Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v17oIi17vAwdW-jIe0LZJQpHYzo.roa
File: v17oIi17vAwdW-jIe0LZJQpHYzo.roa (raw, json)
Hash identifier: vYjOx+k6lWmVApD6TJwaRt2RmkxxeUPRoO6BS3xvKAU=
Subject key identifier: BF:5E:E8:22:2D:7B:BC:0C:1D:5B:E8:C8:7B:42:D9:25:0A:47:63:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01853BD9E992DEDE024D220F623323697816
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v17oIi17vAwdW-jIe0LZJQpHYzo.roa
Signing time: Thu 22 Dec 2022 22:00:14 +0000
ROA not before: Thu 22 Dec 2022 22:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32613
IP address blocks: 45.118.248.0/24 maxlen: 24
2a0f:e8c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3b:d9:e9:92:de:de:02:4d:22:0f:62:33:23:69:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 22 22:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf5ee8222d7bbc0c1d5be8c87b42d9250a47633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:89:37:83:bf:23:c4:29:b5:66:a2:3a:11:32:
29:83:27:60:92:f1:85:96:d2:fd:de:a3:2b:f1:fc:
89:87:22:49:8a:a7:74:52:31:5e:0b:21:ae:04:b8:
b7:69:27:31:0d:6c:7d:18:34:24:c4:b9:14:91:10:
48:2a:d0:e3:78:0e:3f:1a:06:5f:fa:d2:70:17:a8:
16:cb:bb:e7:0b:be:02:d4:bf:e2:b1:2c:77:b5:81:
48:42:5f:6d:d1:bc:81:2d:cf:81:27:6c:67:0a:eb:
9f:4d:33:b1:83:1c:fd:7c:70:ad:c3:a4:2a:a6:24:
30:74:6b:cc:d0:d1:39:de:c0:30:8e:a7:01:cf:a3:
16:07:28:96:1b:4c:aa:71:17:a1:e9:b6:dc:56:71:
a7:42:d1:72:a1:51:a8:ee:fe:9e:be:f0:19:c2:90:
f2:89:27:d5:7c:37:0a:da:96:80:72:c5:eb:d7:d1:
07:7e:65:42:38:7e:5d:78:5d:1f:f0:18:a6:2e:4a:
f5:08:77:16:ca:c1:d0:d1:83:b8:aa:66:ab:d5:59:
14:42:2f:df:c9:15:1a:a8:2a:ba:58:37:e5:28:11:
39:d1:cb:f2:ea:4a:c9:1e:9a:eb:c4:7a:84:56:da:
23:3e:88:2a:01:16:04:51:54:45:02:6d:4d:43:f4:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:E8:22:2D:7B:BC:0C:1D:5B:E8:C8:7B:42:D9:25:0A:47:63:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v17oIi17vAwdW-jIe0LZJQpHYzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
IPv6:
2a0f:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:e7:65:5d:62:dd:27:5d:71:66:17:de:40:5f:49:2e:9a:4b:
ea:a1:36:c3:dd:b4:a1:06:ce:78:a4:2e:0a:f3:8a:27:6b:a0:
3f:dc:a9:35:47:36:67:0d:d9:ae:84:17:3e:c6:58:3b:64:6e:
f5:1e:e5:0c:6e:9d:f1:99:e5:d4:a7:fe:c7:85:d2:21:89:e2:
8f:5e:8c:a8:4f:1b:d2:32:dc:5b:a0:48:f7:f4:21:4e:f3:9c:
81:cd:68:2c:4f:67:37:72:89:36:bb:9e:d6:60:a2:c6:61:fd:
4c:c6:1a:92:b0:03:dc:56:9e:a7:09:d8:78:02:bd:0b:ea:0a:
a1:c9:91:1a:6c:33:2a:62:95:79:cc:5b:e1:ce:32:89:6f:28:
ac:4d:65:7b:2b:05:d1:ba:92:32:3d:8e:6d:64:59:52:b3:1d:
72:9a:70:45:ee:c6:55:4c:95:97:75:90:c4:b3:11:e5:a1:d7:
49:ac:28:83:f1:43:f4:7b:ee:58:f4:36:2d:35:05:f0:40:cc:
22:5c:c5:f2:f2:42:9a:c7:1d:90:99:45:3b:b6:b6:c6:d1:13:
95:77:90:01:e7:90:2f:31:cb:f4:41:36:aa:0d:59:29:7e:2f:
74:a7:e0:b1:0c:b1:29:70:86:f4:36:de:3b:b8:b0:87:1f:47:
cb:74:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:50 2025 by rpki-client