Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/yfgasIxTpJChz32huU3QeBBWdGM.roa
File: yfgasIxTpJChz32huU3QeBBWdGM.roa (raw, json)
Hash identifier: BMs//wpTM5/i/0ibkX2EMU3jvzr4tkXpVDMVGsrRCnw=
Subject key identifier: C9:F8:1A:B0:8C:53:A4:90:A1:CF:7D:A1:B9:4D:D0:78:10:56:74:63
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 0272261D
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/yfgasIxTpJChz32huU3QeBBWdGM.roa
Signing time: Sat 01 Jan 2022 11:04:44 +0000
ROA not before: Sat 01 Jan 2022 11:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41035293 (0x272261d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 11:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f81ab08c53a490a1cf7da1b94dd07810567463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:f8:70:c1:b3:5b:d8:32:f4:94:c5:3d:13:
24:f2:79:cf:ca:21:98:83:3a:0b:cd:13:7c:e2:ce:
e2:a3:17:a7:22:f1:b5:37:dd:1f:9a:0e:c4:bb:52:
da:5b:3a:9b:17:d3:48:13:a6:74:74:2a:5a:72:a7:
d3:20:0d:58:10:a6:c5:5f:22:fb:b9:07:ba:e4:8d:
24:f8:e0:ed:9a:bf:ea:41:6d:be:95:ff:4e:76:34:
7f:9d:82:3a:69:b3:8d:f6:7f:b0:57:df:9a:bf:10:
85:31:07:dd:1d:db:c3:3a:94:c4:c0:15:4c:38:cc:
84:6b:81:40:eb:c7:51:02:44:17:a5:55:6d:42:85:
2e:0e:70:bc:af:51:70:37:ba:d7:c9:6e:22:69:4d:
fb:23:fc:90:2c:04:3a:a6:ca:69:79:91:25:fc:34:
8f:4b:d6:f1:83:83:6a:56:3a:af:f1:08:3d:7f:2a:
f2:80:af:ac:71:a7:36:26:2d:d0:d8:68:5d:b3:0f:
a6:b0:b4:77:af:ee:23:0b:a4:14:39:ec:61:90:6b:
f8:99:fa:7b:3a:e7:c0:16:89:7f:6a:d2:a0:19:43:
46:24:de:d3:86:af:f5:e4:08:5b:22:48:db:ad:29:
db:22:df:87:c8:27:ef:28:52:5b:2e:a2:8e:78:2f:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:1A:B0:8C:53:A4:90:A1:CF:7D:A1:B9:4D:D0:78:10:56:74:63
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/yfgasIxTpJChz32huU3QeBBWdGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c8:a7:04:d6:d2:af:a4:d8:cf:95:cd:90:28:65:cd:bd:d2:
51:fc:00:4b:4e:36:6e:d9:44:5a:fd:a5:c8:75:70:fd:43:27:
d2:7b:9f:4d:2a:42:d8:2e:69:0a:24:9b:fc:48:71:47:3d:50:
c5:da:d7:20:db:69:bb:80:38:6b:2d:69:ed:88:e2:13:ff:9a:
3c:d2:50:ad:0b:87:2a:03:68:62:1f:33:84:28:db:8f:5a:fe:
bb:b5:5a:41:d5:52:c0:d3:f1:a5:7c:81:2d:f8:63:c5:4f:b2:
19:6c:de:ab:70:9d:84:a7:3a:ab:d8:19:0f:76:15:70:2a:b0:
db:c7:7c:4c:c6:94:89:29:f2:11:54:b2:89:14:cb:75:dd:04:
92:4b:00:18:14:b9:32:8f:c3:d3:11:36:50:5d:5f:4e:51:8b:
d2:b1:b4:ee:11:b8:b0:09:e8:32:ab:9b:b0:21:17:c4:5f:f4:
c5:fd:ee:9a:72:d5:6d:d2:70:2a:35:97:e4:30:54:ad:b7:f4:
35:07:73:c6:fd:cb:ee:91:95:0a:c0:fd:bd:11:86:04:c2:54:
e1:48:7a:98:0f:7a:83:da:1e:ac:d8:cd:cb:51:0a:9f:65:eb:
09:a9:5b:5a:d8:ed:fc:16:b8:34:cd:1c:9e:6d:79:85:20:f4:
36:4f:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:09 2025 by rpki-client