Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UxEHxswoQphOcMWSyZIZPQeNThs.roa
File: UxEHxswoQphOcMWSyZIZPQeNThs.roa (raw, json)
Hash identifier: nW5w1oACu24kXFOTRClky8L5ShUFFxIoVgoUA8pFHeo=
Subject key identifier: 53:11:07:C6:CC:28:42:98:4E:70:C5:92:C9:92:19:3D:07:8D:4E:1B
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01856C4A715F32EC926481D78BBAE08D3813
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UxEHxswoQphOcMWSyZIZPQeNThs.roa
Signing time: Sun 01 Jan 2023 07:44:56 +0000
ROA not before: Sun 01 Jan 2023 07:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 45.156.224.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:71:5f:32:ec:92:64:81:d7:8b:ba:e0:8d:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 07:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=531107c6cc2842984e70c592c992193d078d4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:80:d8:6b:68:51:aa:7e:0b:1a:20:f9:57:
44:ae:8b:1c:f7:6c:02:29:20:34:db:84:32:ca:88:
5b:5a:7a:8d:0d:c9:b7:29:4b:53:2e:0a:5f:f3:c2:
93:42:dc:53:93:b1:7d:f9:1f:c1:15:4a:19:4c:e1:
ce:d5:0f:21:5e:f7:d5:d7:16:20:43:c2:38:31:7b:
48:a8:1b:f4:46:83:b3:b5:8b:21:9b:2f:90:95:de:
1f:16:79:d8:6b:53:32:d5:ed:35:25:c8:f1:fe:4d:
3a:1a:00:12:fa:0c:8a:8a:b4:f3:ed:82:f0:f7:1a:
bc:89:6d:d1:30:d5:3d:14:b2:47:f1:69:6e:62:b3:
3a:ee:b8:f1:84:f5:26:94:4a:e4:fd:a0:b2:24:34:
08:fc:55:e2:76:29:a2:b1:f7:52:81:06:a2:3e:f4:
c8:68:d2:52:68:82:05:62:fc:e3:73:f5:c7:2a:78:
06:ee:77:0f:0c:76:da:a9:2f:ff:95:5b:13:28:b8:
2c:b1:63:98:0f:c4:57:6e:a5:78:52:36:40:bb:e4:
88:65:03:9e:96:c6:53:f0:f0:ba:6a:2b:ca:af:3e:
45:84:4e:ae:c2:16:32:ed:d6:af:1e:68:20:64:e7:
54:42:64:c0:aa:13:af:11:f9:a0:b7:5e:ff:c4:d7:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:07:C6:CC:28:42:98:4E:70:C5:92:C9:92:19:3D:07:8D:4E:1B
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/UxEHxswoQphOcMWSyZIZPQeNThs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.224.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b1:7e:54:36:cb:77:6b:ec:d3:f3:b7:7d:b4:0a:2f:16:24:
8c:ba:99:91:4b:7e:09:72:9a:c1:d9:c3:01:24:b0:b6:e7:4f:
25:fe:28:15:ca:d0:41:eb:7e:97:60:eb:31:bc:4d:5f:82:3e:
a0:01:32:c5:c8:a6:4d:18:7c:dc:fa:69:be:96:1a:12:95:08:
e1:2f:32:8b:16:6f:25:81:97:1c:22:1e:39:b1:63:8e:2d:f6:
da:0c:71:0c:b8:ab:ad:84:b1:a4:d6:e0:d2:58:9a:55:b7:03:
73:de:9d:51:34:ab:34:0c:e2:90:54:6b:c3:16:70:19:a4:0c:
71:1d:dc:84:4a:a6:c1:c9:6b:32:39:aa:29:0e:0f:a2:a7:9a:
13:d8:32:cd:fc:f6:61:56:50:72:12:d4:ec:fa:21:0c:58:2f:
25:d0:d9:d3:b0:9b:15:07:15:cc:f5:1a:68:f3:1a:4c:cf:f1:
b9:ee:b2:e6:b0:57:5e:f3:9e:bf:30:fb:8a:ff:66:fe:16:e5:
ea:4a:f4:d6:cd:3a:59:9b:c3:a4:bd:b1:07:53:86:cc:c9:35:
3d:ca:77:d2:07:a9:4c:76:18:df:89:8a:a8:31:1c:3c:ea:54:
98:6a:12:c6:40:57:d5:a1:9b:6b:c2:63:ff:f2:f7:aa:c8:f9:
3b:5f:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:16 2025 by rpki-client