Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/cW-T1uUBUMGho4qQNHuKiEkoEcc.roa
File: cW-T1uUBUMGho4qQNHuKiEkoEcc.roa (raw, json)
Hash identifier: HdOYaooz5iU0p3Jv7gAozs9Cjo1rjt28jkyeMPHlYtc=
Subject key identifier: 71:6F:93:D6:E5:01:50:C1:A1:A3:8A:90:34:7B:8A:88:49:28:11:C7
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 018514CF60A14CFCCE0316E2A1E68FAF861B
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/cW-T1uUBUMGho4qQNHuKiEkoEcc.roa
Signing time: Thu 15 Dec 2022 08:03:33 +0000
ROA not before: Thu 15 Dec 2022 08:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 24
45.138.107.0/24 maxlen: 24
45.138.106.0/24 maxlen: 24
2a0e:acc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:cf:60:a1:4c:fc:ce:03:16:e2:a1:e6:8f:af:86:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Dec 15 08:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=716f93d6e50150c1a1a38a90347b8a88492811c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:52:6f:cf:1f:66:6d:b6:8e:30:8e:f2:bf:
24:8a:9e:29:b4:da:d5:b3:30:86:94:40:32:67:74:
72:56:1d:ac:49:11:23:65:c1:50:90:c3:bc:cd:3f:
7f:d6:fb:7f:35:0b:79:89:fd:f5:81:d1:e7:38:a6:
98:cd:68:a3:cd:17:ef:ca:61:6b:9e:07:31:d5:1a:
cf:13:5b:e2:f3:04:c7:56:fb:1d:e7:5b:ab:6c:5b:
c0:c4:7d:52:37:e7:76:f5:be:fe:b1:72:14:f6:ad:
4e:43:b0:72:f5:52:51:66:91:8a:fb:f2:83:ff:b0:
10:66:75:4b:5b:66:0d:46:54:9e:73:f8:76:52:2f:
b7:97:6b:b0:4f:3d:54:8c:d3:f1:2a:8e:d2:1f:f8:
4c:be:b7:d8:d5:49:0b:af:19:b8:9c:37:73:1a:1e:
8f:8e:bb:13:c9:4d:69:bd:3d:23:aa:7d:6d:92:62:
c6:11:95:6a:66:1e:6b:02:c3:a8:6e:91:b9:13:04:
9b:22:36:e8:6f:cf:6a:48:20:55:06:b0:90:dd:48:
4c:bf:38:a0:b6:93:3e:c1:17:17:a8:6a:c2:a1:53:
51:c3:45:e5:95:7f:f7:91:50:8a:7b:8c:bc:94:23:
36:83:51:c4:0a:cb:97:64:6b:c1:6e:5d:fd:5d:11:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:93:D6:E5:01:50:C1:A1:A3:8A:90:34:7B:8A:88:49:28:11:C7
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/cW-T1uUBUMGho4qQNHuKiEkoEcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:ca:eb:6d:c6:2a:f5:e9:50:48:5b:a7:28:31:dd:cf:85:87:
56:36:d9:38:44:cf:43:53:2f:74:00:88:4a:72:db:22:96:ab:
e1:d5:8b:6c:ff:52:65:10:9e:fb:f3:12:18:6e:2c:a7:f3:41:
2b:b4:57:90:66:df:7e:bd:32:56:39:48:bc:ca:dd:5d:06:01:
7b:3e:8c:36:c4:58:ec:5b:a1:82:d0:a5:bc:4f:77:32:13:33:
9c:51:c3:50:f8:96:f2:be:4a:d0:59:9d:60:52:6d:67:f8:44:
1d:56:53:2c:d9:a9:6f:d8:1b:a7:1e:74:c3:fa:59:91:2a:a3:
c2:c0:3e:ec:59:56:b2:61:e5:94:5c:77:df:43:14:b8:18:34:
24:a0:c2:a8:80:86:4e:49:4a:a2:f8:29:59:5d:b2:aa:01:13:
06:be:fb:af:9c:3e:d2:c3:8a:86:5d:af:4a:87:2e:aa:32:53:
89:6c:88:d4:f1:08:5c:38:7d:5e:da:e7:56:25:8f:58:dd:d1:
31:3f:19:e2:5a:b7:75:cf:1a:dd:bb:54:60:4e:b7:e4:bc:d1:
cf:42:86:88:35:1a:f4:e6:c0:4b:21:01:d2:53:9e:8d:38:53:
43:cd:9e:cf:4a:ec:d7:dd:53:8f:a8:11:16:61:2b:60:ae:a9:
42:c1:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:02 2025 by rpki-client