Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/A1geZMmpk89G8i4MJu6l3-aZA1I.roa
File: A1geZMmpk89G8i4MJu6l3-aZA1I.roa (raw, json)
Hash identifier: oMr6wJ/pmcjzJMiOuMLm/DA+87wqXl9fAH1xjzmwnUM=
Subject key identifier: 03:58:1E:64:C9:A9:93:CF:46:F2:2E:0C:26:EE:A5:DF:E6:99:03:52
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 0184DCFDC2171F1B2441A94B5140F9B830B7
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/A1geZMmpk89G8i4MJu6l3-aZA1I.roa
Signing time: Sun 04 Dec 2022 11:55:28 +0000
ROA not before: Sun 04 Dec 2022 11:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.91.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:fd:c2:17:1f:1b:24:41:a9:4b:51:40:f9:b8:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Dec 4 11:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03581e64c9a993cf46f22e0c26eea5dfe6990352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:ae:d8:c3:c1:3f:2c:51:aa:74:28:5d:73:
2f:be:6e:bb:47:9c:8a:ad:7c:d7:34:e7:4e:a2:63:
55:53:c6:20:82:aa:08:3a:18:19:90:51:d9:bf:ed:
b5:05:e0:9b:51:4f:1c:14:88:ac:d7:c5:15:9e:ff:
4c:75:b8:1b:27:aa:97:a7:0e:d3:f6:0f:59:a8:b3:
4c:ff:60:4e:8a:f7:99:22:ec:31:7a:29:4f:e9:38:
fc:e3:ff:cc:23:ae:45:e0:86:de:e1:85:23:4b:04:
69:5b:0c:20:1b:40:f0:48:25:6d:7d:7f:4d:43:e8:
2f:31:45:15:cd:60:98:2a:f3:6d:39:92:06:78:4d:
61:bb:56:b6:08:44:10:ad:d9:54:da:0e:64:45:5e:
a1:dd:b6:96:58:7e:87:18:52:b2:8d:8c:10:6f:14:
50:47:d6:dd:9e:da:27:bf:90:ae:a5:21:6b:10:cb:
1d:aa:ba:5f:3a:ab:63:50:db:7e:1d:5b:c7:52:0a:
01:22:03:02:c4:95:e3:ac:05:2e:95:c5:0f:d5:89:
f3:66:e8:9a:f7:c2:6a:a7:8d:7e:9c:7c:0e:80:8f:
e7:71:38:9b:bd:27:63:0c:ee:22:2d:13:24:d6:95:
8c:76:9c:74:f0:67:ff:e0:58:a4:00:6a:61:36:16:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:1E:64:C9:A9:93:CF:46:F2:2E:0C:26:EE:A5:DF:E6:99:03:52
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/A1geZMmpk89G8i4MJu6l3-aZA1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5d:0d:02:59:c4:01:61:4d:dd:f4:63:19:62:fb:96:4b:63:
3d:7a:6f:40:04:bd:f8:14:3b:08:ed:4b:d7:3f:8e:22:43:82:
0d:25:a7:a7:78:03:50:41:f1:11:8e:a0:2b:5d:12:67:b8:62:
19:d5:c1:23:e8:3a:f4:4e:7b:bc:24:d0:67:53:bf:48:c0:69:
57:83:0f:57:a9:d0:b3:d7:63:55:9a:24:ae:ac:ae:0a:84:d8:
2b:29:93:cc:d2:4a:2c:be:b0:a0:40:13:ed:7a:c0:51:87:c3:
69:c6:5c:40:11:9d:70:e1:2c:a3:a0:40:19:4c:1b:c2:1d:5e:
18:aa:2d:5a:6f:2b:6b:36:0c:46:20:c0:be:55:f1:e2:ce:a3:
20:6a:7a:c1:45:28:15:aa:32:b5:e4:2a:d6:52:de:7f:5b:97:
6d:b6:b1:c6:c4:de:4b:6f:8f:9b:b7:b0:42:1e:4b:5f:e4:ea:
eb:e9:f2:af:f5:37:41:bb:59:41:61:a2:85:95:4e:f0:86:d0:
9b:63:e4:db:3b:b1:a5:50:85:77:30:6b:2d:8d:b0:17:79:6e:
b0:47:dc:a7:7f:4f:32:e4:35:6f:be:8d:92:5f:cf:29:f4:1f:
45:bd:ad:01:ba:3c:d1:d9:fd:47:c1:bb:f4:d8:e0:c8:5e:78:
84:d2:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:21 2025 by rpki-client