Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m0rdphEZLtzA9xUr8xhIvNBBC_s.roa
File: m0rdphEZLtzA9xUr8xhIvNBBC_s.roa (raw, json)
Hash identifier: szikaZgL6lFmv05XF9NxQK7krXsJ2X+YakJC9A2GyNk=
Subject key identifier: 9B:4A:DD:A6:11:19:2E:DC:C0:F7:15:2B:F3:18:48:BC:D0:41:0B:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018363EAD5AC009C0546DFA43D8295EA3BA5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m0rdphEZLtzA9xUr8xhIvNBBC_s.roa
Signing time: Thu 22 Sep 2022 06:37:57 +0000
ROA not before: Thu 22 Sep 2022 06:37:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7081
IP address blocks: 45.146.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:63:ea:d5:ac:00:9c:05:46:df:a4:3d:82:95:ea:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 06:37:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b4adda611192edcc0f7152bf31848bcd0410bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:5a:09:17:d7:00:4d:5e:e3:68:35:17:08:
36:cf:d9:e8:45:7d:0b:4c:79:7b:5d:8f:1a:8f:ad:
4e:14:7b:85:c8:4c:73:0d:96:75:94:a3:e0:2d:bd:
45:5f:08:16:49:4d:62:27:a9:92:d2:a8:f2:02:fa:
38:50:0f:ac:2b:18:4d:77:8b:32:20:87:76:e5:c1:
09:a9:04:a9:75:bf:66:04:57:a6:8d:f3:17:cc:8c:
3a:b6:b1:72:91:ba:45:b6:a9:fc:6e:de:d7:d9:4b:
a3:9c:c9:a2:20:f9:04:48:c8:45:0f:00:1f:07:89:
ca:74:6f:e8:3a:09:f5:59:84:bd:47:45:8f:bc:69:
9d:9f:5e:e2:2a:11:13:70:c5:42:67:a2:7f:92:50:
24:68:ee:32:74:f0:36:cf:30:2f:3c:20:d2:66:0f:
64:f6:ee:20:a8:36:30:12:3a:50:96:17:9a:2b:1f:
ff:6d:db:a7:2d:fc:12:f7:d3:80:55:b4:d9:0b:f3:
ec:02:9f:d2:5f:e5:e1:a1:81:48:88:d5:f0:28:80:
18:08:95:a2:72:3e:90:59:ee:79:29:7e:99:28:a0:
78:40:4e:5d:4f:3e:3f:39:62:9d:54:f7:d0:bb:81:
45:c3:10:66:7a:18:38:8b:b2:dd:02:6a:d1:a6:b8:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:DD:A6:11:19:2E:DC:C0:F7:15:2B:F3:18:48:BC:D0:41:0B:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m0rdphEZLtzA9xUr8xhIvNBBC_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:e3:d8:46:7e:a3:40:f1:5e:cf:fe:19:c6:53:72:c1:32:
34:c0:10:04:80:c3:b3:80:4e:21:a3:7e:74:0e:6f:27:65:24:
32:db:7b:40:22:8c:d4:cc:f9:47:79:ec:a9:a9:7e:a9:b0:02:
06:3e:79:bf:2e:16:bd:40:0b:59:91:cf:7d:ca:81:da:82:55:
b8:f4:8e:32:d0:6d:03:d1:24:54:11:ad:21:59:52:62:e3:cd:
7e:63:3d:48:83:3a:9d:71:4f:0a:dd:0a:d0:2f:1c:ef:4c:90:
33:1d:c4:07:8c:f1:8c:ef:e9:40:c2:fa:44:cd:c3:30:72:83:
e1:85:40:10:18:ea:c8:3e:bc:7d:66:8d:e3:f2:9a:5b:a8:19:
2f:2b:fc:e1:40:2a:87:02:d4:fb:6c:c5:7b:a7:38:19:a0:75:
cf:ca:9a:93:8c:cc:44:44:8a:e0:75:90:0e:61:8c:1d:dc:f6:
78:d5:67:11:73:62:0c:fd:bc:7b:cb:a8:02:ae:15:25:bb:32:
49:1e:9f:25:94:ee:ab:77:aa:bb:a7:a7:c4:b1:ed:f7:35:00:
83:0a:6b:e7:75:0a:9e:80:85:4d:7a:c3:34:98:41:5d:1a:67:
7a:87:4f:ce:2d:17:73:5b:94:2a:ca:ee:5e:98:4f:3b:b5:d4:
ab:61:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:32 2025 by rpki-client