Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9xbbUTgUMlpod1T0ChCsgvqkSvo.roa
File: 9xbbUTgUMlpod1T0ChCsgvqkSvo.roa (raw, json)
Hash identifier: 7YQ4COLg1Wsxhh0HYVcEGPuMUxITwGoAGjOzk2Q5yxY=
Subject key identifier: F7:16:DB:51:38:14:32:5A:68:77:54:F4:0A:10:AC:82:FA:A4:4A:FA
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01876EF1F199C55CF4EBB1055AB3808DA165
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9xbbUTgUMlpod1T0ChCsgvqkSvo.roa
Signing time: Tue 11 Apr 2023 06:12:42 +0000
ROA not before: Tue 11 Apr 2023 06:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.156.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:f1:f1:99:c5:5c:f4:eb:b1:05:5a:b3:80:8d:a1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 11 06:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f716db513814325a687754f40a10ac82faa44afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:ff:6c:e1:8e:5f:5d:ff:af:04:29:29:8f:
0a:77:46:31:47:f2:11:54:54:0d:b2:70:8c:30:a0:
93:05:f6:49:b2:66:a9:09:c5:c1:56:b4:5e:c5:78:
ff:eb:2c:d9:c5:c5:58:ac:29:85:61:72:eb:05:aa:
1f:7f:94:aa:b2:da:aa:af:6d:ff:e1:af:3c:bc:9e:
53:95:f1:dd:71:48:bd:f4:87:e0:df:91:10:44:95:
cc:fa:52:d9:a2:ca:7e:cd:e0:88:b3:48:06:e1:8b:
9e:ca:56:4b:6c:71:ef:30:ca:f2:93:93:08:57:bf:
ca:89:0e:36:fc:cc:54:b5:72:de:42:22:92:ea:96:
a2:b1:16:3f:58:1f:73:b1:2e:e9:55:ad:3a:69:47:
35:8a:bb:33:a8:66:7d:a6:a0:a8:0b:a9:3a:24:a1:
74:bd:db:d1:10:4c:ad:d4:a9:50:4f:35:bd:d5:e0:
4a:80:e9:85:1f:ef:78:1a:39:37:e3:f6:75:d7:8d:
d2:7e:4c:c3:bc:a8:61:ab:08:1c:ce:75:2c:32:eb:
55:b7:fd:25:79:8e:1a:6d:78:f6:7e:fa:4f:f7:61:
6c:e8:76:a5:b2:d9:74:02:ec:80:1c:33:7c:ee:2f:
ca:c7:2c:72:fb:b5:b2:26:d4:40:d7:dd:10:64:a5:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:DB:51:38:14:32:5A:68:77:54:F4:0A:10:AC:82:FA:A4:4A:FA
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/9xbbUTgUMlpod1T0ChCsgvqkSvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:61:ed:c3:e3:1c:b4:a8:96:87:83:49:a0:56:da:23:7b:2b:
f2:9e:be:83:be:77:8b:de:85:fc:07:94:e8:4a:21:e6:ba:e5:
7f:23:4e:12:cc:7e:9d:48:40:c8:93:d3:2f:b8:e8:32:5b:b1:
64:c0:b3:55:8a:fe:47:26:56:64:51:ad:be:dd:c5:da:3f:4b:
12:06:76:9a:77:13:e3:13:98:0c:a6:80:33:6f:9e:bb:9a:5a:
9b:d6:5f:d9:4d:ae:54:86:8d:4e:97:58:b9:64:ea:fb:1d:9e:
f5:a2:72:bd:4b:f8:8e:8d:ca:5b:c8:dc:71:f1:73:15:63:40:
7a:4d:00:6a:15:53:38:75:ac:96:7a:c4:d0:53:76:db:71:4a:
84:b3:d6:83:71:22:5b:df:2e:e6:5f:47:99:5d:76:f6:29:59:
b1:2e:8f:b7:dd:1b:88:86:c2:39:cf:5c:69:55:b6:97:8a:d7:
18:3d:22:43:ee:ed:6c:2c:da:5a:21:16:b9:97:d3:14:3b:37:
71:12:5c:3f:38:7b:b3:a9:ae:a0:da:93:7c:22:2d:fc:c3:57:
f4:69:6f:90:02:e5:c1:b1:48:35:89:65:72:ac:c0:55:3e:18:
1b:0e:69:2f:ad:f3:ce:59:c7:6a:86:1b:6d:43:88:88:d4:90:
98:f2:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:25 2025 by rpki-client