Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/QBD9DJ0mCfObbZwv3tkEb0pB53g.roa
File: QBD9DJ0mCfObbZwv3tkEb0pB53g.roa (raw, json)
Hash identifier: G+UadDl3ayc63mU9wLFKd58tYNuLYCxxItJWWTmDBLU=
Subject key identifier: 40:10:FD:0C:9D:26:09:F3:9B:6D:9C:2F:DE:D9:04:6F:4A:41:E7:78
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01875A3D0A562B7805BDBABCFE752E8D1DDD
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/QBD9DJ0mCfObbZwv3tkEb0pB53g.roa
Signing time: Fri 07 Apr 2023 05:42:42 +0000
ROA not before: Fri 07 Apr 2023 05:42:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:3d:0a:56:2b:78:05:bd:ba:bc:fe:75:2e:8d:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 7 05:42:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4010fd0c9d2609f39b6d9c2fded9046f4a41e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:26:20:99:d2:99:3a:91:62:43:72:40:8a:
a0:6f:26:1d:76:d9:59:2d:4a:21:bb:a3:6c:d2:dc:
62:3a:7a:af:b4:93:64:3b:8b:87:76:2e:d4:5b:c8:
e6:e1:3a:c8:3d:5d:d7:ba:94:6a:31:14:26:e7:39:
8d:bb:6a:b2:62:42:e8:9c:6b:05:5a:4a:6c:7e:c4:
02:17:a0:30:cf:fa:99:2d:8b:e6:db:85:d2:46:3d:
3f:de:41:c1:54:3a:25:1f:37:29:7e:6b:9b:fe:e6:
48:a7:d0:38:84:66:6d:35:4a:a3:80:b1:33:1f:24:
65:0e:a3:ff:6b:a3:56:1c:c7:69:9d:73:a8:5d:da:
f5:8d:17:60:47:f6:61:57:b7:dd:c9:41:34:97:67:
57:49:ee:7c:d0:7a:b5:ca:73:3f:84:89:2b:b4:37:
7b:2f:14:e8:64:1e:49:13:08:4a:d7:cf:59:3c:7b:
f2:0b:02:09:41:7d:75:86:e3:3e:64:87:99:45:58:
59:82:d7:88:7f:19:6c:81:19:19:84:aa:aa:a4:8a:
9d:a2:7b:dc:b2:31:96:1f:e7:f0:f8:b4:fa:78:cf:
f8:18:2e:1e:4a:43:89:85:91:3d:95:9c:aa:2c:2d:
db:12:de:0a:4d:16:7d:a7:13:34:2b:3e:1d:ec:13:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:FD:0C:9D:26:09:F3:9B:6D:9C:2F:DE:D9:04:6F:4A:41:E7:78
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/QBD9DJ0mCfObbZwv3tkEb0pB53g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e9:ba:d5:e4:21:c0:d9:b0:3c:4a:c2:98:22:08:cb:15:b4:
1c:60:b9:d1:a9:b6:2b:8c:7a:2e:a2:47:af:39:6b:88:d8:07:
e3:4e:14:19:82:5c:6c:0e:91:f4:38:f4:38:a4:c9:e7:4f:9e:
ab:08:36:3a:6c:11:81:1d:fb:22:3b:12:8b:36:bd:c9:7c:90:
90:7d:fb:dc:b4:18:9f:f6:43:73:ab:c4:62:5f:f9:5c:b6:9f:
ca:ac:b9:a9:36:31:91:d1:92:c4:af:a1:03:ad:6b:78:95:dc:
97:45:5e:bd:2a:6e:2d:dc:79:69:87:e1:12:68:a0:06:1b:63:
9a:33:6c:e0:43:e4:79:3a:ea:96:d5:72:5d:ef:32:46:b7:57:
e6:47:7d:aa:66:a5:77:b3:0b:01:98:de:b9:28:a5:6d:fe:5a:
f3:85:4f:4b:94:89:e9:f3:50:ae:8c:3f:2a:21:0c:0e:6e:76:
cf:62:fc:41:50:8b:a5:f0:82:09:9c:d7:65:4c:c8:b8:0c:42:
ab:fd:26:a9:77:3d:ab:c6:b1:cd:c2:e8:c4:be:1f:ed:ec:7f:
8b:35:dc:85:6d:f2:13:2d:a6:6f:d1:bd:ae:fb:22:e3:20:3e:
fb:6a:3e:96:90:84:3e:e9:0d:ef:2e:bd:63:c1:29:85:14:5c:
2f:0f:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:31 2025 by rpki-client