Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NyzYpNzIWdvOcxNho4BjmWkbjw.roa
File: 2NyzYpNzIWdvOcxNho4BjmWkbjw.roa (raw, json)
Hash identifier: S7ZfV0GGQz6DLqNbIzuZqH6MPLvnIKgO7x84gPK4s6I=
Subject key identifier: D8:DC:B3:62:93:73:21:67:6F:39:CC:4D:86:8E:01:8E:65:A4:6E:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 014E8C16
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NyzYpNzIWdvOcxNho4BjmWkbjw.roa
Signing time: Sat 01 Jan 2022 05:55:04 +0000
ROA not before: Sat 01 Jan 2022 05:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 45.157.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21924886 (0x14e8c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 05:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8dcb362937321676f39cc4d868e018e65a46e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:29:94:b0:34:4f:34:eb:42:fe:f8:69:a0:
d6:f7:bf:87:d6:e5:f4:d0:c5:51:04:18:ae:12:58:
e5:0b:ff:74:0a:07:5e:bb:0e:99:49:12:8b:e4:45:
0f:1a:29:52:66:ab:50:0d:21:07:ce:1e:3d:c6:d2:
ee:25:ae:d1:92:bf:0e:36:cd:4d:4d:48:da:fb:be:
a8:a3:9d:db:89:5f:d1:18:e8:e6:9e:b8:c1:a0:a3:
44:66:08:38:50:41:1c:38:e3:82:90:3b:d7:f1:9d:
86:f8:54:89:39:60:fd:59:23:6d:ad:d7:f6:2a:0e:
ed:cc:e3:4a:d0:cd:80:50:6d:86:f1:29:5c:08:7c:
8e:4d:79:be:a1:e2:c2:0c:97:7b:fe:80:52:cb:cb:
be:f0:b7:25:c8:5c:cd:53:84:4f:f8:c5:85:50:fa:
e2:54:72:d1:e8:5f:6a:0f:14:b1:9b:78:af:7c:50:
e0:a0:8a:f7:41:d4:cb:2a:b4:b2:95:29:28:b9:e8:
87:6d:f1:0a:4e:c5:47:fc:20:41:8b:d5:a4:c8:1b:
5f:72:f8:90:6c:04:01:00:31:90:89:b0:b7:8d:89:
44:85:21:32:6f:4c:3f:28:93:fa:89:61:95:50:70:
c6:2c:eb:71:80:51:d4:48:28:f4:61:f5:86:b1:8e:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:B3:62:93:73:21:67:6F:39:CC:4D:86:8E:01:8E:65:A4:6E:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NyzYpNzIWdvOcxNho4BjmWkbjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.36.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f7:63:22:ac:02:f0:b0:5d:7b:a8:f8:92:84:97:e8:d2:cb:
ba:09:c4:9a:44:53:d9:94:c4:e2:5f:55:4b:4c:ea:5e:3b:81:
f7:b5:5a:ec:d6:07:66:dd:7a:b2:24:aa:60:39:8e:03:fd:d9:
bc:62:21:cb:d9:76:4c:c8:a3:a4:b8:25:a4:23:c8:2a:0a:82:
f0:52:67:c8:b2:db:85:30:b9:d9:7a:ff:0f:0f:fc:77:da:45:
bd:9e:51:a0:92:2b:8a:c6:2c:ab:83:f3:31:0a:57:f4:fe:c9:
3c:67:87:0c:6b:49:7c:37:d3:02:b9:07:2e:66:ce:4c:ad:12:
ec:6b:b1:2a:db:0a:12:97:e6:c3:80:05:37:21:db:c9:a5:89:
0b:ad:ea:fc:03:68:f2:29:0b:8a:6d:a9:82:03:29:94:1a:e4:
db:96:6f:74:d5:da:12:81:76:7c:80:b3:79:dd:33:f7:d0:15:
93:19:4f:92:be:e9:d5:ea:ca:c4:bc:52:df:12:44:f3:e8:01:
81:df:a0:ef:af:f0:6d:45:ae:0f:aa:4d:a6:f2:6f:de:42:f5:
94:86:e9:c3:a5:84:0b:ba:0e:8d:c7:14:c9:5d:ab:1f:09:4a:
79:ec:0d:2c:b6:f7:96:f6:ff:43:80:56:1f:74:57:43:35:d4:
6f:09:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:34 2025 by rpki-client