Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa
File: dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa (raw, json)
Hash identifier: lBw2lnvzrCNohL2bCSlUm6I7f/meTmdQTlRjL3nPmbs=
Subject key identifier: 76:3F:69:A9:D0:9C:4D:4F:0E:1B:18:1C:08:4C:6A:AE:95:7B:56:AE
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 05785130
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa
Signing time: Sat 01 Jan 2022 07:56:54 +0000
ROA not before: Sat 01 Jan 2022 07:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8218
IP address blocks: 45.85.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91771184 (0x5785130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jan 1 07:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=763f69a9d09c4d4f0e1b181c084c6aae957b56ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:54:2c:fa:bd:e5:ad:2d:32:3d:78:4f:47:
e0:21:43:30:df:0f:2a:ef:cc:69:cb:3e:b8:fb:15:
3e:16:61:e0:fb:cf:b4:fc:3d:2b:9d:af:2d:21:3d:
84:f3:ba:68:5d:06:88:53:9f:7b:a7:d9:f0:c4:34:
2d:d8:17:cd:3b:ee:89:4a:4e:1b:43:ed:da:03:69:
73:c8:45:cc:48:c1:61:4c:f6:66:47:13:ca:cb:e2:
97:b7:d5:5d:f3:9c:07:c7:1c:1d:6e:cd:c7:a0:04:
e2:8c:0a:24:bf:0e:b0:47:6d:90:f9:c1:7b:c9:58:
5f:9d:bb:24:41:80:33:51:39:9b:cc:29:96:44:f4:
da:17:64:71:b0:4c:89:3a:51:fd:97:99:7a:2a:83:
fc:77:68:e5:84:d6:06:6c:4d:24:c7:2e:f1:1e:71:
52:78:5f:b3:01:76:b6:e0:0b:e5:4d:96:41:95:38:
91:30:e9:f4:b1:6e:7f:15:04:63:40:b5:ce:41:4d:
ac:60:84:0d:7f:bb:a3:04:fc:dd:d3:95:45:d0:03:
62:bf:f4:b0:e5:42:91:f5:14:bf:6f:a4:c3:55:dd:
b6:a5:61:9a:b0:41:78:0c:0c:db:07:7d:a2:3e:3f:
48:9b:f9:17:da:c5:51:ba:f0:b5:7f:8a:5a:a3:65:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:69:A9:D0:9C:4D:4F:0E:1B:18:1C:08:4C:6A:AE:95:7B:56:AE
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.54.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bf:16:09:da:bf:73:3a:54:d2:a8:14:d8:84:71:ad:ea:4e:
84:37:f4:a3:a3:a7:3f:cd:e2:52:8c:7d:a8:9e:b1:49:aa:30:
67:2e:4b:5d:db:2a:cb:ba:af:ef:8b:23:29:76:a5:f4:a7:4b:
9a:ac:5e:32:e9:e8:1f:9f:82:fe:8b:8a:13:1b:2d:9f:29:0b:
23:02:d8:8c:c0:da:de:09:cf:20:9e:e8:0d:d9:1e:bb:a3:31:
ab:a9:26:01:61:87:70:26:68:bf:8b:90:46:54:78:5a:30:1c:
dd:2e:58:18:d8:f8:d4:88:01:54:45:13:ea:2a:48:81:78:52:
74:d7:84:ba:d1:3a:e6:68:c7:e6:9a:a9:10:f2:a1:44:88:00:
7f:53:52:24:15:f5:7e:1d:87:e5:45:ca:00:9a:5d:14:83:62:
13:63:ae:3a:60:fa:69:ef:59:12:a8:21:eb:62:77:72:f0:f0:
8f:d1:a4:d6:00:b7:0e:7f:70:f7:90:38:38:27:5c:37:59:8b:
92:4f:3f:1d:a0:d7:af:f4:68:4f:34:2d:5e:45:59:8b:69:4b:
51:79:1a:b5:58:2a:ed:80:e3:19:f0:df:56:12:bd:75:01:0d:
1f:a6:36:fb:ee:07:62:81:6c:74:d2:df:af:a7:b2:d6:38:20:
79:d8:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:18 2025 by rpki-client