:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bd502035be2c97bf2e05ef0221404598c88abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:67:2c:c6:84:88:cc:c9:5f:76:e4:64:87:
55:7a:74:2f:8d:e4:07:4d:1a:b5:ca:46:0e:ce:8b:
c9:29:d2:8c:6c:89:0e:23:29:af:6f:a4:39:06:a3:
75:a6:e7:b5:ef:9e:ef:c4:55:c7:a3:52:f7:77:7a:
6a:e7:f2:18:16:82:c5:1b:fb:bd:0f:a1:46:2f:cd:
72:8c:7d:e7:ec:e7:bf:dc:54:37:ef:dd:bb:0c:0c:
fa:54:3a:41:b3:0a:8a:9d:f7:6a:24:96:8b:33:5d:
ce:03:24:06:69:15:55:a8:f4:dc:b7:9a:8a:86:be:
c9:fb:9e:65:0d:20:f3:b7:21:fd:b4:61:d1:6f:bd:
a7:98:ad:4f:09:0b:91:55:5a:a9:0b:59:90:0c:e5:
9f:e0:fa:17:55:18:92:53:f7:b7:45:b3:83:b3:43:
2e:59:fc:a1:86:e1:28:a8:bf:b7:ac:6d:c8:f2:5d:
f7:27:15:45:02:66:50:23:97:13:91:9b:c6:c7:a4:
6b:65:d8:c7:fc:69:23:06:28:ac:20:de:c7:f1:8d:
04:46:6f:d2:6b:1c:53:df:df:6f:18:fe:57:94:51:
86:7d:1e:0a:51:71:41:33:e3:0f:13:39:3a:fd:38:
9d:8f:1a:f7:5e:77:32:ac:96:26:69:a7:f5:42:75:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D5:02:03:5B:E2:C9:7B:F2:E0:5E:F0:22:14:04:59:8C:88:AB:B3
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/a9UCA1viyXvy4F7wIhQEWYyIq7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:23:a8:e6:d3:f3:2f:52:50:a2:15:5b:6d:cc:83:e2:cd:fc:
6a:69:82:3b:34:2f:a7:1e:66:6c:f0:45:3e:69:17:49:8b:24:
ee:50:3f:b2:47:95:ba:30:6f:c5:58:95:80:34:16:7f:19:bc:
c3:d8:1e:48:f0:5b:ec:4e:e4:87:f1:a0:27:91:6f:21:96:a6:
b8:3c:a7:97:97:a0:ea:c4:52:c1:32:2f:94:8d:65:28:20:68:
77:83:bf:16:3b:87:88:1c:3a:cb:25:ed:28:7b:81:2a:19:af:
b9:b5:ad:41:6f:72:91:2d:50:10:ee:e2:f2:5a:5d:8d:04:f7:
99:fd:68:e7:e8:11:98:ac:22:07:76:0f:13:6e:9b:00:aa:29:
75:41:8a:e2:34:6e:6f:41:ec:df:da:71:b4:f9:b9:8e:fe:22:
11:fd:78:55:0b:a9:01:48:9e:1c:63:16:d5:0d:52:de:e7:64:
a8:f6:5d:22:9a:f7:0c:c5:04:87:e9:85:88:31:85:65:a5:67:
99:88:0a:cb:b9:cf:7b:a1:18:3d:30:62:ec:19:de:9c:fd:e4:
2f:ec:b8:de:01:11:f4:9a:aa:99:c5:50:0a:3f:be:41:0b:1d:
d4:2e:d2:c9:a0:8b:fb:b7:9b:e4:8d:80:4b:01:e6:64:b8:2b:
6b:3f:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:38 2025 by rpki-client