Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4Fx_c-wjRlAvn7GE0STIBaWKYL4.roa
File: 4Fx_c-wjRlAvn7GE0STIBaWKYL4.roa (raw, json)
Hash identifier: 9QIQ7THxHbmK2Bg1FQEFk/SqVg/4Y15UVeRZUr9QxEA=
Subject key identifier: E0:5C:7F:73:EC:23:46:50:2F:9F:B1:84:D1:24:C8:05:A5:8A:60:BE
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01896F09E4B63CAFADB34E71147E1B22F9F2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4Fx_c-wjRlAvn7GE0STIBaWKYL4.roa
Signing time: Wed 19 Jul 2023 16:44:26 +0000
ROA not before: Wed 19 Jul 2023 16:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42375
IP address blocks: 45.93.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:09:e4:b6:3c:af:ad:b3:4e:71:14:7e:1b:22:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 19 16:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05c7f73ec2346502f9fb184d124c805a58a60be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:3c:17:a1:be:1a:f7:01:c9:d5:0e:9d:77:
cf:74:f1:29:d6:cb:16:bf:10:f2:4a:b7:68:81:22:
3f:32:83:26:f6:b3:5c:7e:c7:ce:3b:cc:60:2b:7c:
ad:10:b4:f2:87:37:8b:53:c4:41:f9:a0:43:ec:89:
af:05:fd:04:b1:a8:a3:64:f9:e5:60:f7:d4:c2:f0:
c7:6e:ed:71:39:7c:b3:d2:f6:b7:65:af:d6:75:94:
98:b3:d7:5e:ca:82:fd:60:47:4c:77:14:4c:8e:ed:
85:5b:84:18:c9:3f:e2:80:c2:2c:4c:ff:92:0e:31:
e5:5c:cf:0d:2d:7c:1b:93:e5:9f:16:ca:1e:5c:d2:
8d:cf:20:23:41:1c:c1:bd:27:a5:e9:87:7d:46:68:
a5:25:ed:ea:3b:84:87:0a:c7:96:0a:57:65:79:20:
17:f8:31:1d:d5:2d:b7:3c:dc:bb:13:8b:d4:81:3e:
b3:be:5c:03:61:2f:11:f4:eb:ac:54:e0:b5:25:bd:
47:4a:03:e1:86:d5:3f:b8:36:29:72:46:93:45:fe:
03:4d:de:a0:49:46:83:21:05:a4:f8:94:8d:35:05:
d7:b2:ef:b2:90:d6:c5:98:75:36:9c:a4:74:e3:4d:
23:fc:23:1c:fd:ce:13:1a:8a:d7:fb:6c:65:bb:bf:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:7F:73:EC:23:46:50:2F:9F:B1:84:D1:24:C8:05:A5:8A:60:BE
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4Fx_c-wjRlAvn7GE0STIBaWKYL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9d:86:40:0b:6f:42:28:6d:48:e3:68:7d:e9:52:9a:4b:a4:
18:18:29:03:ee:1b:71:7f:39:37:45:86:8a:89:fc:b9:fa:25:
95:ea:b9:54:16:af:ab:a7:81:bd:ae:94:45:52:07:12:06:69:
6f:8a:32:a4:56:90:da:22:f0:46:49:9b:3c:6e:84:1a:80:ef:
e3:fe:a1:63:76:90:66:4b:72:3f:11:ba:5c:2e:6c:77:10:1d:
d5:8b:dc:0d:ec:6b:db:93:a5:8d:a6:93:21:d0:63:c6:96:97:
c7:5b:ee:f4:fe:1d:a9:f0:e7:b1:7f:86:3c:6a:56:58:f9:62:
3a:4c:ad:5e:67:57:ae:92:1d:dd:90:13:04:82:e1:d0:2f:dc:
e7:0f:cd:2a:c4:11:95:ea:95:29:59:6d:93:17:07:73:22:59:
42:69:c1:ed:05:61:36:7a:d1:e5:be:65:f5:e0:22:89:c7:f5:
26:9f:f5:52:7d:2c:3e:91:d1:ec:a1:60:cf:df:89:1d:72:f0:
7c:d2:46:04:0a:04:62:f9:1c:9f:1d:4a:8e:e3:94:26:e0:fe:
b9:ed:b9:d7:90:a2:d4:54:0f:08:00:aa:9d:30:3f:e1:39:8f:
f6:9b:b8:89:08:80:dd:5d:d9:43:83:7d:f1:b2:ec:2b:48:a9:
ab:5b:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:38 2025 by rpki-client