Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EVeufHP7I-pSHmyz5R67nO69Xk.roa
File: 3EVeufHP7I-pSHmyz5R67nO69Xk.roa (raw, json)
Hash identifier: sa0HgvL/5QT685qmmrJL8AekWT8E8RIWby3ltUhvtfE=
Subject key identifier: DC:45:5E:B9:F1:CF:EC:8F:A9:48:79:B2:CF:94:7A:EE:73:BA:F5:79
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0150FD76
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EVeufHP7I-pSHmyz5R67nO69Xk.roa
Signing time: Sat 01 Jan 2022 05:55:04 +0000
ROA not before: Sat 01 Jan 2022 05:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30083
IP address blocks: 45.147.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22084982 (0x150fd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 05:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc455eb9f1cfec8fa94879b2cf947aee73baf579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:9a:0b:c5:31:05:da:a5:37:87:95:ac:64:
69:b2:f7:4b:36:36:f5:29:c2:55:da:ca:e4:92:60:
0f:e8:b8:fb:ac:92:c5:a5:1a:11:a1:78:0e:3a:09:
18:32:17:f0:8f:61:f6:58:b7:4a:c9:6d:ce:2f:73:
55:73:92:06:78:72:02:36:7c:be:df:1d:1d:e2:44:
3b:f4:9b:4b:26:e9:6d:6e:a8:8b:37:7d:28:60:88:
2c:b5:6f:f1:7c:62:b3:f7:ce:d5:ef:40:58:fe:5e:
8b:85:eb:01:7e:a0:34:bb:95:60:22:a1:3c:c4:43:
f3:91:08:a7:62:ab:e2:64:ea:dd:b8:fe:ae:18:0d:
33:54:0e:80:65:c8:5d:cd:b9:26:56:ab:a1:2b:de:
86:87:07:26:b8:68:fd:e5:f8:04:9a:d3:3f:8f:3c:
fc:5b:e5:bb:09:56:64:aa:d4:fd:d1:20:dd:8b:f2:
e9:43:92:ad:51:30:14:38:2d:54:a4:f1:0b:d9:f6:
4e:b2:06:63:cd:ed:49:23:28:cf:e4:9f:2e:02:ac:
10:d5:ff:9e:4c:61:16:6b:e0:33:dc:e3:71:22:02:
b8:ac:3b:fe:2d:74:00:3c:9b:eb:3f:89:1a:c9:a1:
07:66:1c:19:6c:38:78:81:fc:ad:0b:71:d9:7d:a5:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:5E:B9:F1:CF:EC:8F:A9:48:79:B2:CF:94:7A:EE:73:BA:F5:79
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EVeufHP7I-pSHmyz5R67nO69Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:af:34:d1:36:97:60:41:ba:2b:29:0c:e0:2a:12:32:7f:7f:
e4:3b:24:c3:8b:9a:11:b0:23:7e:0d:dd:12:01:b5:82:c8:6a:
50:23:45:dc:de:2f:ba:b9:0b:e1:3a:ee:72:ed:98:70:f5:86:
80:78:59:75:c7:55:0a:d1:90:fd:dc:d2:15:49:af:6f:c4:e6:
e6:b1:68:6c:d5:41:53:30:72:ef:82:6d:db:2e:88:06:6a:b8:
2c:0e:ea:66:d2:19:4e:54:51:4c:7d:f1:14:58:8d:8a:dd:ca:
45:cc:af:21:ed:53:1f:61:a3:07:83:3e:ef:e9:4f:79:fb:cb:
1b:b1:96:16:56:77:06:9c:a7:61:5e:ac:da:ff:f6:50:1a:cf:
44:48:67:82:6f:d2:99:4a:8b:8d:d3:59:3d:c5:06:b8:fd:65:
29:83:88:b6:21:a6:b1:b7:6b:a2:33:d3:4e:93:4b:7b:13:4b:
5c:98:48:51:f4:aa:37:79:89:e2:f4:3f:54:b7:ad:dd:1a:23:
d9:65:f4:87:4b:c5:09:1a:c1:44:b1:93:32:b1:33:d9:11:f2:
ea:0f:3a:05:1f:ea:ef:b6:44:e3:41:77:8f:ad:be:92:3d:b9:
87:6f:d7:1d:7a:81:d1:b4:bc:bf:a5:47:1b:1c:c2:1e:e9:2d:
d8:3b:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:16 2025 by rpki-client