Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jvQ2VrT5ifmccADtM6bzcZ8z1ZQ.roa
File: jvQ2VrT5ifmccADtM6bzcZ8z1ZQ.roa (raw, json)
Hash identifier: HMBNz7AXklRW3A9oC+hmsKmH5U+CnoMjeXgM+5ODTA0=
Subject key identifier: 8E:F4:36:56:B4:F9:89:F9:9C:70:00:ED:33:A6:F3:71:9F:33:D5:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 014A016B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jvQ2VrT5ifmccADtM6bzcZ8z1ZQ.roa
Signing time: Sat 01 Jan 2022 05:55:02 +0000
ROA not before: Sat 01 Jan 2022 05:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 45.137.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21627243 (0x14a016b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 05:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ef43656b4f989f99c7000ed33a6f3719f33d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:56:8d:c8:87:ad:72:0b:a0:9d:17:ab:8b:
d1:1c:51:73:96:a8:4a:02:61:02:f5:d8:bb:60:5b:
56:15:61:05:cc:2a:b7:4f:0f:c8:f5:5d:89:6c:5e:
f0:f8:46:5f:d1:e2:4b:3e:df:39:e7:2d:a0:43:36:
f7:f7:19:99:85:94:ab:df:1d:64:90:16:a8:db:cb:
26:fe:82:14:7d:ff:af:c8:27:98:ed:fc:dc:20:4d:
8a:86:33:f5:2f:81:6c:83:f3:e4:3b:50:5b:dd:e8:
10:ea:3f:e9:3a:8e:7b:a9:0e:5f:f3:54:5b:04:69:
f8:16:52:78:62:02:2d:4e:ca:3b:0f:37:9b:99:86:
7d:6a:22:fe:40:68:26:28:69:33:1b:1c:e4:eb:ea:
26:24:cf:ec:77:7d:69:c3:33:93:dc:16:3e:81:5d:
cb:7d:bd:54:78:2c:46:c4:e4:16:55:61:02:b9:2a:
08:c4:a6:a7:78:a6:21:e1:b4:b6:57:57:ad:d3:51:
3a:12:65:17:07:bc:87:0a:26:90:f8:c2:f6:b6:64:
5e:98:b9:87:91:16:c7:c9:f5:58:15:94:2d:b8:66:
a1:92:7f:99:c2:c0:68:b7:bc:39:aa:d2:d0:1a:64:
cc:89:fb:4b:ec:a3:05:a7:e5:15:ea:46:0b:52:d9:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:36:56:B4:F9:89:F9:9C:70:00:ED:33:A6:F3:71:9F:33:D5:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jvQ2VrT5ifmccADtM6bzcZ8z1ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
Signature Algorithm: sha256WithRSAEncryption
40:70:c8:f4:0b:b0:cd:a9:98:20:ae:f0:1a:eb:07:97:d2:d6:
e6:83:51:e0:1d:d6:55:b9:04:19:16:d9:6f:21:fe:98:46:41:
62:ac:58:eb:ce:b5:5a:15:60:03:4b:eb:e3:9a:53:80:92:af:
ca:d1:09:b7:00:0b:61:8b:dd:ed:9d:06:e1:94:83:2b:09:77:
08:94:09:83:0e:f4:f0:69:9d:3f:5d:02:f1:16:a5:5f:fd:66:
c1:c5:c3:36:51:03:3f:1c:2a:58:90:6e:47:b6:41:28:fa:6d:
42:5d:a3:77:0c:e3:51:23:06:80:0b:10:7b:44:1e:7e:cf:c2:
4b:1a:74:00:b7:69:05:98:d8:85:f0:0f:be:f6:f9:86:8c:eb:
6c:15:82:a8:8d:6c:26:e1:62:08:0f:b5:91:1e:86:39:25:65:
b6:9c:77:ae:39:da:6d:d9:03:bd:c9:32:3e:9a:d7:be:f2:49:
7c:e0:1d:fe:98:e3:9a:7d:cd:d6:a2:62:2a:de:1f:76:e7:b9:
65:dc:69:0a:ae:b7:33:99:d8:5a:dc:6d:75:71:c5:85:bb:4a:
9e:80:02:b5:10:b2:a9:77:16:ac:98:85:1b:9e:80:92:b8:ca:
6f:92:d9:5d:56:b7:94:22:0b:fa:41:23:cc:e7:ed:51:5c:db:
b5:51:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:28:14 2025 by rpki-client