Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/elgR_FpF9CmGtnr7s7DfsLLIx-E.roa
File: elgR_FpF9CmGtnr7s7DfsLLIx-E.roa (raw, json)
Hash identifier: ItjTEjDKV9AEDyU/fv2oCIgyj2YIJyKJl+jLP9mn3sQ=
Subject key identifier: 7A:58:11:FC:5A:45:F4:29:86:B6:7A:FB:B3:B0:DF:B0:B2:C8:C7:E1
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 01856D8AD41C91CB9F684C5C342DB4ECE779
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/elgR_FpF9CmGtnr7s7DfsLLIx-E.roa
Signing time: Sun 01 Jan 2023 13:34:52 +0000
ROA not before: Sun 01 Jan 2023 13:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208963
IP address blocks: 45.13.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d4:1c:91:cb:9f:68:4c:5c:34:2d:b4:ec:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Jan 1 13:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a5811fc5a45f42986b67afbb3b0dfb0b2c8c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:c7:4d:b2:45:e3:6e:9b:96:bc:e2:4b:7f:
d8:c6:18:5e:7f:11:ea:fc:72:aa:05:ba:06:e6:7e:
c4:57:66:fe:f3:2b:6a:08:ee:e4:15:eb:15:3d:ae:
15:a0:9b:e8:ca:3f:9a:0e:cd:0d:f7:24:1a:08:23:
17:d1:b3:3b:ed:71:f5:6d:29:f9:7f:19:f5:cc:de:
8a:03:fa:00:4e:61:cc:0a:8f:e2:57:e1:fa:cc:a0:
d9:31:27:7d:bf:d6:65:3b:1e:a1:ba:1b:28:d7:81:
46:36:d2:19:d9:16:12:68:01:fa:5f:66:b2:44:04:
6c:98:ed:a9:67:e4:5d:a9:26:84:4f:8b:37:d6:0f:
4b:71:25:78:79:de:ba:56:fb:23:f8:98:c8:2b:a0:
92:61:ba:82:0d:c8:5b:3b:38:5d:b4:30:54:71:11:
50:3b:fb:b8:fa:69:d3:f7:84:96:cc:59:34:51:50:
87:c6:be:47:ed:1c:9b:d9:4b:5c:2a:55:6b:46:ee:
3b:d3:eb:92:6d:30:e6:8f:d7:5a:d6:a3:eb:b2:af:
97:13:10:2a:60:05:6e:be:4e:d4:2b:92:11:2d:6c:
66:9e:00:9a:c0:00:60:88:d0:16:d1:08:9d:9a:f4:
bc:ab:bb:73:13:27:8a:80:47:67:bd:88:dd:70:68:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:11:FC:5A:45:F4:29:86:B6:7A:FB:B3:B0:DF:B0:B2:C8:C7:E1
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/elgR_FpF9CmGtnr7s7DfsLLIx-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c5:af:51:0b:b8:ac:65:a9:39:d6:6d:46:4b:ee:64:2c:af:
fd:db:58:67:8d:24:2f:f4:b3:03:3b:53:94:88:6d:8d:7b:52:
04:8a:1c:3f:26:4a:26:40:a0:0b:27:75:b6:9d:b9:a8:c5:30:
88:62:5e:81:28:ec:ef:61:51:34:05:6b:eb:a3:7c:af:b8:56:
0c:2c:f2:c3:e2:d8:bd:9e:6c:a8:99:6f:ea:ab:79:20:2d:5d:
59:21:6a:c4:2a:cf:0a:f6:19:73:dd:e9:53:19:d7:af:48:a7:
22:bb:51:fb:c6:27:3a:11:39:22:82:d0:b6:ec:b5:98:a0:fb:
47:76:0c:3a:42:72:52:e2:f7:94:11:96:6f:28:be:37:e6:b9:
62:90:26:f0:e1:f3:f0:5d:e1:14:5a:b5:9d:a8:32:2b:68:4e:
0e:75:8a:8c:d5:57:04:04:e6:69:ed:36:63:31:36:ae:bd:74:
d5:d5:b1:df:1f:59:9c:61:52:ba:fc:a7:b6:cf:1f:2e:8e:5e:
a8:d3:17:b0:f0:e9:4f:9c:fc:b8:6e:13:52:53:4b:9a:f6:6c:
00:fa:ec:8b:84:82:1d:6e:1f:f0:e4:62:de:cc:ad:76:2c:4d:
31:3e:30:dd:b6:13:c9:f2:ed:a1:bb:05:b1:4a:52:8b:ec:c0:
2f:2d:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:48 2025 by rpki-client