Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/4Q5NELUWgKSpuMaPX5s0iqc3t-o.roa
File: 4Q5NELUWgKSpuMaPX5s0iqc3t-o.roa (raw, json)
Hash identifier: QhyXiVoy3BqrP2fvDxtB2Kooxv2DPZeA7n25DJ/5JiU=
Subject key identifier: E1:0E:4D:10:B5:16:80:A4:A9:B8:C6:8F:5F:9B:34:8A:A7:37:B7:EA
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 0729953F
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/4Q5NELUWgKSpuMaPX5s0iqc3t-o.roa
Signing time: Sat 01 Jan 2022 16:05:26 +0000
ROA not before: Sat 01 Jan 2022 16:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 45.92.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120165695 (0x729953f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Jan 1 16:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e10e4d10b51680a4a9b8c68f5f9b348aa737b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:37:ef:97:3b:96:59:5f:2f:8d:64:1b:dc:
48:76:0c:fc:6e:67:c6:72:55:3c:5c:5d:ad:be:d8:
46:3c:34:2d:57:7d:15:95:90:3f:eb:0f:da:49:31:
09:84:32:ce:70:f3:2c:b9:9c:7f:7e:37:ad:0e:83:
41:3b:4d:cd:4f:e8:7b:21:75:2a:fe:c9:26:31:98:
47:bc:e6:d4:36:7c:93:a8:81:67:59:1d:d1:f9:66:
7c:9f:49:af:48:3b:1e:06:ba:e2:47:2c:3a:86:fd:
ba:b3:c9:19:bc:5e:05:b2:1d:0e:9c:bc:7f:7f:9c:
50:e9:62:66:a0:3c:23:00:b8:e7:97:0a:de:ba:da:
7f:7b:34:ee:57:a5:8f:f9:bd:f4:ea:13:bf:9e:37:
99:e9:3b:27:d1:97:17:e5:34:e9:37:8c:c7:fe:52:
1b:04:7a:88:ac:04:30:dc:84:f7:3f:dc:92:71:db:
d2:cf:50:04:3d:af:0c:ae:c8:40:40:f1:9d:2e:f0:
29:c7:50:01:d9:e6:89:51:fc:d0:74:77:65:8b:70:
dc:5f:7d:53:b5:04:f3:92:48:7d:b9:16:5f:3a:3d:
64:de:77:50:7c:37:61:56:91:88:51:c9:cd:54:89:
4f:52:f6:77:67:a5:ac:f0:c8:c1:98:a3:0c:4d:7e:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:4D:10:B5:16:80:A4:A9:B8:C6:8F:5F:9B:34:8A:A7:37:B7:EA
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/4Q5NELUWgKSpuMaPX5s0iqc3t-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f4:40:b0:1c:39:01:ea:a6:80:4c:3b:64:87:ef:f5:1d:36:
31:98:ef:3c:1a:92:fe:4e:6b:21:40:75:66:50:8f:08:7a:0d:
1b:3a:76:3b:1e:76:4e:4c:bf:8b:b9:35:72:6a:6c:24:be:cb:
c9:03:82:00:ba:23:2e:ce:21:b7:da:d0:e8:02:47:e1:95:20:
12:ef:5c:89:cc:a3:35:80:d5:da:e2:2a:ea:61:72:77:75:6f:
93:be:72:ac:6e:99:90:3c:5c:81:68:d1:11:c6:27:54:e5:7e:
7d:b4:42:b1:97:97:17:1c:91:a4:29:93:d9:46:8c:cd:b3:ee:
92:52:e6:59:1f:f1:73:68:d0:90:c9:88:cd:9e:d1:1c:5d:69:
fa:c7:64:3d:12:26:c2:7d:74:55:88:ff:8e:3c:71:0b:7c:99:
06:26:80:2f:68:01:ac:70:e6:09:c9:f8:d0:8e:1c:bc:0d:35:
82:3c:32:2e:d7:01:c1:38:1b:bb:9f:10:cd:bd:f3:4a:2d:5b:
00:6f:19:f0:41:b1:b1:f3:fc:c4:37:ac:26:cc:34:63:3a:a8:
22:72:56:29:96:b9:97:47:6b:20:91:55:48:58:3f:ca:10:e8:
09:3f:36:75:17:89:76:92:48:49:71:36:2c:ac:50:40:bf:13:
e2:6a:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client