Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/kp4fprMmbOMLu5qhhpCaFonM-GQ.roa
File: kp4fprMmbOMLu5qhhpCaFonM-GQ.roa (raw, json)
Hash identifier: wVBIeUV2y60gC9hVBUlSdxRiE8Kh7Toub96gSJ0bXgA=
Subject key identifier: 92:9E:1F:A6:B3:26:6C:E3:0B:BB:9A:A1:86:90:9A:16:89:CC:F8:64
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0186F34407B963F60C8485DEB1C6C46FF287
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/kp4fprMmbOMLu5qhhpCaFonM-GQ.roa
Signing time: Sat 18 Mar 2023 05:49:27 +0000
ROA not before: Sat 18 Mar 2023 05:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:44:07:b9:63:f6:0c:84:85:de:b1:c6:c4:6f:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 18 05:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=929e1fa6b3266ce30bbb9aa186909a1689ccf864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:46:6b:32:8c:75:77:08:2d:be:1d:91:4a:
63:75:de:7f:68:0e:7b:3b:11:7f:4b:cf:33:46:1a:
11:1d:94:24:68:0d:5c:b3:d2:1e:16:a3:c1:07:c1:
f1:bd:76:5e:32:5b:6e:70:6f:f0:b4:c6:dc:73:47:
82:ce:03:56:41:17:15:14:e4:f1:23:c4:93:49:8f:
0d:e0:96:52:61:5a:0f:c2:7b:03:3e:33:33:08:10:
a9:16:37:b8:62:a9:5a:86:ae:b3:2c:d3:0a:d6:87:
bf:b7:3d:9e:c1:5a:73:e8:b8:34:3e:8b:99:1a:33:
33:98:9f:00:23:29:d5:71:19:39:51:39:3d:18:76:
a6:49:72:97:8c:ab:2c:4c:d4:67:86:1c:fa:dc:c5:
42:24:ea:a0:32:46:b5:87:6e:53:16:1e:56:f5:76:
f5:83:bf:26:9d:40:88:13:09:42:ac:5d:a9:6f:6f:
2e:d3:de:ff:ca:d0:0d:98:be:f8:b9:a1:57:32:2e:
b0:13:8a:29:75:c3:e1:d1:cd:52:18:c5:a5:5e:01:
05:0c:f3:50:7d:3d:ec:ed:29:47:b9:12:a7:42:da:
7c:89:89:a2:30:f5:5c:4f:4e:6c:79:6d:0c:9a:86:
b8:40:19:65:0a:33:fd:ee:f3:33:db:88:bd:59:d4:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:1F:A6:B3:26:6C:E3:0B:BB:9A:A1:86:90:9A:16:89:CC:F8:64
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/kp4fprMmbOMLu5qhhpCaFonM-GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
31:81:6c:49:1c:9a:f3:b3:55:08:67:b1:b1:28:b7:4a:42:83:
57:4b:ef:88:59:ac:0c:5f:66:a4:86:71:12:24:a5:8d:f5:df:
22:ba:50:46:82:7a:9b:ad:81:98:7d:ff:37:f7:f7:51:0a:9a:
90:04:7f:ae:f4:ca:4b:5a:5e:d1:8f:c7:6d:b8:8b:99:57:3c:
15:3f:3a:89:bf:fb:32:2a:e6:7c:f4:52:47:77:3c:a0:53:b8:
95:56:fc:21:b9:fd:2a:6b:dc:e9:fe:4e:51:a5:65:7d:cc:ec:
7b:95:71:62:4a:19:70:3a:1c:d6:d0:c8:1a:09:75:76:4b:5b:
98:6c:11:5f:2f:04:61:67:83:f1:a4:f7:28:42:0a:eb:0c:29:
f5:60:be:11:29:f0:01:fa:df:9b:7c:d8:c1:91:d5:c2:de:dc:
d6:ce:4a:79:95:e4:56:4e:fc:09:7d:33:9e:74:82:ae:c8:fa:
f4:c5:7d:17:41:95:16:1f:41:5a:aa:c3:ee:5c:7f:c7:17:ad:
2c:f8:56:18:4b:34:50:c2:e8:49:4d:e6:9c:9a:55:db:8b:c5:
d7:9a:25:73:04:11:7d:bf:b6:77:63:f8:9a:15:be:f3:67:ab:
8b:c5:b0:82:d5:e2:46:ae:ba:a2:c6:b7:43:20:ed:40:57:12:
c6:6f:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:47 2025 by rpki-client