Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nBmArKTKL4L_m1HCakFZFv9WzBc.roa
File: nBmArKTKL4L_m1HCakFZFv9WzBc.roa (raw, json)
Hash identifier: 0L8ABeCDw6eFxIhBkczcOel5nKTtHN9dV7a82UmWIv4=
Subject key identifier: 9C:19:80:AC:A4:CA:2F:82:FF:9B:51:C2:6A:41:59:16:FF:56:CC:17
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01B4E9E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nBmArKTKL4L_m1HCakFZFv9WzBc.roa
Signing time: Wed 02 Feb 2022 19:14:40 +0000
ROA not before: Wed 02 Feb 2022 19:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 45.157.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28633569 (0x1b4e9e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 2 19:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c1980aca4ca2f82ff9b51c26a415916ff56cc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:0e:24:29:cc:78:19:6b:f0:87:e0:c2:15:
9d:32:87:90:1c:ab:a6:fe:f5:65:13:c9:ba:66:34:
26:43:df:ab:4f:a2:91:48:b6:f7:f5:61:44:bd:cd:
99:60:c7:88:fc:36:e6:7b:51:d5:a6:54:1b:1a:fd:
7c:33:f5:4f:2e:7e:c7:4b:62:86:67:d9:43:a6:21:
4a:6f:0c:f8:5e:5b:21:e3:7e:09:44:80:f6:ca:28:
1d:f4:f4:50:a4:a8:a6:6e:39:81:fd:f2:0f:e8:6d:
6c:4b:ba:85:b6:9f:3b:65:8f:27:be:2a:3c:21:a2:
41:1d:94:2f:dd:70:c4:ff:63:fb:e8:ae:88:2e:46:
86:4f:bc:ce:60:e7:f1:7c:6d:00:7b:57:59:aa:14:
70:49:1c:fb:86:1b:9c:fa:96:98:af:99:97:82:22:
eb:f1:37:c0:49:05:ca:0c:27:91:aa:31:32:41:90:
17:ee:7b:1e:1d:50:f3:e2:9f:2c:8f:0a:e7:ef:49:
36:cb:43:f3:22:a7:48:80:46:f9:d0:25:45:74:f9:
80:b9:16:f9:12:cd:e7:e0:bb:9a:0e:b9:08:c4:a1:
77:55:c9:e1:0b:bc:7b:d9:c2:98:68:9c:1c:9b:a1:
98:cd:3a:2f:7a:02:07:85:cc:93:c2:70:2b:da:e3:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:80:AC:A4:CA:2F:82:FF:9B:51:C2:6A:41:59:16:FF:56:CC:17
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nBmArKTKL4L_m1HCakFZFv9WzBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:99:9e:9e:05:55:6f:37:b6:2a:80:64:4c:d7:58:fe:39:63:
90:10:e5:3e:14:a2:bf:49:9b:90:1c:ec:5e:7d:4f:98:08:5a:
88:62:1c:08:74:5f:4c:67:b1:26:7c:cd:09:b2:f2:76:c7:bf:
42:1a:74:df:7b:26:88:32:6f:d0:6e:46:47:36:54:a5:63:0f:
62:76:4a:ea:0b:93:e6:a6:fe:ab:20:f9:55:36:f2:76:56:20:
42:b3:36:f3:2d:59:8b:02:59:ad:46:b5:c9:20:6a:bf:ce:92:
5a:a4:6a:9c:96:24:c5:f3:17:3b:ef:62:ca:e0:29:60:b5:bb:
ec:47:24:17:2a:a3:08:3e:de:08:0f:66:5a:90:af:7f:9c:30:
91:32:ac:1a:94:0c:0e:9a:32:57:f5:96:a0:ce:63:73:81:fb:
42:92:22:a9:39:49:b6:2d:5a:1b:76:f4:c4:27:16:2a:ae:9f:
0d:78:73:c7:ce:5d:85:96:f1:80:dd:bf:27:53:cf:ab:a1:0f:
08:10:4a:b0:65:c2:38:7b:c2:b9:72:0b:65:9e:98:0e:f0:b1:
a0:35:52:c9:97:7c:46:33:1f:81:f4:37:ad:35:e0:04:7f:93:
c5:05:a1:cd:6d:f0:33:6b:c8:35:36:84:a8:e9:9a:0d:8a:fc:
0e:98:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:58 2025 by rpki-client