Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uYgMxnqJQ4oh_Nnc2Vwl2t9iAu0.roa
File: uYgMxnqJQ4oh_Nnc2Vwl2t9iAu0.roa (raw, json)
Hash identifier: D3u0uR/arJsfaIvMVMbR9yAo1UrRKPpzg9Aw8ogv+wQ=
Subject key identifier: B9:88:0C:C6:7A:89:43:8A:21:FC:D9:DC:D9:5C:25:DA:DF:62:02:ED
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 018CABCEAF79869D0A15742A93C8CD050981
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uYgMxnqJQ4oh_Nnc2Vwl2t9iAu0.roa
Signing time: Wed 27 Dec 2023 15:04:58 +0000
ROA not before: Wed 27 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 45.87.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:ce:af:79:86:9d:0a:15:74:2a:93:c8:cd:05:09:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Dec 27 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9880cc67a89438a21fcd9dcd95c25dadf6202ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:e6:db:aa:eb:33:ee:b0:22:0d:3c:ea:fa:
37:54:fa:cd:75:c5:ee:a0:6f:0d:59:62:dc:a5:b8:
a3:55:1b:f8:c9:dd:e4:b8:57:e9:dc:4b:5f:55:b8:
56:d7:07:fc:18:68:84:35:46:ea:d2:34:42:4d:c2:
e2:65:5b:70:ce:6d:99:a6:76:47:5d:d0:42:2b:d0:
7a:60:65:f3:90:66:d9:db:09:42:de:a9:0a:2c:45:
7d:83:08:40:ba:26:03:3b:7a:27:ce:a4:44:45:a7:
98:54:54:af:c8:05:f2:10:ee:8d:5d:7b:b0:63:9a:
16:4d:4a:14:52:ea:d3:c3:9b:c6:b1:79:02:4a:af:
34:1d:f0:17:f7:f7:a1:e7:7e:30:e2:f2:d5:48:9b:
92:15:71:f8:15:99:15:04:6a:e9:d9:3f:0c:0f:4b:
e7:17:e6:2a:57:86:9c:3f:18:6f:86:e2:7e:a0:d1:
60:95:49:f5:64:d6:08:37:12:24:44:50:69:30:49:
ea:f9:99:0a:e9:5f:a0:41:91:2e:a8:c4:f7:2f:ca:
6b:b5:f9:a6:4d:3b:b4:1c:3f:fa:7a:97:96:8f:51:
3c:9e:07:f2:82:f7:8e:5f:cf:ca:4e:a2:84:9c:a3:
36:d7:18:a9:fc:8e:46:34:1c:c7:af:d2:cc:c4:87:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:0C:C6:7A:89:43:8A:21:FC:D9:DC:D9:5C:25:DA:DF:62:02:ED
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/uYgMxnqJQ4oh_Nnc2Vwl2t9iAu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:64:9e:12:1a:78:ca:47:ed:eb:f2:4d:8d:9a:0d:ca:1d:1b:
4a:55:3d:74:6a:6f:6f:78:50:83:89:50:f8:1e:e3:e8:f0:d3:
b2:5f:5d:4e:3a:ed:74:6e:a6:7c:8d:69:dc:32:9c:57:12:60:
5f:a4:05:e1:cd:55:dc:1f:1e:4f:54:87:ec:f2:7f:f7:97:9a:
44:a8:8e:aa:14:78:cf:05:bd:33:e8:2b:cb:d9:f4:29:5c:5e:
5f:b9:92:30:d3:4b:bc:18:46:4f:81:95:fc:c0:fe:e6:c3:2b:
f2:c1:25:24:36:db:83:69:df:35:d5:8a:38:98:85:fd:0b:94:
18:e4:c4:52:b6:41:3d:6f:16:42:ee:02:e7:fe:d7:28:60:c8:
76:09:40:54:a5:84:f8:b8:04:c0:51:2b:ad:90:62:7d:de:0c:
a5:56:48:39:a8:d5:1e:e0:a9:46:d3:22:c7:7f:b8:4d:18:f5:
d8:17:91:d4:8c:ca:22:14:98:7c:6e:ad:60:2b:4e:23:19:42:
30:49:63:d0:65:13:a9:58:9f:25:94:1a:9f:19:87:b2:23:82:
73:16:8b:27:43:76:98:f6:d5:c8:49:8a:c2:d2:7c:70:44:25:
e7:44:b3:12:c6:25:cd:c1:91:f2:6c:1b:cb:86:e4:09:da:dd:
29:0c:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:42:34 2025 by rpki-client