Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/LXakrzN803PvqBgCHTRgGEre_Mk.roa
File: LXakrzN803PvqBgCHTRgGEre_Mk.roa (raw, json)
Hash identifier: 5+uznbnwfKfNmLeWLUgwD0jkWSCg9U6KqrnI9bBjVXU=
Subject key identifier: 2D:76:A4:AF:33:7C:D3:73:EF:A8:18:02:1D:34:60:18:4A:DE:FC:C9
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0185724C89F1196BC856C41F3EFECFFEE94D
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/LXakrzN803PvqBgCHTRgGEre_Mk.roa
Signing time: Mon 02 Jan 2023 11:44:56 +0000
ROA not before: Mon 02 Jan 2023 11:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59842
IP address blocks: 45.82.210.0/23 maxlen: 23
45.82.208.0/22 maxlen: 22
45.82.208.0/23 maxlen: 23
45.82.208.0/24 maxlen: 24
45.82.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:89:f1:19:6b:c8:56:c4:1f:3e:fe:cf:fe:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jan 2 11:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d76a4af337cd373efa818021d3460184adefcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:bb:24:bc:69:18:29:bd:12:7f:71:9e:b1:
13:d8:ae:b7:73:5d:7f:7d:f8:43:8b:c2:2b:fe:40:
f4:db:7d:8b:40:fc:3d:4b:7f:6c:62:a6:40:07:2b:
2b:4c:38:00:34:f3:2a:15:20:b2:74:b6:9b:87:40:
05:e3:5b:66:46:a3:87:56:3e:fb:f8:a4:ca:06:4c:
25:59:09:66:e4:27:e6:d1:05:83:9e:af:0e:a4:02:
b3:ff:7e:9d:47:9b:d8:96:a6:9e:16:5c:2d:06:b3:
7a:07:e7:02:ab:72:ee:74:62:4a:7a:3d:86:17:f6:
c0:d6:32:77:11:58:1e:53:50:3a:f2:d3:d1:09:1b:
81:1f:84:52:86:50:3b:1b:17:61:f2:0e:0f:a0:a5:
04:16:9f:a1:e6:61:63:d5:26:62:44:3b:cc:ef:06:
31:6b:5b:46:22:71:74:c4:55:d6:44:0d:41:a3:78:
7f:41:b0:10:b5:88:99:7b:3e:94:ef:0f:35:6c:88:
66:cf:6d:78:f0:e8:cb:96:ac:3a:a6:1e:e3:ac:8e:
e0:a3:19:0c:e0:27:92:03:e0:3d:ea:32:a1:54:80:
84:f7:0b:71:1d:fe:2c:a6:ef:2e:62:d8:95:8a:54:
e0:c9:74:5d:a0:6e:ee:89:44:25:ee:75:f3:8c:db:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:A4:AF:33:7C:D3:73:EF:A8:18:02:1D:34:60:18:4A:DE:FC:C9
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/LXakrzN803PvqBgCHTRgGEre_Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.208.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a1:b2:9f:6f:5d:9c:0e:ff:95:86:33:77:68:d5:0b:5b:17:
6f:21:63:a8:c7:4a:12:ac:12:c1:40:1c:19:aa:b9:53:21:ec:
ce:10:a2:75:dc:1f:6a:c0:d5:8d:62:09:04:56:3b:7d:0b:eb:
06:4a:41:73:91:7d:8e:79:03:1a:aa:e2:a9:51:47:69:be:35:
5c:ac:f7:d1:c0:a4:1f:31:a9:62:c0:2a:4a:1d:53:39:8b:63:
da:1b:e2:42:60:46:62:2b:22:e5:63:2d:9f:55:25:9c:07:72:
84:7e:60:39:59:5f:79:d8:84:45:d7:c5:12:3f:1d:0a:56:a8:
fd:0d:9c:9e:17:e5:bd:ee:ac:70:f6:87:80:bb:0a:96:3f:69:
7c:36:7e:cf:0a:bc:83:8c:05:d0:42:01:35:01:42:ec:85:a3:
51:b0:46:89:8f:34:ad:0c:25:36:80:43:b9:46:29:dd:63:e2:
08:56:d4:4d:55:5d:8f:7a:35:d4:0f:56:b4:80:9c:db:2f:6c:
5e:2b:17:47:02:92:67:68:27:a5:2d:68:41:2d:24:7a:a8:46:
8e:03:f7:72:ec:8a:98:64:7b:58:8d:60:21:39:d7:85:f2:a7:
5a:d0:9e:37:b1:dc:5d:28:8d:05:d9:29:aa:37:a3:f9:42:56:
3f:f3:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:23 2025 by rpki-client