Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/B7jbUV0_4Pw2ur2BlCBf3dA_v_w.roa
File: B7jbUV0_4Pw2ur2BlCBf3dA_v_w.roa (raw, json)
Hash identifier: uJOydgB6TsugrHVyqubHNI9GhpPsLOZLMUGRcnuwL1Y=
Subject key identifier: 07:B8:DB:51:5D:3F:E0:FC:36:BA:BD:81:94:20:5F:DD:D0:3F:BF:FC
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 018963E3DA7A10033DDBBFDA855153F196B2
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/B7jbUV0_4Pw2ur2BlCBf3dA_v_w.roa
Signing time: Mon 17 Jul 2023 12:47:04 +0000
ROA not before: Mon 17 Jul 2023 12:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204572
IP address blocks: 45.143.124.0/22 maxlen: 22
2a0e:e3c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:e3:da:7a:10:03:3d:db:bf:da:85:51:53:f1:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Jul 17 12:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b8db515d3fe0fc36babd8194205fddd03fbffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:9a:a5:ea:c3:e9:e8:82:27:be:9b:17:7e:
64:a4:b8:f5:82:c6:ca:28:64:d0:af:79:53:4c:ae:
b5:f9:e2:7b:fb:72:ff:33:67:9e:d8:fc:44:8c:8c:
fb:3a:34:bd:05:84:19:ce:99:5a:7c:bd:8b:d7:b2:
91:84:ec:14:b4:f1:44:d2:20:0a:1d:9f:da:d8:13:
c0:a5:1f:90:7d:d0:36:d0:82:a7:c3:89:ca:cc:39:
57:1b:db:97:02:2a:0f:ec:4a:2f:9c:c1:d1:49:0a:
dd:c5:4d:19:07:95:8a:11:a5:d4:70:44:af:9e:6d:
e9:82:d1:c9:aa:77:0f:44:68:e5:7a:12:22:ba:6c:
d5:3f:21:cd:04:36:b1:57:57:a6:a9:38:2a:be:29:
65:f6:be:9e:2d:ba:9b:fb:b6:2b:56:92:6b:ba:16:
96:07:c6:b0:32:1b:ac:c2:84:9a:13:08:85:db:9f:
d4:f1:9d:66:19:0d:0f:d9:ab:3c:aa:5d:42:01:ca:
38:e2:1a:8b:5a:e7:de:7c:38:65:35:f4:d7:88:e6:
fe:f6:d9:a8:90:90:f2:a2:a8:a9:30:e5:cd:b7:b1:
c8:54:76:1f:31:a7:95:d7:22:d7:7e:2e:4f:b1:65:
26:aa:02:32:e1:3f:38:e3:91:d2:b2:16:42:a3:ba:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:DB:51:5D:3F:E0:FC:36:BA:BD:81:94:20:5F:DD:D0:3F:BF:FC
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/B7jbUV0_4Pw2ur2BlCBf3dA_v_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.124.0/22
IPv6:
2a0e:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:c1:9d:bf:b8:93:fd:2d:5c:04:bb:4b:5e:5b:a0:32:49:e7:
f9:8c:ed:da:f1:9a:75:45:0e:fd:7f:e2:32:df:c1:87:36:b9:
1d:48:ef:d2:43:0e:1a:61:8c:66:6b:46:8f:89:e0:68:be:19:
9c:ad:a3:57:a2:95:50:73:57:ba:37:04:e8:b4:f7:ae:62:7c:
bd:89:e7:3b:dc:51:56:9f:ec:c5:76:c8:4f:61:b9:96:48:0d:
c3:f5:0c:4f:64:a9:40:68:38:36:f2:d3:c2:ec:96:45:2b:6a:
15:20:61:63:29:c7:b8:46:07:98:3b:21:c2:9d:18:f4:bd:15:
9a:ab:61:67:be:aa:d8:73:f1:bf:1d:9e:e7:29:1f:7c:3a:6b:
2f:6b:1d:61:ff:af:48:24:b8:d5:21:ac:07:71:3d:0b:cc:5e:
21:04:64:fd:ee:0e:fb:b5:85:44:ff:5b:2d:a1:19:6b:3c:31:
2e:ed:3e:bc:4d:41:6d:23:ce:3a:51:a3:6a:e8:82:e5:19:3d:
d3:7f:ba:c7:ef:aa:71:bb:4f:5e:9d:04:0b:9d:b6:b2:d3:10:
dd:20:ba:a3:84:8d:92:dc:af:d6:3e:3f:9b:44:0e:ab:a4:e8:
dc:16:77:5f:90:43:91:12:32:dd:ef:de:72:b4:f4:37:8b:a0:
77:b2:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:05 2025 by rpki-client