Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1U9w7d-_QskxLU4q46htDn8Cclk.roa
File: 1U9w7d-_QskxLU4q46htDn8Cclk.roa (raw, json)
Hash identifier: K08I8bIibREAk/BsKVZYaWFug+M3pmAgD3n3mCWP3rw=
Subject key identifier: D5:4F:70:ED:DF:BF:42:C9:31:2D:4E:2A:E3:A8:6D:0E:7F:02:72:59
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CB204F43A29BCBACA0B692EE47237C649
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1U9w7d-_QskxLU4q46htDn8Cclk.roa
Signing time: Thu 28 Dec 2023 20:01:58 +0000
ROA not before: Thu 28 Dec 2023 20:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.147.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:04:f4:3a:29:bc:ba:ca:0b:69:2e:e4:72:37:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 28 20:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54f70eddfbf42c9312d4e2ae3a86d0e7f027259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:39:d9:0d:dd:ac:29:d6:f1:23:91:48:96:
5d:fc:97:e8:ac:f9:18:88:f6:57:fe:5e:02:3f:10:
b0:1f:91:b7:1e:7f:44:a4:9e:e2:95:b2:6c:2b:58:
55:7e:14:7b:2a:55:05:c8:ef:10:da:72:da:e4:f2:
d2:82:41:49:98:40:f9:8a:fb:7c:40:57:b2:d4:93:
20:4c:f1:d5:da:10:67:98:86:fc:f2:8d:0b:f0:72:
3a:05:3a:70:a3:a3:29:d6:02:f2:84:7a:cd:d6:dc:
1f:7f:d3:c3:60:3b:73:9d:0e:0e:23:9f:1b:48:7b:
2c:bb:7f:a4:e8:65:f5:67:4b:95:f0:ea:1d:a5:f1:
f7:58:e2:6e:8e:e1:dd:87:2d:c2:0e:94:5b:41:49:
3c:b8:b9:2a:85:47:11:71:a4:a1:c0:ec:c1:b1:ca:
51:6f:97:ff:fe:db:1c:44:1a:4e:72:28:bc:38:d5:
5e:16:9b:e2:ab:a0:2a:0e:c0:cf:e8:20:5c:fb:ba:
61:6f:7c:b5:1d:21:fa:11:c9:19:31:9c:61:29:19:
af:f5:79:2c:f9:68:15:4f:83:b8:1c:63:65:31:7a:
6d:92:67:7d:7d:a0:bd:69:68:2f:9a:0c:df:1f:fb:
96:50:f0:53:6e:b3:31:ea:b1:72:95:2a:0f:b8:79:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:70:ED:DF:BF:42:C9:31:2D:4E:2A:E3:A8:6D:0E:7F:02:72:59
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1U9w7d-_QskxLU4q46htDn8Cclk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:68:27:03:b2:0d:d7:02:ae:6f:0a:9d:d8:f7:69:45:5f:c2:
6d:56:9d:ad:b2:e2:31:a4:b9:bb:54:f4:e0:a0:e4:64:35:08:
ac:76:12:eb:b4:10:ae:18:f9:fb:3d:ee:90:1d:aa:5c:38:c6:
1d:e6:48:25:21:5a:16:98:19:fd:18:7c:31:97:9a:69:82:05:
7d:12:17:41:f1:1e:7c:05:29:de:52:d4:19:b8:1c:1f:12:1d:
76:de:ea:7d:fe:43:cd:f7:e2:2a:e2:5a:fb:e6:e0:0b:2a:4a:
b8:a7:63:d6:4c:0a:b7:e2:10:c2:75:1e:c1:50:a6:56:98:44:
47:de:1c:b6:f2:73:37:ff:2d:bc:01:db:e1:72:f5:b6:44:c1:
9f:05:e2:bd:0c:d3:8f:da:8e:e9:99:3c:ea:e1:68:a0:d5:bd:
0f:ee:65:16:88:9b:41:4d:35:e7:eb:b9:c7:1a:86:4b:40:b6:
81:05:6d:02:7a:4d:95:4d:4d:68:40:d0:aa:ce:d9:57:c1:c1:
5e:4b:54:0c:ab:8c:b1:6b:f2:62:94:05:3a:8b:9e:8a:31:04:
5e:f5:67:21:a5:c6:97:11:1c:1d:e8:c8:d3:6b:ac:ae:b2:cf:
6a:c6:f4:44:c4:6b:9e:2f:83:89:c0:c4:56:ae:d9:a5:0b:0e:
b7:8b:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:41 2025 by rpki-client