Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X_6mxfxZFhCVsxSJU-H3XUNYvPo.roa
File: X_6mxfxZFhCVsxSJU-H3XUNYvPo.roa (raw, json)
Hash identifier: Yw0oe3v3EnVgxGQWPJAdmYKoUMiF7Ui7oN5RRHPLI0A=
Subject key identifier: 5F:FE:A6:C5:FC:59:16:10:95:B3:14:89:53:E1:F7:5D:43:58:BC:FA
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0185711E67FBDE59B25DC132806BF9773231
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X_6mxfxZFhCVsxSJU-H3XUNYvPo.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 45.156.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:67:fb:de:59:b2:5d:c1:32:80:6b:f9:77:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ffea6c5fc59161095b3148953e1f75d4358bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:1b:a8:e2:6c:61:1c:c9:33:83:67:df:10:
45:1a:c5:7f:74:dc:af:ac:9f:e4:9e:fc:a9:09:5f:
28:cf:9f:76:33:cd:f1:3b:71:45:01:1c:c4:13:37:
90:6e:29:74:c2:00:a6:ff:dd:9a:c6:44:6a:05:c6:
00:6e:ff:cb:25:0a:53:db:bc:de:88:ce:26:db:01:
54:e0:b5:cb:2b:45:16:ac:eb:1c:94:1b:10:b9:9f:
76:8a:a2:40:38:6d:70:15:c9:dc:50:6e:1a:b5:60:
6b:16:a9:b1:77:b5:f3:7d:cc:0b:09:ed:93:df:9d:
0a:59:c8:66:27:f4:b1:be:e9:de:68:a8:34:ba:a0:
fe:39:83:64:78:31:9f:c3:17:d5:27:1b:95:51:0c:
04:3e:a1:41:65:ef:4f:c4:56:5e:97:61:53:9e:df:
7c:45:1a:14:14:be:b3:f3:f3:59:7c:2f:75:23:c5:
9a:9e:8f:42:58:a7:ca:8e:90:4b:26:0f:8a:e4:5c:
8c:46:94:47:f4:40:61:18:47:ea:1b:d2:76:d8:4a:
fb:76:6b:d5:20:f3:50:4b:63:16:0f:d0:b6:20:75:
25:83:f5:c1:06:30:1e:9b:3a:d9:40:68:4e:1e:11:
34:08:bd:8d:86:94:a4:ca:37:3d:27:33:03:29:e3:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FE:A6:C5:FC:59:16:10:95:B3:14:89:53:E1:F7:5D:43:58:BC:FA
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X_6mxfxZFhCVsxSJU-H3XUNYvPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c3:97:1c:bc:53:10:56:a3:16:b8:68:52:0c:5d:fe:bd:bc:
23:4e:56:15:64:cc:e4:5e:05:a1:7b:3c:43:11:62:4f:e8:bd:
16:46:90:8b:17:4d:2b:10:84:6f:81:27:89:32:5c:6c:b2:10:
77:00:97:5a:21:40:48:78:e8:fb:9d:81:84:fe:1b:2a:98:88:
72:b4:80:55:95:ea:61:20:45:c7:d5:25:91:72:80:c3:6b:5d:
20:03:9e:4f:ae:99:23:6c:17:fe:7a:3a:fd:7b:65:ac:da:c4:
da:8a:a0:f7:36:bf:bb:04:a7:7c:a9:68:94:14:c5:75:f6:74:
31:1e:cd:0f:39:09:05:20:b3:44:ba:20:7a:f6:d6:cf:cb:d9:
a5:b7:a4:7f:8c:4b:00:0c:46:63:23:2f:c6:53:12:93:26:e0:
7a:a8:fb:ca:86:20:dc:49:bf:c5:1b:be:e5:6d:70:ac:7e:99:
0f:54:e7:16:18:53:06:8b:5c:c8:e1:31:c4:8f:f0:32:3b:96:
ec:b8:4c:31:8f:9f:37:f7:4d:21:25:2e:96:29:d0:85:b2:1a:
2b:c8:c2:1b:84:6c:3e:b6:be:79:eb:b0:7b:3b:25:c7:14:bc:
d0:20:d9:bb:02:67:46:f6:74:52:6c:5b:ab:af:e0:75:57:8b:
38:a9:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:14 2025 by rpki-client