Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/r3mSdcYy0PHirIA4cKn8lhirxpc.roa
File: r3mSdcYy0PHirIA4cKn8lhirxpc.roa (raw, json)
Hash identifier: rTa+5jEgIktCYS4Wi+Vbx/mfTEBZvsoRQWF9z5r49AE=
Subject key identifier: AF:79:92:75:C6:32:D0:F1:E2:AC:80:38:70:A9:FC:96:18:AB:C6:97
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01877F2C97603DD0191EAD45BF8612C80B9C
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/r3mSdcYy0PHirIA4cKn8lhirxpc.roa
Signing time: Fri 14 Apr 2023 09:50:41 +0000
ROA not before: Fri 14 Apr 2023 09:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.59.181.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:2c:97:60:3d:d0:19:1e:ad:45:bf:86:12:c8:0b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 14 09:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af799275c632d0f1e2ac803870a9fc9618abc697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:be:ba:97:1a:53:80:b5:06:cf:df:fc:4e:
37:f2:2e:5b:bc:ef:d4:3e:65:eb:46:c7:21:f6:59:
f6:2c:69:d9:20:7c:7b:3a:38:80:88:ca:3b:82:52:
39:0f:82:67:6a:74:c8:76:f8:94:f2:5b:9f:d4:46:
f9:da:60:6f:8c:7c:a5:74:ca:c4:5b:e9:95:af:1b:
42:13:6d:4d:f9:14:97:14:48:47:9b:8f:b4:d1:07:
d3:69:94:b1:67:31:3c:b4:58:75:8b:9f:aa:06:44:
e9:5d:79:bd:ce:a5:e2:fa:ab:70:af:b4:29:58:d0:
86:52:0c:d1:05:c7:27:9b:8a:0b:78:f5:f4:ec:49:
a5:40:35:7a:44:be:60:ef:7d:07:90:78:50:da:eb:
3e:3d:73:c9:0e:08:07:82:0e:e3:e7:db:3d:71:73:
8f:5b:b1:c8:3b:9d:54:3c:ad:9a:83:cd:37:0d:48:
e6:3a:98:56:14:96:4f:a0:f4:0d:97:10:3c:52:63:
f8:ad:8c:97:b8:1d:07:54:71:10:6a:54:89:c5:75:
4b:f7:10:f3:23:47:a7:f5:5e:2c:a2:ab:1e:89:37:
ac:67:0c:3f:45:ca:69:16:b6:00:f7:5f:e1:08:ac:
62:67:0f:4f:37:d0:54:f4:bd:bc:c6:66:19:ef:ad:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:92:75:C6:32:D0:F1:E2:AC:80:38:70:A9:FC:96:18:AB:C6:97
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/r3mSdcYy0PHirIA4cKn8lhirxpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.181.0/24
45.156.144.0/24
45.156.147.0/24
Signature Algorithm: sha256WithRSAEncryption
12:19:df:4a:69:5a:f7:87:6b:af:62:72:c6:6f:05:b9:17:67:
dd:15:24:7c:fa:7e:19:a7:9e:e3:f5:96:7b:01:99:9e:53:f9:
f0:e2:49:29:2e:09:c1:b6:6a:66:37:ee:fd:e2:6e:37:10:5b:
c3:21:6e:b7:d8:fb:97:1d:53:84:92:aa:ab:d3:20:3b:2d:60:
6b:f1:59:12:f7:de:7c:94:56:4f:6a:5a:b0:6b:fe:b8:36:8c:
f3:29:ad:1a:3d:65:ed:c8:5e:0d:86:ce:ae:11:e5:85:73:f4:
c6:c3:64:37:40:47:47:b3:4b:d1:49:34:b4:cd:c1:a2:6f:c0:
7c:75:59:19:2c:3b:25:6e:e9:1f:97:ff:41:89:60:81:e4:b4:
34:cb:4b:7f:76:82:94:31:89:74:e3:2b:37:64:81:f2:ab:f6:
ac:ed:7b:1e:0e:a3:5c:03:5e:1b:a2:1e:94:44:2a:ce:42:6a:
8f:a0:15:38:10:0c:59:6e:c6:71:a5:5e:77:05:6e:72:ca:99:
f6:95:23:aa:fd:84:ca:23:d3:c7:af:f7:2f:48:7e:2c:ca:c9:
2d:67:fc:7b:8e:86:81:86:9e:6b:74:f1:2a:ee:c0:36:57:3d:
3b:98:37:25:54:d5:ee:22:09:05:73:e3:a1:8a:87:3e:af:da:
86:96:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:59:16 2025 by rpki-client