Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/XiaCw4TC9n0Iut4wRL0cJCpSuyo.roa
File: XiaCw4TC9n0Iut4wRL0cJCpSuyo.roa (raw, json)
Hash identifier: TcbDOe5NYQ4zFDGcEIjIbmlxgP9eQGzpuBex7Ghuupw=
Subject key identifier: 5E:26:82:C3:84:C2:F6:7D:08:BA:DE:30:44:BD:1C:24:2A:52:BB:2A
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01856F42AEC60D3DB098CCEE3063B7B8DBBB
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/XiaCw4TC9n0Iut4wRL0cJCpSuyo.roa
Signing time: Sun 01 Jan 2023 21:35:19 +0000
ROA not before: Sun 01 Jan 2023 21:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39246
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ae:c6:0d:3d:b0:98:cc:ee:30:63:b7:b8:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 21:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2682c384c2f67d08bade3044bd1c242a52bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:a3:af:f8:f0:e3:a9:d7:50:f3:aa:a0:cf:
5b:78:29:f3:44:aa:36:ee:ba:dd:b6:8f:33:c3:bd:
5d:3e:fb:ad:28:a6:fc:d7:2b:0f:20:f1:81:4e:2b:
bb:a1:e0:02:0e:00:23:99:cd:18:f0:44:74:3d:b7:
18:2e:ea:68:5a:5f:6e:61:d6:eb:1c:d4:30:2f:23:
f6:30:38:a6:fd:0d:69:04:1c:0e:c4:07:43:b9:92:
11:a5:dd:94:b7:74:68:2f:73:8e:5e:4d:ae:ac:6e:
b1:ee:8e:b2:a0:9d:b9:6f:a6:1f:8e:e0:f7:b2:85:
51:b1:9c:14:08:ed:09:94:e5:c1:61:9b:c1:09:4a:
13:73:71:41:d6:2a:4c:4a:fd:1f:ed:58:30:3f:b1:
b7:d1:2b:85:c0:1c:08:78:c3:60:fb:39:71:c3:db:
18:8f:f6:f1:55:1c:68:9c:1f:16:d8:14:d3:0d:f6:
a7:48:c3:dd:04:78:2d:dd:61:1a:49:6a:3a:08:bc:
11:d7:d0:2d:db:74:60:a6:35:8b:9f:4f:ad:7a:bc:
f6:f1:32:32:cd:3b:6c:9c:a7:da:cf:81:8f:8c:ca:
ef:a4:b9:42:ff:0a:30:ad:cb:7e:1a:a7:f7:4a:b0:
b9:bb:57:41:bb:01:c5:7e:67:24:59:d1:d5:a1:17:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:26:82:C3:84:C2:F6:7D:08:BA:DE:30:44:BD:1C:24:2A:52:BB:2A
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/XiaCw4TC9n0Iut4wRL0cJCpSuyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:22:6b:fa:54:fd:5b:f0:5d:92:8a:4d:df:cd:c9:cc:35:99:
69:1f:52:eb:ec:9a:d5:61:32:8c:9a:2b:81:3e:24:70:d4:6d:
12:46:fe:2d:39:ea:db:8e:09:8e:a1:05:93:b2:74:b6:c1:85:
f4:f4:3a:aa:17:bf:42:fe:5f:bf:5c:8e:0e:98:68:62:08:fb:
db:77:5d:50:af:c8:b2:7f:38:c8:b7:03:26:30:b6:7b:24:b9:
a6:b0:4d:8a:2d:95:3e:37:af:45:c8:7d:1f:f9:8b:fe:df:44:
8e:5f:b4:b0:32:1a:d2:d2:30:12:36:6e:95:c9:4f:f8:0c:eb:
60:4f:04:2e:60:9d:3f:49:d7:b7:a6:fc:fb:2e:d4:b5:d3:ca:
10:9f:8e:60:85:9d:8f:44:79:4b:26:8b:ec:a6:d6:b5:30:05:
ed:62:d0:fd:3b:29:5d:84:db:46:53:9c:06:84:63:27:08:19:
cc:72:9e:e7:0c:14:03:7f:52:6c:68:b2:9c:0e:0b:62:12:ec:
36:a2:8d:ae:7b:ff:d0:37:28:93:8b:a6:06:6d:fe:c0:6d:7c:
c8:ea:9f:02:60:bc:35:31:a4:0e:6e:e6:ec:83:53:51:69:4a:
4d:d7:0d:0d:dd:f4:cd:a1:16:11:3b:86:41:18:39:c4:2e:42:
74:ab:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:43 2025 by rpki-client