Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa
File: 1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa (raw, json)
Hash identifier: gmlfAGy0KftsEPxGddnXBxM1GSaQIP+xvYC2NpOxfqk=
Subject key identifier: FB:43:8B:43:9F:29:C6:D1:86:6A:9B:F9:12:59:D4:6E:00:55:C4:57
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01BC75FA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa
Signing time: Sat 01 Jan 2022 09:55:06 +0000
ROA not before: Sat 01 Jan 2022 09:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 45.84.46.0/24 maxlen: 24
45.14.73.0/24 maxlen: 24
85.209.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29128186 (0x1bc75fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 09:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb438b439f29c6d1866a9bf91259d46e0055c457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:bb:fa:58:63:94:e1:9f:c7:c1:36:75:03:
81:0b:e0:d1:84:37:c8:1c:ba:1e:8e:2a:3c:bf:70:
3b:ef:2e:7b:df:39:3c:cc:5a:a8:c4:58:a9:46:94:
a5:65:f3:22:6a:1a:b7:0b:3a:c9:4f:79:05:d0:3c:
e4:ae:5b:54:7b:e3:ca:6b:9c:68:1c:55:30:66:e8:
b4:80:f6:d1:8f:b3:64:cd:e5:8a:5e:41:b4:b0:86:
38:ad:e4:b2:02:c3:64:bd:fd:cc:70:1c:c4:9a:ea:
8e:98:ae:04:a9:1b:ff:5a:21:be:13:d7:4f:da:7b:
6c:da:40:58:d7:f4:5d:3b:56:ad:31:99:ab:2b:ec:
7a:77:ff:d9:da:6d:70:f3:4d:7d:ef:58:61:58:c5:
50:7d:48:ef:6d:47:a1:70:f5:5c:bc:be:cb:db:da:
21:87:dc:9f:3b:ef:45:66:d1:89:62:87:19:0a:e7:
9c:1d:fe:04:62:a7:22:3f:e1:d4:e9:f3:d2:ef:2c:
75:f2:08:8c:4b:c4:6f:84:e8:9e:17:fd:61:bc:80:
d0:0d:b4:b0:31:84:a8:08:79:14:1a:45:19:b8:27:
ed:b1:42:0f:16:cf:24:90:bc:7a:3c:ee:da:1b:6d:
74:bc:b8:8a:98:d1:03:64:cd:d1:08:41:49:26:cd:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:8B:43:9F:29:C6:D1:86:6A:9B:F9:12:59:D4:6E:00:55:C4:57
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-0OLQ58pxtGGapv5ElnUbgBVxFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.73.0/24
45.84.46.0/24
85.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3a:aa:7c:49:6e:d8:67:63:4c:fe:97:76:58:69:25:ff:26:
a2:f0:69:bc:8c:e8:af:50:3f:f7:6f:6c:6c:ec:53:1b:29:d8:
7f:b9:3a:17:e8:00:60:22:9c:72:d9:cf:c3:83:c5:37:1a:d5:
91:cf:3f:4b:c5:7c:60:d3:17:31:81:54:82:18:1c:9d:8e:50:
9f:6c:15:a8:76:09:c0:d0:66:7f:68:8c:46:55:5e:74:07:6a:
ff:4e:58:0a:df:f7:be:31:81:a7:47:a2:f3:3d:1a:02:d3:45:
62:4e:9a:bd:b6:b7:ff:b5:65:e1:34:67:85:39:4b:42:8f:53:
66:cb:11:52:1a:0b:0e:5d:53:ed:0f:0b:b2:94:12:70:28:ab:
14:75:26:2e:c5:07:37:b8:43:df:e6:4c:f4:c4:ae:94:06:07:
fa:ff:35:e0:4f:bc:2e:8e:50:74:0f:d9:a0:c8:5e:45:28:49:
88:e4:69:70:0b:79:41:ab:d5:37:b3:14:da:99:43:d9:5f:d3:
ad:fe:07:a6:1d:c3:5b:0b:60:b5:17:cd:17:de:55:5b:86:2b:
85:6e:93:6a:75:3d:c2:46:af:56:72:6a:5b:c8:a4:10:04:d1:
9a:cb:b8:9e:7f:15:23:46:74:aa:e0:fe:2d:70:6f:35:7a:97:
4d:7e:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:43 2025 by rpki-client