Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/CKVH6DFIqa2pttQ_0xBjHV9dj78.roa
File: CKVH6DFIqa2pttQ_0xBjHV9dj78.roa (raw, json)
Hash identifier: ihAwG9FWLiiOTepnAlcTOEo2EwmRFPp0uRyDVGzoXWI=
Subject key identifier: 08:A5:47:E8:31:48:A9:AD:A9:B6:D4:3F:D3:10:63:1D:5F:5D:8F:BF
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 022890CE
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/CKVH6DFIqa2pttQ_0xBjHV9dj78.roa
Signing time: Tue 29 Mar 2022 06:54:59 +0000
ROA not before: Tue 29 Mar 2022 06:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36212942 (0x22890ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Mar 29 06:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08a547e83148a9ada9b6d43fd310631d5f5d8fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:8a:84:34:ee:c3:3f:64:48:3d:1d:22:f0:
0c:f7:be:20:05:10:97:31:48:36:41:3b:c2:1d:d7:
3b:0b:07:41:f7:ad:a5:10:7e:b6:68:a4:0b:4a:74:
0c:c7:6d:43:95:a6:70:da:8f:08:14:1b:fc:9c:5b:
80:3e:94:62:1d:0c:8a:d8:75:e5:7e:20:ec:79:37:
07:93:a5:e8:80:75:f4:00:46:2d:ed:fb:4b:ef:4e:
bf:db:76:81:ed:08:a5:0b:8e:7c:ff:a2:16:00:b0:
42:ae:3a:ad:83:28:09:4a:65:34:bc:87:85:e2:38:
c7:15:9f:55:19:23:9d:cf:40:cf:cc:5c:13:96:97:
d2:9a:e2:6f:04:e2:76:e6:f2:c1:e7:a9:1d:3e:f3:
2a:0e:b9:28:a8:65:ec:5d:b5:2f:5a:b3:6d:21:cd:
45:15:48:f8:58:d4:90:de:09:00:43:c8:5e:b9:b1:
00:b5:46:86:b1:ab:98:06:0d:c4:78:43:94:01:e2:
b0:02:1f:b4:d3:b0:8d:b9:a6:59:a7:27:db:e6:5f:
75:94:62:f7:96:27:df:d4:86:95:f1:7d:42:9a:20:
79:b2:11:e2:15:12:14:9b:17:e2:59:34:89:9a:e6:
5e:7b:ea:6e:39:0b:ab:7b:87:3a:42:74:49:bc:71:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:47:E8:31:48:A9:AD:A9:B6:D4:3F:D3:10:63:1D:5F:5D:8F:BF
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/CKVH6DFIqa2pttQ_0xBjHV9dj78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
05:06:d9:92:8b:29:9e:59:84:69:6b:14:61:a7:08:40:66:4a:
4e:ff:e8:ee:db:f8:0e:78:83:0c:6c:30:ae:00:54:68:b4:a7:
f0:00:9c:e8:7e:44:49:ab:0d:a9:b8:8c:1c:33:1e:32:16:91:
ec:03:bc:2c:fe:58:dc:d8:c5:60:09:93:67:98:19:46:ad:5a:
7b:9a:29:80:0f:a7:62:4c:a2:ba:1e:b4:e3:a1:bd:fb:94:10:
07:54:d8:5d:a6:05:c2:f7:a4:e4:97:e0:45:39:f6:17:73:d3:
8c:9c:e6:e0:58:f8:3c:9d:c4:a1:16:e7:4d:5e:9d:f6:db:7a:
8e:3d:19:69:69:c5:10:f8:62:cf:11:4e:2a:72:e4:1d:5f:a1:
84:c3:a4:0c:24:92:58:53:18:6c:2e:7c:84:cf:0a:a9:87:3c:
1d:12:b2:dd:20:ae:10:16:67:ba:38:c5:45:4f:a3:7d:70:06:
bc:1e:ea:0b:ea:ea:c2:c5:bf:47:2a:d7:9c:c4:1d:1c:41:eb:
d7:69:ce:bc:b4:e1:8a:b7:f2:4b:86:29:fc:d3:3d:97:a6:56:
2b:b8:55:57:0a:34:ec:8c:80:da:86:07:01:55:a5:cc:66:d7:
60:b6:64:f2:3b:7b:d0:2e:a3:74:11:f4:1b:d4:6d:93:f3:1c:
a8:81:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:07 2025 by rpki-client