Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kZ4abVbPnDq-z6-MRy_XzeB54F0.roa
File: kZ4abVbPnDq-z6-MRy_XzeB54F0.roa (raw, json)
Hash identifier: emUfnHzWFKZ8a6dZQTmdjm3wYjXS5XpVcT8ujfRcUdg=
Subject key identifier: 91:9E:1A:6D:56:CF:9C:3A:BE:CF:AF:8C:47:2F:D7:CD:E0:79:E0:5D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182C5540FAD52CE98DDEE748D88DF50805B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kZ4abVbPnDq-z6-MRy_XzeB54F0.roa
Signing time: Mon 22 Aug 2022 11:33:16 +0000
ROA not before: Mon 22 Aug 2022 11:33:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.95.98.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:54:0f:ad:52:ce:98:dd:ee:74:8d:88:df:50:80:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 11:33:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=919e1a6d56cf9c3abecfaf8c472fd7cde079e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:54:c1:33:ac:0d:83:82:de:fa:5c:8e:1b:
36:d7:d9:e1:be:71:53:0e:9f:28:88:46:2a:f7:b1:
1c:a3:a7:87:1a:08:f1:8e:af:5d:be:a7:1a:0b:59:
a2:82:7c:21:d9:86:39:fd:00:03:c3:f2:69:e8:77:
ff:09:14:62:36:ba:aa:66:db:71:70:06:27:91:8d:
05:60:99:84:e2:56:fc:62:d4:32:c9:b1:cc:d3:c2:
8a:38:95:5d:13:e5:2b:7e:5f:f4:0c:09:ca:a2:a4:
06:09:8e:25:62:e9:43:01:93:fb:9b:02:ea:7a:f7:
27:0d:2d:d6:ab:fb:12:19:98:e9:0f:4e:e3:c2:52:
84:28:01:0e:67:8b:e3:49:43:86:07:34:da:68:b6:
db:67:59:10:6a:11:b5:cc:02:56:81:d6:21:2b:1c:
51:7a:5b:de:1e:56:00:1d:5f:bd:dd:3a:f1:5c:50:
9b:c9:16:1f:f2:40:d3:d2:69:22:9d:1b:53:b1:08:
e8:de:dc:70:b7:0f:9b:60:f1:71:22:1d:94:cb:c8:
d9:55:18:92:00:7e:d6:d7:ba:0a:66:32:e1:3e:1e:
f3:04:b7:29:75:6d:1c:90:4c:81:69:3c:89:d0:50:
aa:82:1a:4d:88:4c:91:99:6c:4f:96:da:37:1e:25:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:1A:6D:56:CF:9C:3A:BE:CF:AF:8C:47:2F:D7:CD:E0:79:E0:5D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kZ4abVbPnDq-z6-MRy_XzeB54F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.118.249.0/24
45.137.82.0/24
45.147.31.0/24
103.229.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:46:60:32:9c:1f:f9:ed:b9:26:13:0a:d4:ad:d1:fd:c2:a6:
ae:46:2e:c4:f5:e3:82:92:cd:c1:bf:84:55:e0:cd:f8:ac:1a:
ae:7e:18:3e:c9:6b:7b:79:3b:8d:4d:a3:45:29:31:d1:f0:24:
d2:03:23:42:01:10:13:54:3a:80:df:a4:00:41:36:cd:a7:64:
12:35:6f:e1:ed:8d:85:be:0a:fe:31:83:c5:88:c5:d2:cd:0b:
0d:3e:bc:95:5b:45:96:6f:0a:8e:dd:e3:08:fb:54:dc:76:87:
37:52:0a:a6:79:a8:86:09:f1:19:6a:ba:f4:d1:80:e4:20:5a:
dc:aa:09:87:60:f6:fc:62:8a:b5:c3:9e:0e:09:de:44:ff:6f:
62:a0:ba:d1:0a:48:ac:da:78:9b:f3:3c:c0:73:a8:1e:06:a6:
71:f6:59:14:84:c2:cc:13:9b:3e:f0:1e:52:48:85:68:27:7b:
4d:be:2f:0f:a7:5f:71:b5:7f:39:1a:e3:d9:7f:42:ae:a6:a9:
64:6f:94:bc:ab:82:df:f8:10:67:dd:36:7f:e4:07:05:ec:ca:
6c:e1:22:d1:23:73:77:b6:4b:e6:a0:57:5c:51:12:d2:6c:5c:
5f:79:1f:36:9d:6c:4f:01:4f:b5:2b:5f:76:be:0c:cf:8c:22:
92:d3:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:54 2025 by rpki-client