Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cg21ZesFhHZrNhfshgJjF0Utfzw.roa
File: cg21ZesFhHZrNhfshgJjF0Utfzw.roa (raw, json)
Hash identifier: 09l65zeSOdJ3fsfSjSO/Kt4qW7e9L0qzzbrDonM7C+M=
Subject key identifier: 72:0D:B5:65:EB:05:84:76:6B:36:17:EC:86:02:63:17:45:2D:7F:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184D29A83D92B4C0545DAAFB5399D30CAE9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cg21ZesFhHZrNhfshgJjF0Utfzw.roa
Signing time: Fri 02 Dec 2022 11:30:52 +0000
ROA not before: Fri 02 Dec 2022 11:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.118.248.0/24 maxlen: 24
2a0f:7d00:1::/48 maxlen: 48
2a0e:15c1::/32 maxlen: 32
2a12:d6c1::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0e:2240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:83:d9:2b:4c:05:45:da:af:b5:39:9d:30:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 2 11:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720db565eb0584766b3617ec86026317452d7f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:2f:b4:a8:89:e4:02:3b:c6:6c:dd:bf:7c:
a6:69:f1:ba:a6:d4:72:24:79:0d:83:c2:d7:c7:02:
f8:ac:26:0b:7e:90:fc:73:19:92:c9:0a:74:56:ff:
29:d5:f9:33:28:9d:36:53:34:b9:46:86:f4:ba:50:
00:e0:9e:4c:52:a8:27:6e:f1:d6:1c:98:9f:0a:66:
0d:70:f0:a6:78:55:64:85:13:b9:0d:c5:4a:f6:34:
e1:56:9a:3a:78:07:8c:48:7d:22:89:1d:5a:56:f7:
61:32:c8:68:da:eb:21:a6:34:f9:27:7a:ef:7d:03:
69:7d:3f:8b:82:2b:ac:d5:e4:d3:44:84:b5:ed:54:
9e:a7:7a:90:a1:b4:e6:e2:3b:a2:bb:66:68:08:23:
8b:82:f7:77:82:e7:61:fe:9f:9d:81:c6:89:07:c1:
15:81:56:3e:06:39:ca:4c:07:25:3b:84:23:4b:1f:
95:0b:d0:4b:ba:bd:3b:a9:9b:4d:ac:42:7f:93:bb:
ff:8c:f1:2b:7b:4c:b9:0b:90:72:f6:11:3d:d7:29:
0f:ef:cf:38:02:17:97:7c:cf:3f:db:02:a3:55:3c:
b6:65:00:87:5f:3c:01:9d:08:77:e4:bd:fd:b1:16:
b4:d5:36:59:e9:c8:37:90:9e:b2:97:44:80:77:7f:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:B5:65:EB:05:84:76:6B:36:17:EC:86:02:63:17:45:2D:7F:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cg21ZesFhHZrNhfshgJjF0Utfzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
IPv6:
2a0e:15c1::/32
2a0e:2240:1::/48
2a0f:7d00:1::/48
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:35:a0:93:6a:e6:f2:0e:00:52:db:20:3d:7c:9c:2d:03:d6:
da:b0:00:f5:fb:61:2f:87:de:88:f7:f2:17:fd:43:85:39:81:
d7:a6:63:12:21:d2:0c:b3:8c:4c:16:a4:6c:41:57:4c:f3:ed:
6f:dd:c7:a1:88:ae:4f:d8:41:3c:51:a2:9d:8c:1d:f9:3a:eb:
5d:96:db:ea:59:68:42:a3:df:d7:4a:d6:a3:fa:67:0e:94:b2:
0d:69:e2:4b:9f:f0:f9:01:d9:a5:b5:1d:4c:7c:5d:dc:40:35:
76:6d:e2:e9:5d:4f:e6:68:92:35:d3:66:ca:d4:22:69:1f:f5:
33:36:0b:25:68:7e:89:34:16:08:7f:43:44:3f:1f:80:b6:a5:
46:e2:74:ce:3b:d6:f4:08:44:a1:57:5d:ae:19:c6:f7:90:39:
45:bf:ac:ef:b3:00:e0:88:fc:b4:87:93:73:67:8e:61:9c:e9:
ea:5d:57:20:d2:d9:f2:8f:71:a8:50:28:7f:c6:48:9b:03:45:
c2:c1:1d:8b:7c:b0:32:3b:d0:1c:c0:fd:93:df:e7:22:f5:ab:
00:c5:65:01:c6:32:c7:3d:e5:51:8a:f1:79:80:97:89:4d:12:
7a:df:e9:8d:0e:da:06:83:90:ae:5b:0d:76:fe:64:e4:5b:04:
37:d1:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:29 2025 by rpki-client