Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hMORP2gSXFhKXeATiKyc4Qpk-fw.roa
File: hMORP2gSXFhKXeATiKyc4Qpk-fw.roa (raw, json)
Hash identifier: 4nrrPfX2CakfntG9Q6LvAQ/hBdHPPvhDvaNp7pz1zqo=
Subject key identifier: 84:C3:91:3F:68:12:5C:58:4A:5D:E0:13:88:AC:9C:E1:0A:64:F9:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 035A7440
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hMORP2gSXFhKXeATiKyc4Qpk-fw.roa
Signing time: Tue 31 May 2022 10:19:13 +0000
ROA not before: Tue 31 May 2022 10:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.118.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56259648 (0x35a7440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 31 10:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84c3913f68125c584a5de01388ac9ce10a64f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:cc:7f:9d:17:84:45:19:65:e9:e6:fb:03:
33:ab:0e:ff:b7:e7:0b:e3:17:12:72:c8:ad:6f:68:
a2:eb:b9:e4:41:5a:c5:82:98:df:6b:d8:dd:c0:41:
c5:ad:7e:d5:8c:d0:bc:f8:dd:7c:7c:15:46:22:48:
5a:41:0e:00:2d:2d:60:ec:00:4f:32:e2:65:d3:2e:
49:87:b1:1f:3a:af:f0:96:e8:c5:ed:d5:ba:db:ae:
4b:12:a9:ed:e7:86:72:ba:2d:6d:0b:c2:b5:94:88:
64:5b:f0:ec:85:18:38:84:9f:9c:30:45:d1:11:e1:
50:49:86:a1:3f:19:15:e2:49:f7:c0:ab:c5:14:d5:
d5:d8:2e:d6:03:89:2f:f3:80:f8:12:00:41:d6:b3:
d0:d8:dd:f3:49:cb:8d:86:22:23:5e:f4:2a:09:ba:
33:ad:26:7f:b4:47:14:54:87:da:22:49:c3:87:24:
c8:9c:eb:c7:20:47:a5:43:8e:d1:0d:64:64:32:2c:
98:00:05:ae:14:ab:9e:95:6e:63:c1:6a:a1:34:a0:
ea:4b:2e:cb:5c:0b:5e:7a:45:74:2f:60:97:ea:48:
6b:50:47:cb:f9:36:3c:60:f0:b2:f4:b7:31:5a:79:
c5:40:a9:e8:0e:0e:1a:b7:70:41:77:d8:cd:d3:e7:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:91:3F:68:12:5C:58:4A:5D:E0:13:88:AC:9C:E1:0A:64:F9:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hMORP2gSXFhKXeATiKyc4Qpk-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
Signature Algorithm: sha256WithRSAEncryption
30:13:0b:00:71:ed:ed:f1:d7:ce:26:cd:5b:bc:b5:47:09:8f:
b6:d0:11:cc:09:7d:34:a4:27:7a:23:11:26:f5:a6:f4:af:3d:
9a:7e:04:fa:51:78:53:ee:10:ad:ef:97:17:bc:77:f6:9a:e1:
96:6b:ff:30:07:ab:eb:cd:a1:77:35:df:2b:19:cf:f8:a3:ac:
3f:9c:68:0f:0a:0e:81:bf:76:52:56:8d:5b:1a:7d:3e:92:3f:
08:2f:44:af:72:26:9b:15:7a:2a:a6:48:88:d2:e6:21:43:e9:
55:77:e1:ab:5e:aa:6d:19:06:28:5b:8b:65:3a:6c:6e:63:26:
24:87:e9:c8:b4:20:4d:d7:29:27:98:5d:51:46:79:7d:47:90:
39:f7:ab:e6:ca:5c:81:f4:32:16:46:15:bd:7a:91:ca:4e:db:
19:71:35:b3:78:5b:17:3b:0b:28:a4:88:d7:e7:65:70:78:3d:
18:14:38:21:07:64:75:ab:50:72:02:11:58:32:5f:06:bf:bc:
d4:28:70:c9:8d:d9:6b:6d:a2:44:cd:43:1a:87:33:58:bd:54:
03:37:9d:9a:ca:b2:2c:f4:dd:74:56:fd:5a:e4:45:26:49:94:
b5:ef:a2:a0:19:b5:9f:9e:75:25:70:18:8a:1a:06:80:98:80:
30:0c:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:45 2025 by rpki-client