Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/4-KEFiaC0S41RrTYDVy5DG1qo9M.roa
File: 4-KEFiaC0S41RrTYDVy5DG1qo9M.roa (raw, json)
Hash identifier: uOlh+UC3dabXoNNT1xyDnoPyZFjURANDiicY/8oRI64=
Subject key identifier: E3:E2:84:16:26:82:D1:2E:35:46:B4:D8:0D:5C:B9:0C:6D:6A:A3:D3
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 018570E759FCF10099639F40B5F2D116BCD2
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/4-KEFiaC0S41RrTYDVy5DG1qo9M.roa
Signing time: Mon 02 Jan 2023 05:14:48 +0000
ROA not before: Mon 02 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44938
IP address blocks: 45.14.129.0/24 maxlen: 24
45.14.130.0/24 maxlen: 24
45.14.131.0/24 maxlen: 24
45.14.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:59:fc:f1:00:99:63:9f:40:b5:f2:d1:16:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jan 2 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3e284162682d12e3546b4d80d5cb90c6d6aa3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:25:cd:b6:3a:a8:99:a3:46:d6:d3:e9:06:
44:c1:98:61:2b:f3:4a:bb:62:f0:60:f7:d2:22:11:
6a:9b:21:ae:d4:35:8c:10:0c:2c:81:cf:65:24:56:
14:78:a7:07:d7:8c:f6:d1:22:71:bb:17:e6:32:ec:
61:f3:cd:04:32:38:f4:95:97:f2:1a:74:dd:3d:b7:
01:69:dd:cd:fe:fc:e1:c0:36:23:a4:67:5c:f3:35:
6b:8d:f7:a9:2c:e5:65:90:65:be:d9:d9:ce:2f:92:
f6:f9:6c:36:48:49:c1:9d:b4:c0:ef:c5:8b:e8:ce:
30:6b:c3:e2:12:33:34:ae:6f:14:4f:d3:85:71:61:
77:32:80:6a:eb:25:c2:f5:b9:cb:94:d5:94:90:ca:
ac:4f:31:ed:37:5b:ba:93:fe:c1:8d:2e:10:e4:2b:
cb:15:77:6d:0e:08:ab:1d:21:3b:80:47:b7:25:f4:
70:c7:52:17:12:06:43:ed:93:c2:19:6c:3d:a7:b3:
61:1a:4b:c9:00:cd:a7:1f:50:29:99:80:b7:76:0d:
39:f3:24:11:28:eb:25:b5:8f:f0:a2:ae:96:9d:78:
a9:d1:2e:13:d0:31:5e:f7:d6:a2:3c:af:b7:be:c6:
c0:9d:31:cc:71:67:d8:df:a2:38:e0:94:9f:27:32:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:84:16:26:82:D1:2E:35:46:B4:D8:0D:5C:B9:0C:6D:6A:A3:D3
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/4-KEFiaC0S41RrTYDVy5DG1qo9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:9f:98:a9:e4:3a:29:02:7d:02:bc:bb:b7:52:c6:9f:7b:e9:
2a:28:52:a9:83:01:5b:e4:43:e7:54:83:9d:29:43:52:0f:c3:
ea:e2:f1:08:85:83:4a:3c:59:d4:5f:03:71:ee:c1:95:0b:c0:
4c:33:02:dd:2e:e9:d2:26:05:c3:13:72:d9:3f:83:fc:29:e3:
86:a0:e1:e2:b4:90:9a:94:58:2e:03:62:9b:f6:4d:96:a6:84:
8d:21:a5:12:8e:03:28:a7:3c:47:45:37:04:9e:80:22:eb:21:
4d:1f:a0:08:2e:9d:41:7f:7b:33:66:f7:39:13:98:5b:a2:84:
c4:6a:bc:81:f5:aa:61:70:d9:24:c8:c3:1d:65:35:e4:ec:f7:
19:86:c3:8b:9e:9f:db:60:38:6f:71:93:9e:34:d0:3d:c3:8a:
28:ef:38:9d:d3:60:2f:eb:53:81:76:f7:76:10:a8:90:bc:3b:
2c:1c:b1:a3:e6:69:51:7e:4c:cd:7d:4b:2b:27:1e:2b:2b:0f:
77:29:c7:91:f3:58:cf:75:f2:61:57:7b:96:24:e0:8b:3e:b6:
ec:0a:dc:96:26:54:af:12:c4:cc:ef:c8:f3:9e:53:44:e4:60:
dc:f4:d9:34:9c:89:c0:3c:e9:02:e9:af:24:01:8f:09:75:8c:
49:ff:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:21 2025 by rpki-client