Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/ZUfe_bYFoTxDdCeiQCx0qAQP6Cw.roa
File: ZUfe_bYFoTxDdCeiQCx0qAQP6Cw.roa (raw, json)
Hash identifier: NZXxBV8In462a0JdioR8WbLwsOvJjj488WH8OI+WDhI=
Subject key identifier: 65:47:DE:FD:B6:05:A1:3C:43:74:27:A2:40:2C:74:A8:04:0F:E8:2C
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 98129A
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/ZUfe_bYFoTxDdCeiQCx0qAQP6Cw.roa
Signing time: Sat 01 Jan 2022 03:51:15 +0000
ROA not before: Sat 01 Jan 2022 03:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 45.155.132.0/22 maxlen: 22
45.155.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9966234 (0x98129a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 03:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6547defdb605a13c437427a2402c74a8040fe82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:2e:6b:f7:a8:c7:b1:b4:a5:3d:50:44:93:
4a:57:75:8b:0e:03:90:56:5e:95:7d:d3:9a:da:6a:
aa:7d:f7:b3:20:e7:35:36:c2:8e:ca:e8:a3:65:2a:
18:b0:63:48:21:3f:86:ea:c7:a5:ec:da:ad:ca:87:
86:70:73:a6:30:77:14:2a:86:e9:f8:e5:88:29:b8:
8a:57:72:e0:e6:92:d6:38:76:8e:b1:de:82:aa:6c:
ae:ae:b7:88:55:9d:df:14:92:f5:73:d2:98:3e:2a:
60:94:1b:b6:72:17:0d:cc:79:b7:82:78:49:71:92:
07:d6:f3:c8:a4:29:4a:cd:77:c6:74:97:df:0d:73:
de:94:ed:48:78:e3:61:74:60:29:ba:88:75:14:28:
88:51:82:ab:de:6a:e8:76:83:71:34:28:dd:88:97:
7f:95:b7:8f:51:f2:b3:bd:86:fb:39:84:28:50:3a:
f2:6b:cb:37:a7:7c:c6:5f:c8:0b:29:93:03:f8:83:
a0:9e:0c:61:ab:31:c9:c5:8e:f4:37:94:5b:40:be:
b9:e8:51:da:75:4b:58:86:82:7e:28:c6:20:24:d2:
bd:d4:ae:82:35:05:4f:e1:23:b5:67:20:1b:95:8f:
81:96:a5:02:53:49:e4:c5:69:e0:f6:44:03:42:83:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:DE:FD:B6:05:A1:3C:43:74:27:A2:40:2C:74:A8:04:0F:E8:2C
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/ZUfe_bYFoTxDdCeiQCx0qAQP6Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.132.0/22
Signature Algorithm: sha256WithRSAEncryption
18:dd:0a:e4:58:33:66:cd:f2:b4:be:d2:b9:c2:83:92:7e:66:
b5:16:5e:18:e8:cf:1f:e8:66:77:8c:27:47:cb:4b:f1:a9:3a:
11:fb:1d:f2:46:4d:58:2b:65:5f:f3:41:f7:5f:a6:4f:db:8a:
ea:d9:64:f6:c6:d0:c9:b8:8a:cd:e9:79:df:16:8c:b3:5c:0d:
50:b9:c5:07:41:71:e9:da:db:74:21:d7:72:a7:6f:db:a2:80:
5f:53:6c:f9:eb:43:0b:a4:43:8e:cc:ac:ab:6c:bf:49:92:b5:
65:cd:8a:26:8c:e0:2e:78:63:f8:88:49:b3:e3:3a:a8:3d:69:
96:96:17:4b:60:be:65:9f:c0:4f:98:de:d1:0a:84:d8:ef:bf:
69:79:25:0a:eb:3d:e1:3a:2e:ec:45:3e:10:30:14:0e:c3:3c:
69:78:b5:c4:b9:d2:dd:41:31:f2:0b:31:c7:5e:dd:f5:b6:67:
4b:59:3a:62:0d:87:47:cc:72:f9:c9:50:d8:af:dc:8d:36:8b:
ca:b6:a9:6c:38:b6:9b:bb:93:fa:9d:0e:71:51:ee:dc:6c:db:
75:e4:d6:16:4a:04:3e:fb:99:a4:1a:80:5e:82:19:9e:27:16:
c4:f4:04:8e:e1:51:f5:59:fa:90:88:5c:7d:f1:24:73:ab:3a:
c6:11:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:17 2025 by rpki-client