Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/SGdDSAwxYri5rlLb8NfTCEnxtKs.roa
File: SGdDSAwxYri5rlLb8NfTCEnxtKs.roa (raw, json)
Hash identifier: lJeHq7QYB3JCBOrdfHfsuukUAY+qdBdkIjSGJXTI3sg=
Subject key identifier: 48:67:43:48:0C:31:62:B8:B9:AE:52:DB:F0:D7:D3:08:49:F1:B4:AB
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 065921C8
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/SGdDSAwxYri5rlLb8NfTCEnxtKs.roa
Signing time: Sat 01 Jan 2022 15:01:16 +0000
ROA not before: Sat 01 Jan 2022 15:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208734
IP address blocks: 45.84.116.0/24 maxlen: 24
45.84.118.0/24 maxlen: 24
45.84.117.0/24 maxlen: 24
45.84.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106504648 (0x65921c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jan 1 15:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=486743480c3162b8b9ae52dbf0d7d30849f1b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:17:b8:87:eb:c0:f4:7c:eb:42:ab:10:51:
46:3f:39:fb:2d:08:89:3e:15:ac:15:71:96:aa:09:
98:bf:38:46:db:04:a4:72:1e:87:82:a1:67:15:8c:
d9:9f:c8:41:10:8e:ef:a8:87:97:2d:5d:17:7e:65:
30:33:52:72:2d:ea:32:ca:7d:e5:03:cb:2e:63:84:
5a:ef:c3:65:87:76:95:83:c6:df:d5:4d:9e:81:6b:
23:2b:4e:ad:2a:b3:9a:e2:56:7e:a1:d6:5a:4a:5b:
10:27:48:aa:b5:b8:92:8a:76:9d:09:6a:9b:11:3c:
bd:2b:18:89:cd:61:03:8f:80:c2:b4:a0:c8:a8:d3:
06:bb:21:ad:19:ce:5d:d2:75:87:40:2b:91:06:f8:
e6:dd:b2:75:ad:28:4e:ae:6c:cd:f0:2e:e7:99:a8:
d4:ad:e0:20:be:79:1d:9f:02:72:77:9a:36:a3:2d:
3c:bb:b5:e8:23:7d:ca:04:e4:30:53:b8:d7:5a:58:
17:06:49:73:3b:c8:e8:b2:31:89:a8:0c:d3:45:4e:
ce:47:8b:9e:eb:d4:f4:26:f1:bb:2f:c5:6c:23:ee:
21:83:2a:cf:8d:33:ff:90:5b:73:86:ca:c9:d2:05:
64:13:9e:f3:1e:30:d7:d4:01:93:d2:31:3a:94:ff:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:67:43:48:0C:31:62:B8:B9:AE:52:DB:F0:D7:D3:08:49:F1:B4:AB
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/SGdDSAwxYri5rlLb8NfTCEnxtKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.116.0/22
Signature Algorithm: sha256WithRSAEncryption
05:74:95:2a:8b:b8:b3:56:02:ec:5e:a7:a5:c8:84:87:f8:b4:
27:f7:3a:eb:ea:d3:0d:bc:19:cd:4d:03:07:74:01:0a:45:29:
dc:7c:3e:09:6b:58:1c:32:24:6f:03:37:dd:eb:3c:43:48:ec:
60:3b:dd:b9:c1:55:e5:05:3e:fd:53:3d:97:e5:fc:f5:3a:b3:
72:4b:4f:bc:20:be:9b:79:fb:10:7b:e5:2a:16:da:f8:7b:20:
0c:4a:28:b5:ca:e3:82:f6:64:d2:c1:b9:70:5a:b7:e1:7a:66:
5a:b4:c3:1b:1b:49:a7:24:e6:17:b0:19:d7:28:74:bb:11:35:
d8:45:b9:3e:09:c4:5f:58:ce:a5:84:87:00:d1:c2:04:bf:e3:
e1:e9:5e:0f:b6:37:7b:2c:06:4c:59:72:5c:64:a9:0e:f1:c2:
23:95:a5:c6:2f:33:04:15:97:80:26:fc:da:db:b0:4a:6d:8c:
1b:81:b4:e9:2a:fc:b4:5d:8c:ef:36:4e:21:98:ed:35:17:7c:
e3:c2:73:d7:d4:21:aa:f0:b8:af:df:c8:12:f7:71:63:09:1e:
d9:5f:67:18:8e:5e:4f:16:3f:e1:eb:6d:50:10:67:ec:93:a3:
f3:e4:b8:42:d9:38:78:df:ed:8d:73:27:37:d6:8f:a2:aa:2c:
61:e1:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:30 2025 by rpki-client