Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5JkYL9IJzQIFd5dZ6S3zW2RmYY.roa
File: G5JkYL9IJzQIFd5dZ6S3zW2RmYY.roa (raw, json)
Hash identifier: Kz9NGX+KcmcuuLqCLkVyOeiKdBbSbXsfQa6YxqNmFKk=
Subject key identifier: 1B:92:64:60:BF:48:27:34:08:15:DE:5D:67:A4:B7:CD:6D:91:99:86
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184850ABCEBCC18D1B948D3F8D8227CAC62
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5JkYL9IJzQIFd5dZ6S3zW2RmYY.roa
Signing time: Thu 17 Nov 2022 10:03:04 +0000
ROA not before: Thu 17 Nov 2022 10:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.118.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:0a:bc:eb:cc:18:d1:b9:48:d3:f8:d8:22:7c:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 17 10:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b926460bf4827340815de5d67a4b7cd6d919986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:a5:ae:6d:df:5b:bc:db:25:65:08:d2:6d:
0a:a0:ed:0c:35:ca:69:be:10:c4:90:8d:1f:14:c9:
49:e8:15:1d:19:c1:a0:37:f4:d6:90:20:b0:27:b2:
9b:66:39:94:ee:c3:3e:89:6a:6e:03:18:a7:b9:67:
04:7f:54:10:51:f7:59:08:29:12:c0:50:cb:8a:e4:
5d:83:3b:d0:ae:10:6c:29:ea:67:e1:b4:57:bb:7c:
40:0c:62:48:4b:31:2a:c3:38:af:78:45:94:1b:36:
b3:18:fb:05:02:5b:07:be:e5:55:5f:6c:53:46:c5:
4b:78:f7:af:2c:64:43:d5:5b:a1:27:e2:3a:ba:6c:
70:14:aa:74:50:9d:f7:31:77:70:4a:3b:18:35:46:
5f:64:1f:78:af:4b:86:f0:e3:0b:3f:7c:f4:20:83:
19:bd:f9:14:96:ac:2a:55:64:91:ad:aa:6f:5f:8d:
f4:df:83:b9:e4:f6:d5:21:4e:c0:17:fb:75:f1:0d:
09:10:cf:0a:71:37:19:f7:2c:9a:6f:21:18:76:2c:
44:a8:82:d3:1e:fe:78:fd:fb:9c:8c:39:95:2a:f5:
ef:2f:59:6d:85:2f:fa:39:11:73:e9:37:ad:14:b2:
a2:31:d8:2e:0a:9a:1a:a7:b2:c0:50:97:63:f8:26:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:64:60:BF:48:27:34:08:15:DE:5D:67:A4:B7:CD:6D:91:99:86
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5JkYL9IJzQIFd5dZ6S3zW2RmYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.249.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bc:de:08:07:34:87:62:59:30:00:5c:4c:1b:4b:ff:b8:99:
bc:ab:06:9e:f8:c9:19:f1:95:fd:70:4d:00:c2:54:6e:10:00:
08:a7:d7:14:ff:5d:43:23:6e:23:3a:b9:87:82:e4:09:68:87:
e4:2d:7d:12:c3:fd:31:1c:ca:a6:e9:54:79:59:25:59:69:5e:
25:c8:d5:88:fd:fc:0b:a1:3d:99:ee:b4:fe:01:46:a4:57:3e:
68:14:43:84:68:c7:73:14:df:5a:09:88:95:8a:c9:4c:ca:31:
de:93:bc:2a:0a:9b:a2:4f:93:27:97:fe:53:ed:66:b5:df:f6:
e1:9d:49:90:30:73:16:bb:89:3f:cb:61:77:4b:52:1f:cd:49:
3e:e9:15:7e:a0:e1:3a:30:39:c9:b5:fb:26:b9:d2:02:42:ed:
52:95:d6:08:98:bd:77:e1:3a:b5:c0:fb:56:55:d7:20:b8:d5:
26:d8:0e:c7:fb:32:a4:81:c3:67:9f:99:12:22:c6:7b:58:2a:
92:bd:97:a4:28:3c:92:1e:62:95:9a:2d:bf:9d:9d:6b:c2:ae:
27:65:bc:6b:57:99:e1:6c:f3:1e:1c:fb:9a:3a:71:f9:a7:0c:
09:53:83:57:f1:fb:d4:16:e6:d0:22:a8:54:94:fa:ec:e1:c7:
5f:d1:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:51 2025 by rpki-client