Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5P7-A5XrPNK9njVYm-8ySuo8PU.roa
File: p5P7-A5XrPNK9njVYm-8ySuo8PU.roa (raw, json)
Hash identifier: FFR9dcfcN/Y0q/ekxJmcTzTtIqIr4neCf5//CqpW3fE=
Subject key identifier: A7:93:FB:F8:0E:57:AC:F3:4A:F6:78:D5:62:6F:BC:C9:2B:A8:F0:F5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189C52F9A16E27DDFC05926E871B97D80FD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5P7-A5XrPNK9njVYm-8ySuo8PU.roa
Signing time: Sat 05 Aug 2023 10:12:58 +0000
ROA not before: Sat 05 Aug 2023 10:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 45.128.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:2f:9a:16:e2:7d:df:c0:59:26:e8:71:b9:7d:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 5 10:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a793fbf80e57acf34af678d5626fbcc92ba8f0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:cb:6a:b3:6f:17:db:cc:65:ea:e5:38:4a:
60:63:79:c2:d1:00:81:da:1a:0a:3f:13:0e:e8:e6:
70:03:ef:f3:10:d6:98:07:ea:1e:be:20:5a:f2:ef:
d2:3a:64:9a:ad:f0:bb:67:55:22:29:14:5d:ce:44:
63:fd:0e:da:9b:69:b0:99:25:86:10:65:bc:a6:c4:
2d:6f:49:09:fb:cc:5f:c9:75:52:8d:9b:fd:99:55:
46:99:7a:e5:47:74:42:c4:46:98:42:ab:53:e7:f4:
0d:e6:18:fe:b2:31:fd:b4:8b:b5:ec:02:ec:2a:b4:
0b:0c:3f:c9:0d:38:d8:3e:15:c2:f1:38:4e:d7:71:
3e:35:1a:a2:d7:e0:09:c9:82:3a:6f:a5:33:7b:a4:
48:5d:08:e5:c3:13:5e:5a:f5:70:bc:02:d6:0a:69:
70:e5:0d:d2:a7:6d:b1:a4:7e:8c:fc:27:40:90:02:
31:04:ca:28:3f:cf:9a:9d:61:7e:de:22:ad:66:0d:
63:7d:49:e9:ae:88:24:08:2b:68:d7:3b:8f:37:f8:
c6:e8:f8:5e:77:79:75:cd:7e:d1:61:fe:98:18:b5:
3d:dc:db:2f:5d:78:4e:e1:ac:c2:78:02:cd:47:72:
46:c0:34:d9:7d:c4:b4:7a:31:2e:04:24:5c:09:4b:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:FB:F8:0E:57:AC:F3:4A:F6:78:D5:62:6F:BC:C9:2B:A8:F0:F5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5P7-A5XrPNK9njVYm-8ySuo8PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ab:e4:62:5d:51:e8:fa:42:64:03:d7:a6:5e:7f:e2:71:45:
1c:89:c3:55:f7:20:a3:8b:ad:68:5a:e0:32:9a:f8:e7:81:09:
f0:41:19:a7:d8:af:06:05:54:40:1e:83:24:f7:0b:87:6f:38:
e1:06:a6:71:5c:68:55:14:ef:1c:34:27:12:64:86:46:d3:b6:
ac:b5:fe:06:09:34:8f:95:31:9f:86:b0:d4:2f:03:7e:af:53:
b5:92:b2:f5:55:5a:4e:c9:cc:6e:a3:dd:c9:db:e3:9a:26:8c:
f7:f7:04:fe:a1:ad:9e:3a:2b:62:52:96:e4:92:8c:ed:4f:10:
da:c2:86:9e:8c:9c:c4:89:31:42:50:d7:2f:4c:5f:0d:30:eb:
c5:54:3c:12:d3:50:f1:c6:d6:0a:22:6e:71:d2:c1:36:e3:b2:
0b:91:61:bc:ed:a2:d1:eb:01:95:5c:54:44:c1:68:74:09:9b:
7b:79:65:73:1e:6f:73:15:49:38:8c:4d:69:e1:db:70:be:15:
e4:f3:c1:12:3a:9c:12:e1:28:ac:d2:ea:b5:12:60:ed:4b:20:
72:ae:07:91:a1:68:d5:8a:b6:e2:b4:44:3b:c4:49:c0:34:a3:
7b:21:48:75:9a:a7:43:ac:94:de:0c:2e:93:de:74:81:57:b1:
5f:69:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:16:49 2025 by rpki-client