Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xXfDz3nMqHiFQcIt4RtXOAIlT-A.roa
File: xXfDz3nMqHiFQcIt4RtXOAIlT-A.roa (raw, json)
Hash identifier: RBimpjH4lnaNjo4zaCF4LOIVb2QTXVV3d/Oh3mDyMKs=
Subject key identifier: C5:77:C3:CF:79:CC:A8:78:85:41:C2:2D:E1:1B:57:38:02:25:4F:E0
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0181D241AD7FA23615FE370EC896EDB67EEC
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xXfDz3nMqHiFQcIt4RtXOAIlT-A.roa
Signing time: Wed 06 Jul 2022 06:45:28 +0000
ROA not before: Wed 06 Jul 2022 06:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141384
IP address blocks: 45.129.227.0/24 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:41:ad:7f:a2:36:15:fe:37:0e:c8:96:ed:b6:7e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jul 6 06:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c577c3cf79cca8788541c22de11b573802254fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:2f:29:fe:fe:05:64:39:20:e1:9d:a7:0f:
79:38:bf:59:e4:58:6a:c7:fc:f8:e2:64:7c:16:5d:
f0:49:a0:fa:e7:3f:0f:d9:b4:52:78:3b:d5:26:e3:
0d:4e:c5:c2:8a:15:c9:08:de:fe:91:76:f3:10:1a:
25:57:45:41:f1:fe:39:cb:95:e5:2b:98:64:65:a2:
ac:47:40:4e:4d:29:e0:f4:f1:27:5b:52:1f:7a:49:
57:3c:09:03:0d:e8:3c:52:31:62:52:b2:d5:5f:3a:
3f:a1:3f:e0:35:99:ce:86:d0:c0:99:04:a9:f3:c1:
8e:f5:f5:49:72:a1:58:66:70:65:5e:eb:6f:3e:9b:
f4:9b:a7:0f:fe:03:26:c9:48:00:00:5f:e9:72:a0:
ed:50:56:3d:b7:3f:93:2c:9a:0f:e0:ff:82:b7:24:
ff:38:57:65:67:b3:35:01:4d:3e:3b:fc:82:71:2d:
80:37:49:80:4c:da:99:e1:60:b7:ea:1b:44:04:56:
d8:1a:07:8a:44:cb:93:55:81:07:03:71:0f:bc:31:
41:65:c8:0a:bb:6e:1f:b6:66:cf:3c:53:86:c9:46:
51:39:e0:0e:38:31:5e:e7:b2:2d:81:5d:1f:06:d0:
04:0d:cb:c0:ad:8d:df:66:5a:84:d9:46:53:a8:2d:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:C3:CF:79:CC:A8:78:85:41:C2:2D:E1:1B:57:38:02:25:4F:E0
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xXfDz3nMqHiFQcIt4RtXOAIlT-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.227.0/24
Signature Algorithm: sha256WithRSAEncryption
95:30:0c:ab:e5:e3:ad:cf:a7:eb:41:44:4f:ee:b9:d4:51:e1:
3a:ab:0b:a1:f9:e0:53:9e:5d:9e:a5:19:12:33:f4:23:c9:27:
a8:22:a7:5e:82:66:55:16:c7:01:47:5d:e7:52:16:64:67:a6:
1c:4b:fa:eb:db:42:d0:53:5d:47:b6:6f:f3:bc:ed:f5:42:8a:
0e:76:41:1d:12:20:ce:1c:81:e1:4c:4a:dd:88:6b:93:a3:3a:
e7:c2:43:b8:c0:de:e0:dd:f9:38:fa:5c:bd:78:69:f2:9f:ea:
5b:5a:cf:2a:c6:b2:d3:df:b9:d1:37:20:7c:da:e1:ab:81:7f:
53:95:9a:1f:7d:d5:24:89:c2:5c:e5:20:58:97:28:43:2a:26:
38:18:85:35:e2:ea:5d:a4:c8:f6:82:5c:25:43:65:1e:f3:0d:
86:88:72:64:75:5b:bf:a0:f1:0e:d1:89:88:a4:93:2f:24:32:
1d:a4:7b:e8:8d:2e:35:6c:46:fd:3c:f6:9c:8d:ae:8e:ed:55:
44:6b:e8:55:78:18:24:96:28:66:2a:76:5f:e1:4e:ee:37:34:
fd:c1:c6:7e:76:a6:60:c4:18:14:95:1e:e8:bf:bc:0e:a2:dc:
84:ec:0f:3d:af:5f:40:dd:49:d9:82:c5:ad:e7:52:99:7d:03:
5c:29:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:55:32 2025 by rpki-client