Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3CQjMH-AQt7j0xB6J9lKFcjNHYs.roa
File: 3CQjMH-AQt7j0xB6J9lKFcjNHYs.roa (raw, json)
Hash identifier: 55CrY4SUJETSUbz/xzQcXYLU0aQyXWUsfB8YpIzsalM=
Subject key identifier: DC:24:23:30:7F:80:42:DE:E3:D3:10:7A:27:D9:4A:15:C8:CD:1D:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184C876D4AB504C45CA5EE744E85281402F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3CQjMH-AQt7j0xB6J9lKFcjNHYs.roa
Signing time: Wed 30 Nov 2022 12:15:41 +0000
ROA not before: Wed 30 Nov 2022 12:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211593
IP address blocks: 45.87.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:76:d4:ab:50:4c:45:ca:5e:e7:44:e8:52:81:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 12:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc2423307f8042dee3d3107a27d94a15c8cd1d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:69:65:21:03:e0:ad:0d:cf:70:e4:d7:f7:
57:ce:c1:e4:64:c3:35:f4:cd:2d:20:00:f9:a4:95:
fa:f8:f5:93:ac:fe:48:9d:87:31:14:d7:2a:6e:9f:
28:48:37:dd:69:dc:69:d4:cf:3e:88:5d:6c:12:1c:
e8:52:75:15:40:46:fc:c9:fe:37:b3:e1:09:44:c3:
1d:e8:95:e6:79:7b:12:08:25:6b:57:9d:7c:4b:2d:
11:e1:47:16:d7:cd:5a:a2:2e:7a:0d:4e:cb:d0:0e:
3a:6d:a1:91:65:50:5a:2b:8f:d9:72:e2:18:62:07:
9b:2e:18:d7:86:ac:3f:6d:05:52:8f:ec:be:9b:44:
f8:62:61:81:c7:78:f0:65:e7:49:ec:d8:b6:a9:ed:
c3:77:5e:0b:31:22:fb:bc:85:a4:b3:42:07:b6:04:
ea:a1:ca:ae:01:28:5d:8a:d6:e2:e6:3e:2b:e6:6e:
16:ef:67:e3:5d:41:ae:56:0b:46:17:07:76:6f:03:
5a:d1:bf:3a:0a:9d:c0:df:ca:cc:46:da:96:f2:83:
69:d1:7a:64:04:b0:2e:62:04:e1:ad:82:f9:33:df:
a9:63:f7:c2:28:5b:f3:c1:e7:14:f6:30:f3:96:eb:
54:22:47:4a:fa:86:d2:82:5d:bb:0d:1c:41:22:57:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:23:30:7F:80:42:DE:E3:D3:10:7A:27:D9:4A:15:C8:CD:1D:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3CQjMH-AQt7j0xB6J9lKFcjNHYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2e:1c:14:a3:77:c8:a8:6f:68:bf:68:f1:2c:94:c4:c0:ca:
c7:06:ba:15:d6:9c:51:96:30:83:30:48:b5:aa:5e:49:2e:ed:
bb:11:79:b7:9d:91:e1:2c:ff:2e:6d:a2:bf:a1:bb:68:b5:77:
a5:da:b3:75:e7:77:e0:2c:73:8f:7e:4d:37:85:4f:d4:c3:44:
52:fc:ec:7f:d1:77:ae:9d:94:fc:9b:b8:36:91:a2:62:84:6f:
82:a6:d4:0f:c5:68:6f:b6:5d:93:1d:e4:87:8b:35:a9:06:1c:
6e:dd:c5:7f:cd:a2:94:b8:f6:b1:ae:62:0c:9b:16:da:c8:6e:
a1:d7:7c:b6:62:e6:61:5c:95:04:4e:cb:16:df:11:e2:6c:10:
5f:a4:36:e7:ca:22:c6:7c:5b:78:c7:1b:0b:33:31:a5:1b:a1:
a2:e7:60:0a:49:56:6c:1e:d3:d5:a8:27:ea:41:b2:ae:e1:36:
e3:fc:fd:05:3b:a4:3d:48:8b:63:b8:5c:88:02:2f:32:d0:bf:
8a:f1:6a:1d:e7:b7:df:cf:3c:6b:b4:f4:7f:50:e3:3d:4e:06:
09:86:ad:ac:8a:e3:e0:ac:55:cb:7d:20:4b:a4:26:36:1e:16:
1b:b0:ca:c1:f4:8b:f2:c5:7e:6e:d9:df:a8:e0:67:18:f8:5a:
37:44:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:45 2025 by rpki-client