Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aep9xKmDuIJ-gmeqaVASyPxDKWc.roa
File: aep9xKmDuIJ-gmeqaVASyPxDKWc.roa (raw, json)
Hash identifier: z2i+PTk9ykTmmcNBAiovurQZPm/FBAMTuk9SBzFePvI=
Subject key identifier: 69:EA:7D:C4:A9:83:B8:82:7E:82:67:AA:69:50:12:C8:FC:43:29:67
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01876FFFD24C06D355B68111EB6D50C7E218
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aep9xKmDuIJ-gmeqaVASyPxDKWc.roa
Signing time: Tue 11 Apr 2023 11:07:29 +0000
ROA not before: Tue 11 Apr 2023 11:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 45.141.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:ff:d2:4c:06:d3:55:b6:81:11:eb:6d:50:c7:e2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 11 11:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ea7dc4a983b8827e8267aa695012c8fc432967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:88:81:7d:3c:d7:97:3e:16:8b:9a:54:4f:
34:8d:a3:fe:d6:14:cf:9b:13:79:15:97:a1:12:d3:
f3:cc:e1:66:b2:05:0b:15:3d:42:b1:ea:b0:6b:07:
b3:7c:54:55:87:6a:fb:49:89:79:24:84:c6:4e:8f:
1d:68:b3:26:fb:9f:fb:ed:32:bd:f2:69:8a:7c:fc:
af:f3:3c:1a:3a:80:e9:6f:75:a9:70:00:c1:48:cc:
e2:45:41:85:89:04:fa:c2:c1:7a:1d:d0:00:69:c0:
12:4f:b9:69:0b:a9:e3:90:77:8a:f2:18:b9:af:9b:
65:11:43:29:2c:bd:ff:0d:34:8d:68:97:01:92:90:
54:06:d6:60:93:15:37:7a:34:d7:cc:0a:87:78:3a:
40:7b:70:91:fe:b1:8a:20:11:e6:c6:6a:6a:1b:e7:
b1:ca:2b:c3:d1:58:9a:cf:82:68:62:6e:f7:15:b6:
5a:a8:d8:36:5d:dd:8e:e1:13:d7:db:5d:71:ab:f6:
54:0b:65:98:28:dc:9a:1f:2e:ec:2d:66:0b:de:10:
36:d9:7e:90:65:61:dc:d1:ca:13:c6:4e:80:7d:58:
6e:7b:dc:47:11:62:74:fb:40:ee:cb:80:cd:4c:76:
1b:c4:ea:d2:e2:7d:79:c6:6d:8e:c7:b8:56:78:1d:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:7D:C4:A9:83:B8:82:7E:82:67:AA:69:50:12:C8:FC:43:29:67
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aep9xKmDuIJ-gmeqaVASyPxDKWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.178.0/24
Signature Algorithm: sha256WithRSAEncryption
12:77:4f:07:25:a2:c0:f3:34:95:0f:87:0f:f6:d0:c3:4d:e2:
06:a4:7a:24:82:ae:d7:e8:bd:c2:4d:7b:fc:60:c3:9d:da:eb:
b6:52:c9:80:2a:2f:bf:2b:8b:14:6a:41:ff:4d:5c:cc:c1:3b:
88:69:66:53:94:a1:4b:98:68:fb:8a:f9:4c:9a:7b:3a:4a:ec:
8b:e0:4d:fe:7c:e1:18:b4:39:cf:e1:c1:97:d3:ad:e8:e1:0c:
57:a0:c4:60:de:10:f1:06:26:57:b5:ee:4a:c2:25:0a:85:45:
97:7a:7e:9a:e6:91:1a:94:19:22:7b:08:50:7e:97:e4:63:77:
68:99:8b:e8:fe:e8:45:0a:9c:1a:14:8c:28:e7:96:db:16:93:
29:eb:b6:d0:8c:1a:28:d9:68:11:69:93:7e:12:6c:f6:81:3c:
71:10:89:dd:4c:50:25:86:e0:04:03:fc:25:2e:be:a7:5b:90:
7d:5f:a8:94:33:45:ce:87:7c:13:d2:58:5e:8c:6e:43:0f:13:
59:3c:0e:36:21:2f:87:4f:48:fd:20:fc:ff:45:14:ae:d3:6f:
16:42:a2:40:f1:82:46:ad:ae:7c:0d:ac:68:dc:6f:c9:ae:ae:
40:43:33:30:9d:9c:d7:1e:c5:60:fb:b0:0c:4d:96:b3:4b:2e:
a6:22:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:21 2025 by rpki-client