Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/icepWMV_5w0zY_9wjOEBIAoy-N4.roa
File: icepWMV_5w0zY_9wjOEBIAoy-N4.roa (raw, json)
Hash identifier: 7rsa3evhAbzOHoi3awGoNYYX/uhMjp23ygU0/4ZABqo=
Subject key identifier: 89:C7:A9:58:C5:7F:E7:0D:33:63:FF:70:8C:E1:01:20:0A:32:F8:DE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 074FFA70
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/icepWMV_5w0zY_9wjOEBIAoy-N4.roa
Signing time: Tue 11 Jan 2022 12:46:35 +0000
ROA not before: Tue 11 Jan 2022 12:46:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211114
IP address blocks: 45.147.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122681968 (0x74ffa70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 11 12:46:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89c7a958c57fe70d3363ff708ce101200a32f8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:7e:a4:27:60:3b:e3:e5:b4:49:96:a9:2b:
34:0f:98:41:30:35:7e:a2:9f:05:cd:ce:07:ff:66:
1f:f8:c9:54:63:f3:32:3b:de:65:02:fa:87:38:43:
3d:57:9e:88:bc:5a:cb:26:39:2f:11:e2:01:75:53:
5b:38:a0:2d:32:13:b7:f4:c3:a7:34:29:60:f4:66:
a7:8c:ef:01:6f:cd:7b:00:04:0a:60:db:79:87:cb:
49:aa:fb:07:7f:d8:c4:38:18:23:01:92:78:cf:a2:
73:1e:64:36:e9:de:1c:c0:45:b6:34:6d:74:2a:9a:
d9:25:0b:14:3d:09:b9:00:ab:3d:dc:ca:fe:b5:b3:
49:0d:b5:9c:de:10:d1:83:8e:ae:ce:60:d3:b4:e5:
a1:d6:85:18:37:d4:e6:19:c6:1b:29:42:3a:62:d2:
53:98:fa:21:83:9e:cf:da:95:0b:03:47:6a:e6:2a:
1d:78:09:e4:00:01:9d:d3:05:df:af:d9:bd:a2:fb:
49:80:32:72:c5:d1:58:46:82:45:a1:b5:59:6e:86:
3a:21:24:01:1d:10:f4:53:43:78:e4:a7:d6:58:b5:
bf:14:51:5f:f4:1e:7d:f8:62:4a:a5:c9:fe:d2:57:
f7:2c:fb:f1:a5:90:51:b8:9b:98:52:80:29:3d:00:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:A9:58:C5:7F:E7:0D:33:63:FF:70:8C:E1:01:20:0A:32:F8:DE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/icepWMV_5w0zY_9wjOEBIAoy-N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
59:11:e8:1a:e1:cd:90:90:2e:33:74:f2:b9:2e:a8:5a:19:42:
aa:f4:87:45:3a:83:aa:64:3d:61:21:9f:8a:e8:bc:dd:96:a4:
d3:38:4f:77:b5:1a:18:9e:3a:1d:3e:5b:04:47:ce:81:14:a8:
1a:f4:05:25:16:79:10:b3:fd:2b:5a:6a:8f:79:66:fe:96:8a:
3a:d1:ba:bc:3c:d5:5b:b6:69:18:fe:5b:6c:4a:95:70:e4:fd:
7b:b3:e6:75:88:c3:c5:e2:5d:a2:fd:f5:fb:02:0d:f5:ec:31:
49:09:1d:f2:92:d8:80:f9:b5:cc:51:4d:0e:f9:29:a3:61:25:
54:90:dd:96:9a:f1:5b:64:af:20:59:74:56:63:22:d4:ff:01:
b1:23:83:7d:36:6f:2a:39:20:29:37:ff:c9:d7:a7:48:88:5f:
9b:3f:1d:f5:c0:e6:14:1f:6a:5b:27:b9:37:bc:e1:79:bb:a1:
07:68:ac:f1:31:31:e2:79:c3:d3:37:e6:8b:08:aa:cf:52:b7:
73:38:e5:b2:80:c4:ca:50:c0:88:b6:81:a3:78:b1:2a:7f:72:
f3:48:11:02:ae:7b:86:a5:85:75:2d:cf:af:91:a5:90:4b:fd:
36:d3:95:c8:de:2e:0d:e7:fa:38:13:50:b5:72:be:9d:d3:4b:
a1:f3:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:21 2025 by rpki-client