Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nPa3wBrpARxuSip3A2WXNIwyG3g.roa
File: nPa3wBrpARxuSip3A2WXNIwyG3g.roa (raw, json)
Hash identifier: IH91QyM0fk1e50lKMJFXWoRTPlXxJqEDLw21AvhoE5c=
Subject key identifier: 9C:F6:B7:C0:1A:E9:01:1C:6E:4A:2A:77:03:65:97:34:8C:32:1B:78
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01B5965D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nPa3wBrpARxuSip3A2WXNIwyG3g.roa
Signing time: Wed 02 Feb 2022 19:14:41 +0000
ROA not before: Wed 02 Feb 2022 19:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.158.196.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28677725 (0x1b5965d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 2 19:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cf6b7c01ae9011c6e4a2a77036597348c321b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:dc:be:13:d9:ae:5a:6e:a1:4c:f5:eb:d7:
73:fb:71:e7:28:db:c0:11:de:87:be:f0:a5:ae:2b:
31:1f:16:92:01:e9:e3:9d:bf:84:34:9f:84:04:e6:
77:11:aa:95:9e:f8:86:01:a1:c2:db:46:40:e9:71:
05:75:8d:0f:5d:ad:97:5e:3a:32:9b:8c:77:8a:4c:
4f:fb:58:3f:f6:ed:53:89:32:d7:ff:36:58:3f:14:
d8:b9:89:13:32:2a:9b:54:59:3c:e7:55:f4:b4:66:
79:b8:f7:30:23:14:76:ec:33:e7:cc:49:e8:b4:69:
04:36:80:5a:65:a8:07:c0:19:23:e6:8b:32:6e:16:
49:4f:59:90:ba:57:f0:bf:75:9b:43:42:97:d8:ea:
22:28:84:c8:b5:77:6a:93:7b:7a:c4:5c:30:e5:c0:
7a:6b:57:7e:8a:92:69:98:8a:0c:69:cb:3a:65:88:
f4:00:f0:ea:4f:00:28:a2:ea:06:ab:9c:67:6d:ae:
0a:5d:1d:b7:6d:a3:86:e1:c0:28:38:99:ab:bf:ce:
bc:ed:a3:36:6e:76:20:45:14:7b:76:0d:84:99:c2:
94:0a:fc:78:23:e5:0b:42:f2:b3:f7:7a:bb:f5:53:
1e:10:1f:c7:6b:ee:76:29:74:c3:bc:ca:47:a2:47:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:B7:C0:1A:E9:01:1C:6E:4A:2A:77:03:65:97:34:8C:32:1B:78
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nPa3wBrpARxuSip3A2WXNIwyG3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.219.0/24
45.158.196.0/24
185.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
05:46:65:6f:ff:66:44:4f:2a:89:00:b6:c5:91:0b:db:3f:dd:
61:cf:ea:51:0e:de:44:83:d1:3c:ec:12:27:f0:ff:f0:17:0d:
07:61:51:2a:1d:e0:9d:17:b6:4c:26:4b:22:ac:8d:f4:d6:ca:
0f:0b:46:2b:8f:99:2e:42:20:89:8f:f5:04:e5:2e:74:ea:bb:
7f:ed:50:0c:1a:d7:46:39:58:8b:df:53:cc:fa:89:fe:39:44:
fe:58:e0:f3:49:1d:c7:be:43:9f:2d:a5:a1:8e:71:c0:67:65:
df:41:73:e0:95:d8:cb:8c:4e:75:54:14:3e:cb:a7:a6:4f:f0:
1d:d6:ee:b3:c3:1f:b4:a1:69:23:06:35:bd:e9:b5:5b:99:b9:
6f:27:4f:34:ee:3e:b3:95:af:49:f2:ca:35:68:44:f0:10:78:
26:79:10:d2:c9:0d:44:20:27:f9:02:e7:63:1c:1b:61:a6:7a:
be:0f:89:91:ca:91:04:47:5b:a6:68:b6:e4:cb:9b:9c:65:03:
c3:e9:c0:30:43:c1:03:d3:18:ac:8c:08:7b:7f:13:4f:c6:36:
a8:5d:59:b5:46:71:87:b7:11:dc:e5:68:4f:81:57:be:54:35:
20:5a:ae:06:8c:89:d5:95:bc:b6:f4:2f:47:c0:4f:bc:d3:43:
cf:00:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:35:13 2025 by rpki-client