Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa
File: Or0yeNInf6fgotirmBuIYulaahM.roa (raw, json)
Hash identifier: iocXVSElXiedrj57YFcc0qMRkN5pHDt3PfVh5kBpAuQ=
Subject key identifier: 3A:BD:32:78:D2:27:7F:A7:E0:A2:D8:AB:98:1B:88:62:E9:5A:6A:13
Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial: 029021
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa
Signing time: Mon 03 Jan 2022 08:45:47 +0000
ROA not before: Mon 03 Jan 2022 08:45:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31543
IP address blocks: 45.65.120.0/22 maxlen: 24
95.214.252.0/22 maxlen: 24
89.44.116.0/23 maxlen: 24
89.44.148.0/23 maxlen: 24
5.133.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167969 (0x29021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Validity
Not Before: Jan 3 08:45:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3abd3278d2277fa7e0a2d8ab981b8862e95a6a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:f8:11:a5:12:42:04:55:0a:00:b8:1c:45:
e3:74:d7:28:85:b3:ca:6d:12:99:f5:fa:1a:12:40:
0b:61:87:88:2f:1d:9f:95:54:e3:34:41:84:fb:a4:
ba:ca:27:61:59:a8:86:57:64:73:bf:99:e1:ca:29:
fc:52:b1:0c:0d:cb:e5:1c:e5:86:4b:db:38:80:36:
a0:a6:23:74:95:48:27:77:a1:c6:6f:eb:e2:0d:a1:
3b:4f:63:ae:2e:f7:bb:6e:d6:16:04:29:05:e1:9c:
45:43:d6:94:47:50:64:e7:c1:6c:9e:ec:86:79:0b:
24:d1:6e:00:61:42:27:69:b0:92:17:eb:15:fc:2b:
15:7d:85:6b:ee:7d:c5:41:6f:1c:83:66:44:a4:38:
59:d2:38:ed:ac:ae:1e:3e:2d:d4:06:36:fd:e2:f6:
91:75:c9:ee:4c:46:9d:8f:77:ab:09:6e:ab:90:89:
53:ba:30:d9:f9:9e:65:b4:a7:0f:24:d1:20:9e:16:
a6:21:8b:bd:ee:66:9c:a1:c9:89:98:5f:d4:98:df:
53:7f:bb:63:13:59:41:a3:8f:6d:ff:4a:13:9c:d8:
ef:56:c3:7c:7c:37:05:b6:40:64:6c:34:75:c8:90:
b3:46:ec:4a:d0:b8:02:fc:3c:c9:70:aa:48:5c:4b:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:32:78:D2:27:7F:A7:E0:A2:D8:AB:98:1B:88:62:E9:5A:6A:13
X509v3 Authority Key Identifier:
keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Or0yeNInf6fgotirmBuIYulaahM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.32.0/21
45.65.120.0/22
89.44.116.0/23
89.44.148.0/23
95.214.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ce:83:78:56:21:db:ad:b6:85:fd:e9:d8:05:14:66:bc:dd:
e3:cd:ca:a0:c3:91:20:a0:7c:74:19:f9:2b:50:02:a0:00:f3:
68:71:a6:b2:b3:da:a5:77:36:8a:18:f9:a1:df:fd:f2:c9:a0:
43:72:ac:37:57:4b:14:96:db:12:ca:d0:97:63:e3:5a:aa:3f:
1e:b7:a2:cb:19:0d:2b:fc:06:5a:25:0a:d2:f1:0b:98:1c:26:
aa:32:ee:d8:27:0b:83:be:33:e2:c1:9d:4f:ad:f9:db:fc:be:
3d:c1:e2:d2:dc:b9:64:94:88:20:09:d6:9d:b5:93:b1:44:c1:
78:8c:b3:8e:4e:7e:54:f6:c7:9d:f9:64:53:2e:be:7b:2a:e9:
81:e0:05:62:69:be:8d:b2:6e:08:08:8e:43:e4:c8:2c:3d:62:
8a:26:6b:77:db:96:a5:2f:da:f3:35:8c:0e:86:06:84:8c:61:
35:ff:68:54:50:71:d8:84:94:04:81:4c:62:34:5c:03:66:94:
e1:e5:6c:68:42:5f:5e:c4:3f:fe:a6:6a:00:ac:2a:59:70:03:
50:5f:d9:3f:c6:bb:4b:c3:81:13:66:4f:fd:42:4e:cc:3d:75:
2f:fd:6e:96:1e:88:8e:63:a4:44:65:df:eb:4e:58:65:1d:09:
e5:fa:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:10 2025 by rpki-client