Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/fxt_xzRQvI1TVp9iQ4OcRUER1Rs.roa
File: fxt_xzRQvI1TVp9iQ4OcRUER1Rs.roa (raw, json)
Hash identifier: PwUK/a/9pvC8D7PDGzYylI74JCDL9XSAnMAr20MDK1U=
Subject key identifier: 7F:1B:7F:C7:34:50:BC:8D:53:56:9F:62:43:83:9C:45:41:11:D5:1B
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 018967EF1E0E21DC063B2A2B3699C447CEA0
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/fxt_xzRQvI1TVp9iQ4OcRUER1Rs.roa
Signing time: Tue 18 Jul 2023 07:37:51 +0000
ROA not before: Tue 18 Jul 2023 07:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
2a0f:fd00::/29 maxlen: 32
2a0e:5040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:ef:1e:0e:21:dc:06:3b:2a:2b:36:99:c4:47:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jul 18 07:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1b7fc73450bc8d53569f6243839c454111d51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:d5:e0:83:95:e8:58:cf:ad:a5:10:ac:e6:
5c:19:e1:c2:12:de:57:1e:83:84:88:54:68:35:40:
f2:b4:5c:02:25:86:df:b4:90:a8:a9:59:e7:29:19:
b6:10:4a:98:8d:29:a5:52:6a:65:bc:12:3a:20:cf:
9f:0e:c5:7f:a7:f1:a7:cb:c6:de:51:9f:99:fb:ce:
09:9b:d1:55:35:f2:bd:70:18:8e:86:db:b8:d3:ca:
a3:8d:75:66:48:3c:74:c7:f0:0b:da:ea:46:ea:6b:
ff:c6:e7:98:0f:c9:01:50:e3:27:02:b9:38:af:c9:
fb:b8:a7:05:a9:4b:a8:f4:bb:fa:ad:48:ac:62:ba:
69:5c:22:55:56:05:b1:79:b0:0a:5d:bd:c6:6e:c2:
9a:49:61:29:4a:7f:4a:e3:76:cb:bb:eb:62:03:41:
36:79:97:87:56:63:32:60:fe:c7:5c:0e:bf:6a:99:
17:eb:65:92:9a:86:95:77:96:0d:6e:53:6b:b5:29:
01:a4:06:f2:9e:e3:d6:ee:0b:a7:bc:79:1b:fa:c3:
fd:e8:f9:ff:a2:ca:3f:3c:7e:85:21:cc:19:d1:49:
05:11:fe:dc:4a:79:1a:7e:4f:89:6f:81:fe:3e:ea:
3c:11:62:4a:2f:17:d4:8e:9b:51:07:0d:cd:4a:8a:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:7F:C7:34:50:BC:8D:53:56:9F:62:43:83:9C:45:41:11:D5:1B
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/fxt_xzRQvI1TVp9iQ4OcRUER1Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
9c:40:b6:b1:a8:10:6d:32:57:3a:e0:b2:42:64:f6:58:ec:3a:
37:d5:bf:a8:bc:ba:f6:c3:c4:f0:ed:aa:36:9a:ec:82:a2:91:
ba:d7:3b:94:ea:b3:1c:e7:6f:ce:82:9a:a7:8b:63:52:93:fa:
a3:52:ee:3b:7d:f7:28:93:57:bc:42:c9:b2:de:04:d0:c4:2f:
08:f7:d4:59:f0:2c:73:01:4f:4a:32:fa:08:9a:21:48:b7:b5:
ba:f9:27:de:e3:97:a1:2d:a6:50:7c:ad:8b:0d:fc:58:ea:05:
fe:31:ef:c2:82:b6:eb:77:fb:7b:2e:3f:54:25:40:10:98:7b:
c1:bc:17:93:f9:cc:44:de:0b:e7:6b:c5:8a:03:c8:87:f3:bb:
d7:6e:6a:13:d7:7d:02:37:a7:b9:19:c9:20:1d:6b:ad:cf:f3:
01:df:81:75:60:17:d5:04:54:dc:dd:97:17:36:1e:c4:93:43:
85:03:5b:ac:76:b7:11:cf:19:40:8e:89:37:0d:57:2f:13:47:
45:38:e5:93:73:4c:a6:00:33:ec:48:c3:6b:9e:e5:d8:79:7e:
e7:f6:82:82:2f:41:bb:be:e3:62:d3:83:ec:61:7a:2d:25:d4:
5e:4c:9f:bf:cf:0f:a4:1c:89:8d:6d:50:d3:17:43:25:0a:68:
51:ed:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:12 2025 by rpki-client