Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/rhNpyKfPBWjNKYY_hmcVr0v537c.roa
File: rhNpyKfPBWjNKYY_hmcVr0v537c.roa (raw, json)
Hash identifier: pIzKNTkdiS3nSgaSXi3iyu/nWcuk6VDlhgEYPCCagQ4=
Subject key identifier: AE:13:69:C8:A7:CF:05:68:CD:29:86:3F:86:67:15:AF:4B:F9:DF:B7
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 018A4BE049A1668C5EA530057FA167EF8963
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/rhNpyKfPBWjNKYY_hmcVr0v537c.roa
Signing time: Thu 31 Aug 2023 13:55:04 +0000
ROA not before: Thu 31 Aug 2023 13:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 45.157.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:e0:49:a1:66:8c:5e:a5:30:05:7f:a1:67:ef:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Aug 31 13:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae1369c8a7cf0568cd29863f866715af4bf9dfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d9:54:19:36:d4:ef:5a:98:27:19:89:5d:fe:
d1:23:e8:51:29:98:29:47:b4:1f:f7:1d:f5:a1:7c:
e8:dc:27:39:18:d7:db:ce:cd:fa:09:24:01:d1:c7:
88:53:2f:1f:7e:12:46:f2:8f:96:31:49:07:5b:5e:
65:6f:e8:66:2f:56:59:af:55:59:ed:af:c4:af:23:
c2:fd:f4:73:e5:de:68:c8:cc:7f:7e:7c:fa:ff:d8:
c9:d8:a9:a7:e5:66:0d:9d:48:90:ea:d0:79:b0:87:
1a:b7:4b:04:c3:3a:0b:fb:1e:e4:3b:9c:55:92:b6:
30:c5:30:3c:f6:ac:c5:82:76:c1:ad:00:87:44:78:
02:5e:97:3b:d8:9b:86:a7:1f:4d:d7:38:c2:03:5c:
d1:03:9a:b4:49:9f:f0:a5:9c:52:fb:64:e0:7e:91:
cc:3a:e2:05:ad:2f:ec:46:1d:ef:f3:11:74:f1:25:
2e:b6:e1:b7:19:0b:68:34:63:07:7e:e4:c9:ec:79:
de:9d:2b:97:14:3e:41:a2:03:d3:85:16:f5:81:d0:
41:c3:1e:4e:e7:fc:cf:86:9d:6a:2b:76:b5:cd:49:
77:b4:48:15:17:dd:4c:18:ce:2b:fd:47:ad:33:21:
4f:87:d9:7a:ee:1f:c3:40:9c:31:67:1e:e7:35:b5:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:13:69:C8:A7:CF:05:68:CD:29:86:3F:86:67:15:AF:4B:F9:DF:B7
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/rhNpyKfPBWjNKYY_hmcVr0v537c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.3.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d8:28:3f:6b:bc:02:6c:fe:b5:1d:bd:72:33:c4:84:fa:87:
3e:18:95:a3:8f:3c:18:c6:ef:67:cd:41:53:d6:11:ea:bb:99:
5b:de:43:8f:e5:9d:ae:5a:bf:ba:be:5d:9d:ea:cb:3e:84:4c:
f7:bf:4b:73:87:2b:4d:c2:7d:7f:66:5a:41:aa:20:21:c7:ff:
5c:6b:bf:b0:d2:50:da:bc:2e:37:55:3e:c5:22:c2:d3:20:d7:
42:70:b4:a9:8d:a0:8a:48:44:89:45:20:05:19:3d:4a:e1:0f:
b8:d3:bb:94:6c:76:43:57:87:5f:80:41:ae:c6:74:19:b4:1d:
37:0b:27:48:d4:61:07:f1:4f:39:be:4c:06:23:ba:fa:cc:d0:
61:55:e8:86:e6:cb:ba:06:28:b7:51:a8:ed:7f:70:97:10:4f:
3c:28:3f:43:ef:17:ec:e1:5a:61:b9:b7:d7:f6:2d:ff:07:3d:
fb:bd:a0:8e:9c:e0:bd:c0:83:49:3f:d3:f3:6b:b2:f2:25:4b:
96:28:55:9e:54:62:12:d2:92:26:87:f7:ab:4b:43:d8:0e:ce:
78:21:9c:62:85:69:25:19:77:70:c2:b8:0f:6c:3e:4d:36:fb:
3e:22:a2:af:4e:83:70:c9:eb:41:aa:35:1e:da:3e:40:a8:8b:
06:53:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:17 2025 by rpki-client