Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/azj5slznV0yD-Ce59e_xc3fy4W8.roa
File: azj5slznV0yD-Ce59e_xc3fy4W8.roa (raw, json)
Hash identifier: Vv2LTPEr2A+ReFsA77AL5dzrhlslHkYrMaY8Dix6eQU=
Subject key identifier: 6B:38:F9:B2:5C:E7:57:4C:83:F8:27:B9:F5:EF:F1:73:77:F2:E1:6F
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 018C77A3173246746BA3C6653B22A01B016B
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/azj5slznV0yD-Ce59e_xc3fy4W8.roa
Signing time: Sun 17 Dec 2023 11:57:06 +0000
ROA not before: Sun 17 Dec 2023 11:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 45.157.53.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:a3:17:32:46:74:6b:a3:c6:65:3b:22:a0:1b:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Dec 17 11:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b38f9b25ce7574c83f827b9f5eff17377f2e16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:0b:bf:51:c7:76:ba:93:10:9b:c0:2c:c0:
a7:58:02:b4:57:9d:74:0a:99:a3:d1:8b:05:2f:3a:
92:90:74:a6:33:80:2f:eb:3b:e0:75:f2:58:80:4a:
1f:95:8f:c9:15:90:93:bb:b2:a4:25:ff:1e:3d:15:
d5:78:3e:be:93:d9:01:97:d2:3f:c6:d1:e2:36:80:
19:41:18:2a:fd:63:61:f1:4e:e8:28:8e:70:3e:53:
e7:2f:6a:84:aa:12:d6:30:90:57:47:47:7f:68:71:
14:24:42:ac:cb:d8:cf:35:ee:e4:05:ca:bf:a2:84:
f9:3a:12:02:09:64:4b:58:45:d8:7b:ad:a9:51:69:
00:01:f7:17:89:db:e6:ed:14:cc:fe:10:6b:79:ee:
a8:15:96:2b:77:88:cf:b4:07:50:f6:82:9d:d0:d3:
1c:63:9d:cd:27:f7:96:42:58:f6:4b:14:9d:50:ee:
a1:89:9d:27:d5:b3:89:d6:b2:92:c9:a9:95:e0:3a:
0d:07:49:8a:34:84:eb:2d:b5:28:ab:36:91:6d:35:
98:d6:d7:f9:d1:98:e1:ec:54:a5:20:9c:bc:c9:5f:
24:10:2a:d7:9f:ae:fe:f6:aa:a0:10:be:e8:fb:db:
40:9c:b8:c6:d3:65:b9:49:62:75:5b:cb:f1:57:58:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:F9:B2:5C:E7:57:4C:83:F8:27:B9:F5:EF:F1:73:77:F2:E1:6F
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/azj5slznV0yD-Ce59e_xc3fy4W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.53.0/24
45.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6e:a6:1d:90:f2:d5:ab:7c:84:cb:c7:1a:c3:36:78:c0:1a:
df:cb:a6:e1:89:cd:27:0e:ec:16:07:2b:7b:d3:06:1d:87:ac:
a6:0e:c1:56:88:de:5a:ea:ee:d1:7f:aa:50:5c:67:55:59:ab:
d3:98:fe:fd:65:ca:19:de:49:dd:67:ce:c9:5a:60:83:92:f2:
d9:54:2c:47:a4:91:0d:db:d6:17:d1:8e:57:2a:9a:11:68:df:
f3:01:ed:df:c6:ac:67:8c:57:26:e2:14:33:55:e0:6d:15:51:
c5:87:f5:78:22:59:21:32:80:5e:af:99:f0:20:bf:a6:97:81:
ab:cd:10:2b:2d:74:61:44:42:b7:c0:3e:94:7c:01:10:60:1d:
59:84:67:e1:37:96:69:f1:d6:5d:62:a1:1d:f0:24:f2:38:4d:
f3:e4:ec:00:44:53:4a:57:f4:e2:69:6d:64:f6:4c:ba:39:80:
11:71:8e:4d:f4:a1:f0:14:0b:93:61:5d:53:15:7f:b0:90:a2:
fb:63:e7:5d:62:e3:6c:2e:fb:ae:d6:95:b5:29:44:26:a0:aa:
58:a1:40:ef:50:e8:0f:1a:ce:90:66:75:e4:cf:38:6c:c0:18:
45:e8:5c:a1:0d:d4:db:2b:51:74:23:ef:14:32:ff:cc:0e:86:
02:7e:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:46 2025 by rpki-client