Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_89YJstm43TCnEMT7IAqxOkbtM8.roa
File: _89YJstm43TCnEMT7IAqxOkbtM8.roa (raw, json)
Hash identifier: R2rzo4zGfS8WQJRoghAE8ww/IORQ3eIFevubbAYYZw8=
Subject key identifier: FF:CF:58:26:CB:66:E3:74:C2:9C:43:13:EC:80:2A:C4:E9:1B:B4:CF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C96121C9DF212D41089B3231C4AB20D21
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_89YJstm43TCnEMT7IAqxOkbtM8.roa
Signing time: Sat 23 Dec 2023 09:46:58 +0000
ROA not before: Sat 23 Dec 2023 09:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 45.152.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:12:1c:9d:f2:12:d4:10:89:b3:23:1c:4a:b2:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 23 09:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffcf5826cb66e374c29c4313ec802ac4e91bb4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:66:23:a6:35:01:77:c5:2c:b8:17:a0:34:
c0:e4:90:8c:66:63:da:fa:57:20:0d:a3:6c:78:3f:
fb:b3:ab:8e:b5:d0:53:00:96:03:ba:f4:7c:4a:76:
ea:5d:aa:ea:11:3d:ad:4b:17:22:18:46:20:13:29:
9e:89:c3:d3:68:78:ff:ba:56:ec:10:b2:69:d9:d5:
64:bc:1a:16:bd:c5:fe:af:cf:26:41:c9:df:a0:fe:
f2:15:fa:37:ac:52:cf:4f:23:37:b0:70:f2:51:84:
2b:08:2e:55:b8:43:5d:b4:7e:32:a8:18:55:13:75:
59:5d:d2:48:7e:e4:77:82:20:f6:0e:48:85:62:c8:
83:f1:ac:60:4c:92:f4:b7:81:36:5e:34:20:0b:24:
96:03:e3:cf:ee:df:5f:01:8f:f7:c7:4b:b8:96:04:
88:02:98:82:10:c9:bd:47:34:43:a2:61:98:a6:3c:
77:52:13:45:f8:43:10:05:83:ae:a7:8f:f5:8a:12:
75:5f:4f:b3:d4:91:a7:1c:73:60:60:4a:73:b0:f3:
2e:f9:cd:71:02:95:90:3a:c3:30:bf:48:3f:8e:3d:
21:1c:bc:18:6b:de:47:1c:b7:fc:a3:03:df:31:8f:
5d:75:0e:48:e2:55:79:c3:a1:f5:a6:4e:eb:88:c6:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:58:26:CB:66:E3:74:C2:9C:43:13:EC:80:2A:C4:E9:1B:B4:CF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_89YJstm43TCnEMT7IAqxOkbtM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.197.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e2:8d:87:02:11:fc:af:f1:52:f3:89:31:22:8e:51:49:cc:
20:21:fb:42:74:21:4d:02:08:b2:ef:b0:b7:23:72:b2:6b:a6:
d4:73:db:ee:91:96:07:de:12:71:93:56:a0:81:56:64:10:d0:
2f:97:12:55:cd:fd:23:0f:87:88:65:b9:2d:44:ec:61:31:a9:
f7:cd:37:a1:df:a2:fb:f4:fa:9d:aa:a4:e2:69:1b:92:a8:88:
03:9f:db:40:f3:40:f2:3c:7c:3a:95:29:28:c5:b4:27:0b:ee:
91:54:ca:7a:92:a5:aa:77:3a:95:39:86:ff:d5:99:bd:f4:9e:
6c:c0:bf:53:de:b8:b5:b5:1f:80:6a:58:32:c5:12:df:cb:1c:
9f:b5:09:c4:b3:fb:41:0c:f7:03:4d:d5:b4:2e:7b:21:ff:c5:
66:4b:90:d2:d4:5d:85:60:7e:da:24:ac:41:12:dd:4b:2b:8d:
13:ed:49:e0:60:08:26:6b:20:1c:95:9a:b4:5f:b9:7a:9e:74:
05:ce:c7:e4:70:62:08:a4:f4:29:e1:8d:10:15:54:8a:e3:e4:
d8:80:12:c6:d3:e7:24:b1:e3:bb:76:a4:3b:ce:cf:ab:bd:ed:
8b:2d:cd:2a:67:62:ce:17:d9:d2:05:ae:90:13:2a:a4:f7:7c:
99:2b:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:57 2025 by rpki-client