Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/uGcUWq2i_8sXxTGidg3BG-WqnfQ.roa
File: uGcUWq2i_8sXxTGidg3BG-WqnfQ.roa (raw, json)
Hash identifier: Usqg6TYtYrZCqBMgXpynUBIt+QOUmIivyssktQwqVHI=
Subject key identifier: B8:67:14:5A:AD:A2:FF:CB:17:C5:31:A2:76:0D:C1:1B:E5:AA:9D:F4
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01856DCAC453796EFAAB0A47F546EF15B23B
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/uGcUWq2i_8sXxTGidg3BG-WqnfQ.roa
Signing time: Sun 01 Jan 2023 14:44:43 +0000
ROA not before: Sun 01 Jan 2023 14:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207790
IP address blocks: 45.129.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:c4:53:79:6e:fa:ab:0a:47:f5:46:ef:15:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 1 14:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b867145aada2ffcb17c531a2760dc11be5aa9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:32:11:22:6a:63:b6:70:9d:ea:14:a5:fc:
1a:b0:9c:f3:a7:df:a3:1b:62:76:44:ab:70:eb:e0:
db:3c:3b:58:3d:79:69:34:9f:0d:a8:a7:2d:6f:05:
1a:54:d1:31:d3:ab:4f:ca:53:4a:89:5c:7e:a3:00:
cf:09:aa:44:78:e8:82:98:0d:d7:c9:f4:bc:88:d9:
77:d7:c9:2d:3d:85:8e:68:51:0f:3b:d4:70:0a:0b:
0f:f4:8a:80:67:bb:e0:d4:d9:9e:a6:be:1d:34:64:
a4:36:c5:e6:e1:ae:b0:37:de:52:54:51:9d:e7:53:
13:c3:e5:be:f7:c8:7e:38:c6:c4:9f:5e:26:fb:70:
46:4b:6e:7d:8b:0d:6e:aa:8c:aa:18:e9:8b:1c:52:
cd:dc:9e:b7:a0:6e:72:55:43:ae:72:01:ec:ca:a8:
69:d5:4e:9b:4e:91:3f:8d:a3:72:0a:53:14:88:2b:
c5:87:e7:99:b1:ae:74:2c:81:d4:29:cb:8a:7a:7a:
00:6a:b7:26:66:3a:06:a3:77:8a:63:b7:95:14:98:
54:21:e5:96:17:07:98:04:f9:fb:c8:02:f4:0d:b9:
8e:c5:72:bd:03:36:ce:18:97:90:5c:56:8f:d4:46:
a0:de:a3:63:30:87:21:b5:9a:d0:c8:76:16:05:59:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:14:5A:AD:A2:FF:CB:17:C5:31:A2:76:0D:C1:1B:E5:AA:9D:F4
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/uGcUWq2i_8sXxTGidg3BG-WqnfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
29:3f:76:29:42:5f:cf:8b:ec:9d:62:e7:e9:43:f1:27:ca:91:
63:f1:32:05:32:81:20:77:7c:8c:45:3c:9d:1a:31:9f:1c:ca:
56:3e:00:6b:e8:c1:b9:de:96:52:e4:fb:0a:cf:23:89:4a:c9:
f6:94:46:18:48:4f:65:e8:65:f8:01:e4:a0:72:42:11:d6:b3:
e1:be:87:83:c9:1c:e5:bc:3e:86:98:b4:e6:b1:90:84:ab:7f:
3a:56:f9:8e:66:eb:99:7a:92:74:e6:ea:b7:e2:f7:da:00:aa:
bf:5a:63:69:71:c3:ec:51:5e:75:e3:f3:bb:e5:79:a1:6a:7f:
b3:f1:55:3a:c9:6c:19:d8:b7:2c:30:1a:30:26:c9:64:0a:7c:
90:47:52:df:4e:d0:4d:4d:d6:73:20:41:20:e6:86:64:8a:f1:
ba:18:f0:0d:bd:9b:7f:c7:f3:8a:86:93:0f:92:f7:6c:94:40:
75:1e:ac:60:ce:7a:b1:7f:5f:aa:c8:05:0d:c3:08:be:ee:20:
c5:80:b5:84:0f:44:6c:21:31:ad:9e:95:26:5a:4b:9d:a1:a7:
4c:03:e6:47:d9:80:4c:02:d3:b8:e1:95:2e:90:25:7b:87:4e:
0b:3a:92:be:5e:c3:e1:1c:90:a7:19:14:e4:b4:18:8c:a2:41:
2d:4f:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:30:17 2025 by rpki-client