Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/kR4V35zDPoZGaRCfLIGrjqeiD4c.roa
File: kR4V35zDPoZGaRCfLIGrjqeiD4c.roa (raw, json)
Hash identifier: L0NAb5dWir8EKUz3uyRbP2tvkgGVOov4tc3kzm69k5M=
Subject key identifier: 91:1E:15:DF:9C:C3:3E:86:46:69:10:9F:2C:81:AB:8E:A7:A2:0F:87
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01856D5D0B393D7A770A12A5D1B4A191D050
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/kR4V35zDPoZGaRCfLIGrjqeiD4c.roa
Signing time: Sun 01 Jan 2023 12:44:52 +0000
ROA not before: Sun 01 Jan 2023 12:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199829
IP address blocks: 185.45.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:0b:39:3d:7a:77:0a:12:a5:d1:b4:a1:91:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jan 1 12:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=911e15df9cc33e864669109f2c81ab8ea7a20f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:02:fe:c3:c6:b6:f9:2a:6d:52:88:78:78:
e5:47:2d:71:05:2c:7b:01:c1:1b:08:db:e0:3f:89:
66:e7:c6:01:62:70:a4:e7:fe:16:f7:e9:da:71:47:
ed:12:45:f8:b2:ac:53:fd:9a:d4:65:f7:7e:82:48:
e5:2b:c7:41:a5:33:91:b8:e2:ce:55:cc:32:eb:3e:
f6:d5:4e:0c:66:c6:ab:aa:68:75:05:db:fc:06:5f:
a4:c5:87:55:06:61:72:1a:12:e9:cf:51:bb:8d:f7:
5c:d5:3e:ce:23:95:ef:2d:cd:4b:38:be:25:cf:e0:
dd:eb:be:4b:5a:72:a6:8f:7d:5a:f4:ab:5a:29:bf:
07:22:23:67:90:0b:37:4c:66:c0:ea:e7:5c:f5:44:
fb:51:f1:eb:f8:8b:14:0b:94:c4:1b:ba:d7:b1:42:
a7:0b:b6:10:75:0f:00:55:8b:07:49:2f:40:1a:c2:
48:24:30:2d:84:fd:83:d3:74:a1:52:3e:56:5c:06:
02:0d:3c:86:16:30:a0:6b:06:54:25:3e:a0:f7:d3:
ba:2d:d7:14:73:c7:32:10:26:e2:c9:2c:c4:65:53:
4e:b9:6e:ff:d3:ee:d8:41:06:7c:56:4b:c6:5d:0e:
29:5e:0d:a3:3a:fb:22:ff:8e:54:08:da:1b:39:62:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:15:DF:9C:C3:3E:86:46:69:10:9F:2C:81:AB:8E:A7:A2:0F:87
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/kR4V35zDPoZGaRCfLIGrjqeiD4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:7a:b8:09:ea:40:25:32:4a:88:8e:ad:f0:e5:ad:19:ff:43:
c4:46:8c:e1:bb:ef:3c:db:4d:39:47:19:ff:ff:a7:67:84:7d:
36:c1:2b:fd:51:28:11:c4:49:35:9d:3b:77:4f:79:d2:b8:62:
bf:81:70:43:e2:cd:8d:74:05:32:1f:dd:51:98:40:84:5c:76:
82:68:40:65:89:74:e8:ff:1e:a6:24:bf:90:9f:85:1e:29:f1:
2d:fa:db:52:20:aa:55:7b:a2:06:5d:ee:c4:b2:f2:4a:b5:6a:
f1:e9:d7:11:df:f1:66:9f:91:92:b6:82:38:82:2e:c1:2c:0f:
3a:f1:a3:e3:e2:f2:20:d4:66:84:cd:51:32:5e:62:ef:f3:52:
e4:6e:52:d2:7a:70:c1:d4:a8:f7:22:39:9d:c5:26:13:2d:a8:
c6:18:66:9c:34:1e:98:7d:57:2d:b2:e3:5a:5b:c1:0f:dd:13:
a5:b1:fb:9e:a7:1f:c0:54:68:da:be:34:be:ae:61:f9:40:dc:
75:48:b1:bf:b4:f9:74:c7:a5:55:18:39:a8:5e:2d:e9:ae:34:
b1:25:6e:d8:79:6f:a3:69:0f:1f:8c:1d:6f:a3:2a:ae:6f:6f:
a1:59:62:c5:11:a4:94:c2:bf:89:a6:63:f0:d0:ea:67:10:48:
66:a5:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:58 2025 by rpki-client