Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa
File: XwGe7LEreMsLapNQPJgTHk76GBQ.roa (raw, json)
Hash identifier: qTKFKgG4Ptd5jp+WpCeCSYWvhdLV9SOfDDZoPILLTY8=
Subject key identifier: 5F:01:9E:EC:B1:2B:78:CB:0B:6A:93:50:3C:98:13:1E:4E:FA:18:14
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 0727BCBF
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa
Signing time: Thu 30 Jun 2022 15:35:02 +0000
ROA not before: Thu 30 Jun 2022 15:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34177
IP address blocks: 45.85.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120044735 (0x727bcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jun 30 15:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f019eecb12b78cb0b6a93503c98131e4efa1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:8a:16:96:e9:80:8b:85:10:fe:dd:68:e4:
61:fa:5c:64:18:fc:7c:93:4d:dd:11:59:42:28:2b:
4d:68:a6:20:20:eb:83:6c:d8:a1:26:43:57:5f:7a:
92:c0:8e:25:19:1f:37:63:96:43:ab:3e:cf:37:d9:
6e:b4:71:a9:54:44:cc:2a:d8:50:21:35:6d:ff:7e:
39:78:87:b2:16:1e:8b:62:ca:bf:63:11:9b:4e:3a:
da:ab:a4:0d:93:70:c6:12:41:ae:ac:0c:8a:ed:9f:
6e:d9:90:80:cc:20:8a:d5:e0:ab:be:a4:3e:fa:39:
4d:6a:f8:41:5d:6f:c9:d0:93:46:27:35:bc:38:11:
99:23:38:6b:41:47:ae:ad:67:5f:2e:6a:48:a1:d0:
05:62:94:42:15:e2:8b:c2:54:8f:f3:a0:7d:4a:37:
5c:d9:95:f5:4b:c1:16:89:7f:fe:65:b8:eb:25:0e:
79:54:03:1d:76:4a:58:6c:19:c3:48:10:99:1a:a8:
54:49:0b:d9:5c:6d:55:d5:96:11:79:22:6a:b9:2d:
2f:1e:18:a9:c8:8d:84:a5:4f:05:20:7b:75:bf:fe:
ba:1d:0f:04:7b:a6:ed:87:f2:25:24:c3:ec:69:8e:
3b:28:36:0e:e8:f3:64:af:9d:69:a5:06:4a:b5:ca:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:9E:EC:B1:2B:78:CB:0B:6A:93:50:3C:98:13:1E:4E:FA:18:14
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/XwGe7LEreMsLapNQPJgTHk76GBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ce:c1:5f:23:7a:68:c6:1c:b5:b3:70:15:36:7d:a0:cb:ce:
1e:ed:ce:5d:ae:e4:08:84:78:0c:76:5b:cd:bb:e9:dd:68:cd:
ab:20:45:67:07:6a:f0:b2:67:ac:2e:59:ed:87:b2:60:0d:de:
ec:49:e7:66:9c:f3:7f:62:cd:ba:7c:b0:67:b9:b8:47:33:23:
65:81:56:cd:91:f7:a2:a8:cb:fe:87:d8:9f:21:30:50:99:e0:
5d:f9:ee:a8:9a:21:8b:a4:11:61:f6:e8:4e:01:35:c4:f9:9d:
b0:3e:c8:65:e9:f1:45:ef:67:9a:f3:5e:fd:88:ec:3b:c7:c6:
83:36:dd:fa:b0:ef:1b:e0:5d:37:88:b3:ae:1d:80:5f:0d:eb:
9d:2f:36:ec:43:98:ef:06:18:86:35:f0:5c:a3:c0:b1:6d:65:
f7:2f:c8:18:75:40:be:9c:9b:d1:13:6c:07:95:90:b7:3b:4c:
c2:f1:69:27:9a:57:c8:a2:35:d4:1d:bf:24:59:0e:8f:f7:81:
1c:c3:07:d0:e5:7e:98:16:79:92:e7:a5:65:86:bc:da:62:f3:
c7:9c:c6:4f:b8:de:46:86:ae:ed:ed:8f:00:54:24:61:b0:6e:
87:e0:aa:f2:9a:59:0d:77:a9:57:c7:97:93:84:12:a8:17:52:
19:25:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:03 2025 by rpki-client