Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fh2OJHVoR2LgegGR-esDOxB3QMo.roa
File: Fh2OJHVoR2LgegGR-esDOxB3QMo.roa (raw, json)
Hash identifier: 4zOSgCsVcwe+6RQwV5S6c53S6nmkZcT/988x0KBKQgE=
Subject key identifier: 16:1D:8E:24:75:68:47:62:E0:7A:01:91:F9:EB:03:3B:10:77:40:CA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01833C36A0C9A813C31CCCEE10946F119229
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fh2OJHVoR2LgegGR-esDOxB3QMo.roa
Signing time: Wed 14 Sep 2022 13:35:56 +0000
ROA not before: Wed 14 Sep 2022 13:35:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7979
IP address blocks: 45.152.197.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:36:a0:c9:a8:13:c3:1c:cc:ee:10:94:6f:11:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 14 13:35:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=161d8e2475684762e07a0191f9eb033b107740ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:92:0c:7c:0a:fb:45:5a:ca:a8:50:1d:e4:
0c:af:9c:c4:1d:dc:18:ce:19:f6:ba:d8:de:95:fd:
9e:b2:d8:a1:28:bf:8e:8d:1e:55:6f:8a:86:2b:a1:
ce:0c:d2:f4:34:10:e5:5e:56:75:df:37:fd:7b:bb:
fa:52:84:2b:9c:ef:63:19:79:f4:a9:9c:f2:e8:da:
a9:e3:12:8e:35:43:a8:34:22:c6:6f:31:5c:56:40:
ac:2d:fa:0b:82:d1:2b:b1:58:4c:c4:b4:d0:a7:1a:
d2:13:e7:0d:a2:9f:0b:37:b2:54:08:f5:c4:f8:c7:
52:3f:14:75:25:19:da:7c:f0:9d:86:c6:3e:74:cf:
60:63:d4:58:be:48:7b:9e:ac:9f:cc:67:4e:0a:ac:
f6:5e:29:c9:31:68:e7:ac:b0:34:8f:b3:fd:50:f1:
4a:24:44:84:33:a1:f3:5c:ec:19:17:93:42:63:8b:
4f:26:fd:fe:ad:ad:2a:a5:0a:00:ea:7e:68:31:1a:
86:72:a7:d6:48:d7:0d:52:85:77:61:8d:dc:c8:58:
ee:2a:54:49:ea:07:5b:7d:6d:be:bc:c2:7c:1f:44:
69:76:4b:fa:0b:eb:13:79:ee:c7:af:0c:b6:16:a0:
5b:c3:fa:b2:7a:ab:b9:95:11:ef:ef:2f:7c:61:ea:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1D:8E:24:75:68:47:62:E0:7A:01:91:F9:EB:03:3B:10:77:40:CA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fh2OJHVoR2LgegGR-esDOxB3QMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.253.0/24
45.152.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:72:18:aa:af:48:88:18:d0:df:1b:96:a6:9c:5b:c6:3e:cc:
f9:43:5b:0c:18:28:5f:ce:04:31:b8:fd:6d:f9:c6:6f:7a:63:
b9:cc:48:f8:59:f6:43:90:18:a7:a4:ee:0e:7b:32:b2:66:db:
99:d4:bb:e7:c0:6f:9b:76:09:b0:de:b0:da:b3:8f:d6:8a:06:
f9:5f:0e:59:cf:5a:29:92:e5:ed:d1:18:81:77:7e:5c:4b:2d:
e6:68:b6:64:b9:63:d5:5d:71:e4:3d:6f:ac:d1:8b:e3:4a:8b:
8f:1b:a5:1b:56:2c:da:98:4a:a0:26:0e:f0:08:fb:40:de:45:
2a:8b:96:29:5a:b0:a4:30:06:bd:06:5f:5e:7e:2d:d2:01:4a:
70:cd:d6:1d:98:9f:21:50:aa:bc:3b:92:b2:8f:d0:04:67:6f:
ab:47:36:3b:24:16:f1:0e:80:0c:58:8c:df:4c:88:8b:fc:38:
49:87:7c:46:9f:f3:0b:00:46:b5:b4:58:95:f8:fc:4e:86:f1:
f5:9e:86:2b:27:b2:0c:1a:ef:ac:74:b6:22:f3:30:3a:ff:2f:
86:eb:f5:af:95:fb:6a:25:4f:e7:1a:2d:a2:e3:b7:0a:d1:6b:
76:44:48:0e:a0:45:7c:2f:5c:56:4f:73:d5:8d:5c:17:b6:20:
4f:b0:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:49 2025 by rpki-client