Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ldaJyohGF6E4CsOtqaRlKz0OFtM.roa
File: ldaJyohGF6E4CsOtqaRlKz0OFtM.roa (raw, json)
Hash identifier: UHjpDe2waYVAoWds1rZl08xYNZ1c5sB2/hwbat4No4k=
Subject key identifier: 95:D6:89:CA:88:46:17:A1:38:0A:C3:AD:A9:A4:65:2B:3D:0E:16:D3
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0186315F82EC6A6DEC06DB506A9BAE734F57
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ldaJyohGF6E4CsOtqaRlKz0OFtM.roa
Signing time: Wed 08 Feb 2023 14:13:08 +0000
ROA not before: Wed 08 Feb 2023 14:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207889
IP address blocks: 45.142.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:31:5f:82:ec:6a:6d:ec:06:db:50:6a:9b:ae:73:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Feb 8 14:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d689ca884617a1380ac3ada9a4652b3d0e16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:4b:6e:eb:2d:33:fb:5b:29:2d:e3:35:e9:
04:29:74:9c:70:6c:80:bf:e5:87:77:a8:ad:77:de:
a8:fc:a1:91:4a:cc:f5:f3:15:7d:ae:51:9e:96:cb:
99:33:1d:21:11:60:45:85:69:25:54:f7:57:44:9b:
9e:27:5e:e8:fb:b6:8e:6e:62:f7:8e:dc:f7:44:ec:
55:ed:14:09:6d:35:51:a0:62:b3:2b:54:42:89:f4:
bc:7e:ac:47:22:63:7b:ab:0d:4a:82:63:5d:f4:16:
cc:9b:4d:e9:24:1c:6f:2c:fb:a8:15:42:0b:e5:d9:
06:06:c8:02:a2:54:29:a2:02:57:35:38:66:e7:9d:
57:db:dc:7e:2d:d5:b7:e5:1e:3d:84:c9:17:3b:17:
7d:82:04:b2:f9:96:df:7f:cf:64:ac:38:92:e0:e6:
99:d0:85:a8:af:10:9e:8b:7a:ce:64:20:8c:ca:ad:
3e:4d:6f:a5:18:96:6c:3a:91:72:bf:6d:2d:bb:36:
92:97:e0:94:64:21:c9:37:b7:78:98:99:0d:b4:b1:
a2:ef:64:35:2e:e4:54:88:82:d2:b1:eb:5d:d7:7b:
53:a2:1a:73:d3:bc:fd:cf:27:ef:47:6e:9e:34:d7:
8d:3c:f8:06:20:cd:e4:36:50:19:56:49:d2:09:7a:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:89:CA:88:46:17:A1:38:0A:C3:AD:A9:A4:65:2B:3D:0E:16:D3
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ldaJyohGF6E4CsOtqaRlKz0OFtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e1:4f:c2:af:f5:c6:cf:ca:e1:7d:48:90:5f:03:78:a1:e8:
85:07:c4:db:e7:e0:84:64:51:04:8f:4c:3a:38:83:e2:ac:63:
2e:1b:e2:ff:e5:5f:92:e0:e4:8e:00:79:5d:98:7d:6b:58:33:
7d:63:12:bf:96:87:c9:a0:8f:ef:60:fb:96:ab:0f:79:2e:1f:
cb:2a:5b:3c:a1:7c:a6:6b:17:03:3f:53:a7:24:09:39:a2:0f:
43:81:b4:db:ee:4b:58:3c:9b:0e:0a:17:f1:eb:88:1c:a4:f8:
5e:d1:c8:e8:08:09:f8:47:74:d4:87:af:25:02:b8:cd:e0:20:
0e:b1:9d:83:f6:d0:49:47:86:53:34:55:c0:a2:74:18:7d:3e:
f4:56:ac:7e:e2:5d:74:24:3a:88:fd:05:fe:79:da:31:ea:03:
1d:4c:94:d5:08:5b:aa:4d:cf:57:77:54:c6:4f:09:e5:b3:41:
01:4b:ee:12:e5:19:99:e6:6e:89:33:f7:f1:57:48:f8:5e:2a:
b6:47:31:2e:9e:6e:2a:55:9b:99:47:63:22:1f:d9:08:4f:67:
7e:ea:22:04:b4:7c:30:af:67:c7:3e:e6:7c:51:b9:28:bd:f7:
08:f7:70:46:aa:8e:bb:a1:44:4c:b6:5d:ce:95:c3:ee:6a:50:
31:13:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:28:25 2025 by rpki-client