Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oF7icotOkHTsgeBweZ-1IabTCZI.roa
File: oF7icotOkHTsgeBweZ-1IabTCZI.roa (raw, json)
Hash identifier: e+mwn2SlDYqEYXrvEsNKN1dqJiIX2Qy3Xx8Ii2ZeLeI=
Subject key identifier: A0:5E:E2:72:8B:4E:90:74:EC:81:E0:70:79:9F:B5:21:A6:D3:09:92
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 08573067
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oF7icotOkHTsgeBweZ-1IabTCZI.roa
Signing time: Sun 24 Apr 2022 09:17:05 +0000
ROA not before: Sun 24 Apr 2022 09:17:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 45.141.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139931751 (0x8573067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 24 09:17:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05ee2728b4e9074ec81e070799fb521a6d30992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:08:ea:d4:ef:a2:fc:0b:68:3b:42:b3:85:
de:6f:87:d7:22:93:11:fb:d9:df:6c:4b:d5:de:9e:
4e:b3:6f:7a:80:9a:81:ba:59:dc:8a:ac:d6:a9:4a:
c9:07:67:c4:5c:ae:4e:31:a0:84:54:92:dc:3d:de:
95:0b:48:0e:7f:f2:e7:92:66:a1:91:3a:d5:e6:5c:
81:06:44:f6:77:08:24:a2:8f:3e:71:25:48:e1:42:
12:96:73:85:38:a7:98:f4:62:d8:74:35:42:55:01:
f3:f9:32:91:d7:bd:13:e1:6a:0a:b2:de:b1:e2:b8:
04:7a:bd:a9:0b:09:82:fb:e8:5b:0b:0c:eb:99:86:
a6:ca:18:e7:1e:04:69:59:f1:52:34:93:58:0c:3a:
91:54:88:86:20:66:c0:78:51:12:e9:c1:27:77:b1:
b8:c1:4e:6a:7b:f9:b5:30:f1:44:6a:35:f1:48:21:
1a:46:9c:9c:2b:d2:7a:ae:62:bf:a8:4b:c4:64:72:
62:14:0f:5f:1f:30:7b:bd:2a:dd:ae:12:47:72:76:
2d:69:66:98:f1:ef:1b:53:32:ae:4e:ef:77:70:c1:
38:66:53:39:49:37:a4:ff:34:b6:35:f8:89:d3:3f:
35:db:fe:8b:59:c3:af:24:05:59:fc:12:d9:c4:10:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:E2:72:8B:4E:90:74:EC:81:E0:70:79:9F:B5:21:A6:D3:09:92
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oF7icotOkHTsgeBweZ-1IabTCZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:62:57:8e:aa:d8:c7:6a:f2:dc:55:d1:26:a7:94:ea:83:23:
69:0f:90:a9:1e:00:95:1d:19:37:d3:af:1e:61:71:a9:cb:6f:
86:1d:33:a7:61:4d:a7:a1:f5:cb:30:07:6e:70:1d:6b:91:67:
14:a1:ff:77:7a:ec:73:55:8b:37:fc:12:f1:eb:aa:cc:35:4b:
6c:9d:57:c8:88:ca:fa:94:a0:59:a8:5f:fb:07:d9:18:ac:53:
e3:d5:d7:f8:ca:a7:67:36:18:c3:5b:b6:25:d7:f2:fc:b3:99:
96:e1:b1:18:b4:c7:0a:c5:e0:8d:f7:fb:b4:88:14:ba:38:19:
4f:09:7d:68:9d:73:3e:e3:4d:56:39:f4:f5:13:d7:37:66:3d:
ce:98:48:1a:b2:ba:e3:4f:2c:1a:2c:fe:19:17:5c:50:b5:8d:
2c:f9:ea:0c:a5:48:c1:b8:db:14:f7:af:3a:f6:05:d4:50:41:
6a:18:e5:ce:d4:1f:5f:07:db:16:3e:cb:e6:92:66:a5:bd:61:
31:09:d5:26:63:b9:60:7c:c7:81:0f:ed:c3:3b:9b:17:ce:c1:
7a:dc:55:4d:42:c5:34:3d:0c:3c:76:86:e5:b2:e7:0d:6f:53:
46:80:71:90:9f:32:e2:21:4b:35:90:6f:c7:76:bb:22:d7:43:
3f:31:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:24 2025 by rpki-client