Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/ajxXq9tTOtFVb_CSNGytkjy42GA.roa
File: ajxXq9tTOtFVb_CSNGytkjy42GA.roa (raw, json)
Hash identifier: T24yTtnmUGY7/lDLh0AvTvufQoW24m+imGhT83pRSD4=
Subject key identifier: 6A:3C:57:AB:DB:53:3A:D1:55:6F:F0:92:34:6C:AD:92:3C:B8:D8:60
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 052A9707
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/ajxXq9tTOtFVb_CSNGytkjy42GA.roa
Signing time: Sat 01 Jan 2022 11:53:47 +0000
ROA not before: Sat 01 Jan 2022 11:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50474
IP address blocks: 45.143.168.0/24 maxlen: 24
45.143.169.0/24 maxlen: 24
45.143.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86677255 (0x52a9707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jan 1 11:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a3c57abdb533ad1556ff092346cad923cb8d860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:6b:75:3b:6b:5d:01:a2:da:f8:d6:d4:67:
5d:cb:68:ae:f0:33:a7:52:e6:cf:fe:b8:a9:0e:dc:
b5:96:f3:ee:65:b3:38:b8:a7:99:ca:7a:25:23:9a:
fe:47:84:7c:eb:7d:5f:1f:8f:2c:2b:a6:04:15:07:
d0:6c:f3:7c:e1:fb:e6:ab:84:d9:23:e8:ae:6a:bd:
25:5d:74:52:f2:d7:be:cd:39:63:36:7b:10:8a:90:
92:bc:5e:bb:1c:01:bd:81:18:e9:e7:57:5f:31:92:
7a:a9:29:7a:63:26:f8:dd:90:33:61:8c:52:65:bb:
e4:fc:3c:15:a0:bd:c9:2c:1e:d5:4c:a4:2b:af:e1:
4e:e0:43:1f:44:73:8f:27:b6:9d:19:f8:e9:73:8f:
df:74:00:17:de:e7:64:0f:28:5d:0c:de:ff:92:a6:
12:4b:8e:e9:1d:79:b0:1f:6b:f4:ca:c8:f1:e7:8a:
03:50:b1:ae:7b:be:a3:bc:51:d4:cf:5e:b7:51:29:
2f:a6:6a:f6:10:9f:b8:55:30:7c:dd:99:d3:3a:53:
c2:ec:4a:a4:33:b0:72:ef:4c:aa:b6:fb:88:90:7c:
2e:6d:97:fb:9e:98:e0:ed:00:d6:25:fb:e8:bf:f0:
32:43:34:d9:73:c9:53:9b:b7:28:b4:68:7d:13:69:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:57:AB:DB:53:3A:D1:55:6F:F0:92:34:6C:AD:92:3C:B8:D8:60
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/ajxXq9tTOtFVb_CSNGytkjy42GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.168.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d4:75:14:92:91:74:ad:cd:6e:54:ef:8a:d5:cb:27:97:8c:
7a:f0:d9:7a:dd:50:ed:f1:04:c4:08:6e:b0:39:45:b0:60:82:
33:d3:df:5f:27:fa:79:a0:51:69:fa:4c:b2:8b:83:fe:2d:20:
34:04:dd:05:44:25:98:a3:b6:33:00:73:49:eb:3d:92:76:69:
07:9b:61:69:0d:fe:76:40:b1:18:fd:17:b8:16:c4:65:5f:bf:
29:5e:6c:6c:35:65:db:99:b2:31:df:09:dc:cc:2f:d3:ad:b1:
f2:d9:b1:15:9c:2e:ca:27:65:6a:88:e8:9e:78:99:2b:83:56:
61:1c:2d:f1:8e:f0:6a:5b:f5:ca:d5:a8:14:74:3e:89:04:bb:
42:96:36:eb:f1:80:50:cc:0a:76:9c:ae:e5:ae:26:0b:9c:e1:
51:34:86:af:30:52:4f:45:58:06:c9:33:8a:20:82:c4:ad:76:
db:72:b0:bb:8b:ab:85:38:2a:42:8c:53:f0:3f:5a:93:4f:92:
ac:db:72:93:7c:00:f6:32:73:ad:59:61:34:ac:51:71:30:09:
93:d8:18:92:85:c7:0a:d5:40:23:c5:0f:6b:e6:ec:77:12:19:
e7:e2:af:a5:0b:16:1d:71:9d:81:b9:2d:b4:93:e0:90:1b:a3:
d6:4d:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:32 2025 by rpki-client