Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I5qEUBmgiUFO4Q0j-tDbOb2hWuc.roa
File: I5qEUBmgiUFO4Q0j-tDbOb2hWuc.roa (raw, json)
Hash identifier: 2m/BbjTqb8sC8mDY7NbpTAITgneVDVK+OsxG4P00bIQ=
Subject key identifier: 23:9A:84:50:19:A0:89:41:4E:E1:0D:23:FA:D0:DB:39:BD:A1:5A:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 025626EB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I5qEUBmgiUFO4Q0j-tDbOb2hWuc.roa
Signing time: Mon 14 Mar 2022 13:32:03 +0000
ROA not before: Mon 14 Mar 2022 13:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 45.157.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39200491 (0x25626eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 14 13:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=239a845019a089414ee10d23fad0db39bda15ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:2a:8b:8f:d4:33:ba:04:06:f6:ce:ff:6c:
be:d4:5e:c9:77:f1:6d:79:99:a6:6e:bd:22:5d:70:
87:7a:bd:74:c4:52:01:c9:e2:3d:6f:7c:27:83:82:
bb:bd:01:41:7e:66:17:a6:33:52:32:44:74:c0:e0:
13:da:e6:85:5c:c7:40:1d:5f:4f:02:f6:26:84:5f:
25:6c:93:5e:4b:fb:e4:a8:b5:f8:8f:d1:14:91:d9:
38:50:8d:a1:44:d1:12:d4:ad:94:01:92:c2:95:3b:
21:c4:82:c7:48:5c:65:3c:2a:5c:24:b8:c3:67:c1:
29:8b:8b:e6:68:72:6a:c2:50:48:fa:5d:0c:0e:7b:
98:5e:fb:d0:8b:e7:b4:7d:37:ff:0f:3e:d5:28:d9:
0e:8a:6a:9b:da:f0:ae:12:b0:47:ba:f4:29:48:2d:
36:ff:41:3b:5e:06:65:a7:31:67:70:23:d1:34:24:
4b:41:45:b1:38:b7:af:96:23:c1:ca:1c:ab:fa:bd:
5d:60:65:5c:76:ed:10:b6:e0:8c:ad:51:b3:57:7f:
ab:85:0f:d8:a1:e2:35:fb:8d:6c:9b:4b:52:ca:2c:
ad:64:9d:17:1e:9b:a0:82:92:0a:a9:ad:8c:5f:e6:
8e:7c:74:d4:23:bb:22:6a:f1:0d:14:cd:7b:4e:86:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:84:50:19:A0:89:41:4E:E1:0D:23:FA:D0:DB:39:BD:A1:5A:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I5qEUBmgiUFO4Q0j-tDbOb2hWuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:72:be:db:7e:2a:22:20:bb:44:3b:2f:fc:41:61:16:eb:76:
5f:e1:f3:97:5f:59:c5:f5:de:a3:e3:85:85:45:9b:db:05:2c:
01:83:3b:74:1d:3c:21:b2:a8:20:8b:1b:ea:e7:8f:95:61:c7:
2f:a6:78:5d:2e:bc:79:a6:8a:14:ff:72:61:d6:31:2d:72:01:
8e:94:87:85:44:ed:68:aa:68:c6:f6:39:ba:99:4f:f3:6c:ee:
d6:a1:b4:e3:86:45:b2:a5:d7:b3:b7:21:5a:9a:4d:dc:82:8c:
f1:20:a3:63:c8:8a:ac:2b:65:e0:4f:00:f2:ca:92:8f:30:3e:
54:05:73:08:d0:8e:36:b7:3e:72:3f:5b:04:36:a4:bb:28:9b:
f9:de:db:3c:5c:43:1f:e3:c0:c0:8c:27:a4:e2:09:ce:88:e1:
b1:41:89:c4:e5:18:60:b0:52:c7:f7:94:76:bc:fd:39:d5:85:
b1:86:38:18:2a:fb:90:c2:c8:d5:94:4c:a7:94:e8:3c:65:56:
f9:d4:9c:ca:41:fe:7e:d6:dd:e7:cb:8c:80:ca:30:9d:f4:a9:
33:25:50:d7:29:26:01:00:30:37:ba:e6:7a:48:88:6e:64:1b:
68:d6:27:0c:c9:25:74:03:cd:3a:00:ab:3d:73:4f:72:46:ef:
ec:d1:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:30:21 2025 by rpki-client