Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa
File: UIfKF6uTUIS55sJpoGwqTYsje84.roa (raw, json)
Hash identifier: 3p/vZcD+vgbGS1oUBjVyXngpV61/Fce/TA7qnLWG9G0=
Subject key identifier: 50:87:CA:17:AB:93:50:84:B9:E6:C2:69:A0:6C:2A:4D:8B:23:7B:CE
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 018570D51B603D43791AC47F9FEC3468088B
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa
Signing time: Mon 02 Jan 2023 04:54:52 +0000
ROA not before: Mon 02 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204189
IP address blocks: 45.83.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:1b:60:3d:43:79:1a:c4:7f:9f:ec:34:68:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Jan 2 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5087ca17ab935084b9e6c269a06c2a4d8b237bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:2c:a0:25:e0:bd:fe:46:2f:d6:ba:ab:f3:
3d:02:3e:98:e8:d9:35:ff:cc:bc:5a:3e:23:fb:99:
62:c2:b5:bb:f6:71:1e:89:5d:b3:ce:73:25:61:23:
aa:e9:12:1d:85:ed:b9:85:b6:8c:7d:d3:c8:9d:a6:
dc:6f:da:76:d7:e7:77:49:06:f1:60:2a:3a:37:86:
30:04:e9:db:8c:af:5b:0e:0a:54:dd:bb:ce:f5:f7:
2e:0c:2a:f4:ff:b0:3b:bb:0f:d6:32:a6:db:f4:31:
5a:2e:5f:e4:b8:32:b7:6a:0d:47:a3:25:e0:47:39:
4c:88:ab:de:67:7f:4a:26:44:f1:1c:8d:ce:cc:00:
be:7e:80:4a:de:b3:8e:c0:e5:38:77:11:be:4e:a2:
dd:dd:7e:b0:fd:8d:ae:f7:f9:b6:73:99:d6:8f:45:
27:97:e6:6f:cc:1e:a7:a6:2d:a7:9d:8c:e2:1e:07:
69:49:3c:eb:6f:d6:49:40:44:ef:eb:99:9a:5a:1f:
e5:30:c8:37:4e:eb:13:65:73:3d:c2:4e:4c:ae:68:
60:97:73:a6:ea:a0:c1:d1:86:c2:8b:eb:b3:9b:91:
21:55:de:9e:bd:e4:3d:e6:b8:85:f5:12:c8:e2:81:
b4:01:8d:0d:8e:bf:db:d6:6e:9a:da:45:88:69:6b:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:CA:17:AB:93:50:84:B9:E6:C2:69:A0:6C:2A:4D:8B:23:7B:CE
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:9f:0e:de:0a:52:e6:aa:ac:0e:b0:df:89:49:e7:d0:68:63:
6f:42:e9:4d:f6:ab:2d:9c:2b:96:75:1c:be:c0:24:c3:87:ef:
9f:f9:2e:dd:b7:69:d4:69:95:e6:b7:f3:91:13:0e:00:25:e9:
08:7d:18:fb:9f:59:1c:f7:22:46:71:f2:43:f4:8d:d8:de:63:
dd:b4:61:8b:3e:03:d6:ff:6a:64:e9:3c:14:ff:49:50:9e:c6:
62:6c:f8:ac:c3:dd:a0:68:72:05:dd:0f:52:e3:78:c9:34:41:
4e:f6:26:68:85:ef:67:89:17:4e:92:8f:97:cc:b6:e0:e8:b5:
49:e3:1a:5a:14:a9:80:90:e4:28:9a:ca:e9:c5:e7:f4:c1:cb:
2f:c9:da:1d:13:0f:69:9e:60:d6:5c:97:2e:e5:52:44:17:03:
12:85:99:b8:fd:24:47:fc:ce:77:f8:85:43:09:f9:93:ca:81:
18:06:60:56:9b:31:86:4d:ab:21:f8:c1:76:30:6f:f9:e9:29:
e5:12:fa:94:6b:4e:50:ed:df:88:15:ad:9f:8f:ef:a9:41:53:
c0:23:16:84:ff:43:50:0d:85:6c:e2:82:9c:02:5e:c5:44:cf:
bc:14:20:6c:a6:f7:c8:f5:3c:f3:dc:a3:d2:14:1a:de:8f:15:
c7:85:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:25 2025 by rpki-client