Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/F1QPL5xzGKS3aUkNvjUF1Tpk8fU.roa
File: F1QPL5xzGKS3aUkNvjUF1Tpk8fU.roa (raw, json)
Hash identifier: Qsd1iDIhk4/EOY33QtkQJyoX4W+Kvf6zs7BQ8eur6UE=
Subject key identifier: 17:54:0F:2F:9C:73:18:A4:B7:69:49:0D:BE:35:05:D5:3A:64:F1:F5
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 0185822D4230A7CC6464796F2E7D12C2E8CA
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/F1QPL5xzGKS3aUkNvjUF1Tpk8fU.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.129.91.0/24 maxlen: 24
45.129.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:42:30:a7:cc:64:64:79:6f:2e:7d:12:c2:e8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17540f2f9c7318a4b769490dbe3505d53a64f1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:4e:ce:6f:91:15:4f:87:f3:c6:c8:7e:7d:
e7:0a:32:ea:3f:d6:6b:83:f0:c9:33:6c:18:d5:f0:
49:76:59:62:6b:9c:e2:a5:3e:8c:05:36:60:43:26:
96:c0:59:6d:7e:58:af:45:ed:ba:78:94:83:10:64:
8a:45:0b:6c:f7:70:01:74:61:f3:26:91:c9:a0:d5:
f2:9d:e2:a1:c1:61:4d:ff:4a:b9:b9:dc:d3:d7:d7:
af:a6:dd:a4:83:1f:79:69:73:fb:c2:4a:14:73:16:
63:d1:53:61:f3:02:9e:ff:f4:e8:67:e8:6f:69:32:
49:ae:b6:3a:3c:9e:99:8c:cd:f0:ff:de:bc:2d:6f:
84:7b:4f:85:66:c0:55:e6:fe:a7:5e:65:13:df:dc:
03:30:2d:0f:75:3c:74:8d:4d:6a:ce:8e:ba:fa:7c:
e1:69:56:67:24:59:a6:5d:4b:35:87:e3:eb:6b:be:
d3:41:52:7d:8a:29:2a:68:ba:c1:5b:3f:f1:65:eb:
b9:27:2a:ea:5a:d4:c6:3b:30:74:5d:49:26:ed:10:
25:4e:a7:25:17:06:61:6c:67:a7:62:2a:94:63:b0:
c9:ba:5d:b7:f4:fc:a4:56:7f:88:cc:93:7d:25:24:
f1:d0:94:64:06:10:26:31:f8:bf:a8:4b:83:cb:ca:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:0F:2F:9C:73:18:A4:B7:69:49:0D:BE:35:05:D5:3A:64:F1:F5
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/F1QPL5xzGKS3aUkNvjUF1Tpk8fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.89.0/24
45.129.91.0/24
Signature Algorithm: sha256WithRSAEncryption
da:0b:b3:d3:08:ae:13:ff:a9:2d:b4:7f:19:c7:80:9b:9b:bc:
48:1e:72:d5:bd:a6:49:37:60:6c:36:3a:16:a8:35:09:f0:5a:
e4:1e:0a:ff:e0:5d:3d:2f:9e:f7:54:87:08:47:a9:bb:6b:7b:
f0:92:8d:78:82:ea:37:8a:6a:a5:22:ef:12:c2:84:25:91:b4:
41:83:a3:fa:16:b3:cc:f9:5b:26:76:8c:c4:30:22:79:d5:ca:
7b:01:f9:d7:a5:a9:55:e4:00:24:11:66:3e:96:66:07:cc:ff:
d8:61:be:19:fb:b9:52:19:63:1e:7a:36:e0:66:28:88:7b:b9:
e1:5c:06:83:48:a5:ef:10:3b:28:67:59:45:4b:f0:26:3d:3d:
47:6e:da:d1:6f:bc:23:7d:df:9b:26:35:1e:ac:d1:0e:55:a2:
87:4f:d7:74:76:42:ae:99:8b:29:64:9b:48:3a:16:49:b8:63:
4f:cf:73:26:b4:bd:b5:9b:2a:11:0c:a2:e1:b3:fe:b2:5b:f3:
73:a3:b8:58:bc:d1:0e:85:86:b5:51:da:05:6a:67:dd:98:3d:
b3:ed:59:3e:8b:1e:e1:1a:44:05:88:55:bf:5b:51:ec:53:38:
17:f3:a9:b2:34:ed:7c:c1:7a:e6:d8:5f:0a:2f:96:60:d5:33:
f0:da:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:19 2025 by rpki-client