Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kqGeb8UdGUco6hNIMOsP58g5UOE.roa
File: kqGeb8UdGUco6hNIMOsP58g5UOE.roa (raw, json)
Hash identifier: O8IizAyZT2v49Qqa+fsUHgmZQl7wxBma7SIsst1AJ6Y=
Subject key identifier: 92:A1:9E:6F:C5:1D:19:47:28:EA:13:48:30:EB:0F:E7:C8:39:50:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018323BBAA51DB8C96B03F8DC595879F77A7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kqGeb8UdGUco6hNIMOsP58g5UOE.roa
Signing time: Fri 09 Sep 2022 19:30:44 +0000
ROA not before: Fri 09 Sep 2022 19:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.95.98.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:bb:aa:51:db:8c:96:b0:3f:8d:c5:95:87:9f:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 19:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92a19e6fc51d194728ea134830eb0fe7c83950e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:11:db:18:7e:d2:8f:e1:de:44:04:f8:e7:
fa:d2:ae:b1:06:aa:91:25:1d:27:16:23:bc:e5:90:
dd:91:66:3e:57:4a:60:7c:e3:3b:3e:6a:c0:d8:2a:
de:a7:25:e7:65:87:e4:c2:87:23:2f:e7:65:09:6d:
67:df:36:a5:73:80:31:ad:d3:51:8a:58:e6:c7:98:
32:28:79:30:40:43:73:f7:71:2b:56:fb:9b:c6:98:
fa:26:52:de:66:85:fb:ab:49:22:56:20:8f:69:ab:
2b:ab:10:73:19:75:ea:aa:7b:77:fb:50:dc:ba:1c:
f8:3e:bf:11:2f:6c:26:8e:b3:2c:92:9f:0c:1b:c3:
f9:02:c4:32:f7:4c:84:bb:95:e4:4f:68:86:f8:c3:
16:a1:0f:6a:d7:d6:73:35:46:5a:ea:42:cd:57:ea:
0d:6e:60:ee:60:a9:f0:1c:22:47:85:70:2d:9f:9c:
cf:26:0b:4d:56:63:92:ac:30:1a:2c:af:36:94:49:
c4:c1:16:c8:7f:e0:05:8f:4e:78:5e:12:e2:15:bb:
d5:70:ed:30:7f:38:03:26:95:50:1e:ea:df:7e:1a:
16:12:cd:b3:0d:d0:1d:ca:63:2c:15:1c:40:d6:19:
3c:06:23:f7:d4:ce:a1:c5:b3:f3:20:40:93:cc:62:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:9E:6F:C5:1D:19:47:28:EA:13:48:30:EB:0F:E7:C8:39:50:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kqGeb8UdGUco6hNIMOsP58g5UOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.118.249.0/24
45.137.82.0/24
103.229.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:49:02:d7:6e:f7:38:d0:7d:aa:d3:a2:16:24:81:2e:01:3a:
ce:ec:ab:31:c0:6a:88:06:5a:ae:c2:22:0b:b9:5c:80:43:6d:
89:27:b2:6f:59:d0:d6:05:a6:2f:7b:58:de:b7:b3:13:e1:dd:
bf:f5:f5:bf:49:21:37:5e:b9:30:5c:5a:73:2d:d3:a0:3d:83:
92:59:7b:97:e3:bc:27:34:02:d8:1a:dd:6f:85:09:88:1a:d7:
66:5c:d0:a3:f8:27:88:86:b9:c8:1a:96:50:18:71:47:78:15:
e9:c9:5c:a4:7e:55:aa:23:2c:15:a1:95:e1:c5:ad:5c:ee:0f:
55:83:10:97:76:7f:86:10:fc:4c:11:4a:f9:72:9b:51:09:ee:
c9:9d:90:09:09:19:df:5c:dd:40:b9:5b:a2:ba:40:d4:9c:fb:
f8:55:39:c8:30:6a:ad:46:ea:56:fa:8b:23:c4:e9:e3:35:2f:
a9:99:53:e4:b5:7b:38:fa:85:a8:79:29:03:53:68:96:46:20:
92:cf:4a:e7:79:14:79:66:57:d1:c9:f8:31:5b:b9:17:96:21:
78:e6:fc:90:7a:1d:5e:d4:de:c5:4c:07:d3:bb:5c:70:94:af:
5a:05:24:ae:d3:5e:79:1b:49:24:5a:75:f7:09:20:8e:35:65:
c9:1e:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:55 2025 by rpki-client