Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Gy9DukBtYXeyiDeHXaESR7u3j-Y.roa
File: Gy9DukBtYXeyiDeHXaESR7u3j-Y.roa (raw, json)
Hash identifier: ULqGxTtnRdosol6wlc0ZNpHXZrp6wZlgvBSOLaOjkjo=
Subject key identifier: 1B:2F:43:BA:40:6D:61:77:B2:88:37:87:5D:A1:12:47:BB:B7:8F:E6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01258326
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Gy9DukBtYXeyiDeHXaESR7u3j-Y.roa
Signing time: Sat 01 Jan 2022 00:59:45 +0000
ROA not before: Sat 01 Jan 2022 00:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208029
IP address blocks: 45.13.117.0/24 maxlen: 24
2a0c:b641:470::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19235622 (0x1258326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2f43ba406d6177b28837875da11247bbb78fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:e1:d3:12:f9:4c:0d:dc:e9:2c:47:bc:73:
2f:10:a8:b1:59:56:4c:8f:07:a6:4d:85:04:4d:28:
dd:12:57:7e:c9:6e:29:61:88:79:1b:59:fe:97:da:
1d:ca:0a:1b:6f:2c:41:2e:9b:f6:ba:79:d6:27:55:
fe:a3:3f:c0:ec:4a:54:e2:ec:3a:38:9c:b6:bd:b6:
05:6e:eb:1a:6d:45:90:46:b3:d9:a5:17:0d:d4:ce:
78:c6:e8:7d:8b:cb:4f:ca:dc:04:cd:3d:1c:72:39:
4a:88:49:ce:1a:01:4a:13:b1:2a:0d:89:7a:25:4d:
1f:72:3a:44:cd:50:80:57:bc:ed:a3:fe:c7:e6:c9:
63:e6:f5:24:b4:10:30:59:43:e4:e8:7d:76:33:e9:
8f:a2:a1:c8:59:43:e1:14:a9:2c:5d:e6:e2:b4:48:
a9:e4:d9:3d:07:99:7e:ac:87:b0:ec:c7:09:d0:38:
de:c8:b0:1e:83:aa:1e:69:55:d8:6e:77:3c:77:ce:
c5:35:64:b3:5d:0a:52:41:8b:8e:00:d0:b8:06:40:
95:8d:9a:62:0c:9d:35:3d:ff:a1:35:b6:7f:2f:61:
c9:54:8f:65:70:d2:80:92:ad:91:b3:0c:c6:0c:b0:
08:95:6c:0b:bb:43:96:90:0c:ab:37:32:2b:a0:bd:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:43:BA:40:6D:61:77:B2:88:37:87:5D:A1:12:47:BB:B7:8F:E6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Gy9DukBtYXeyiDeHXaESR7u3j-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.117.0/24
IPv6:
2a0c:b641:470::/44
Signature Algorithm: sha256WithRSAEncryption
2b:e9:8a:4a:ee:81:58:c6:2f:82:7c:45:ae:b2:fe:c4:82:9b:
0e:e1:9d:bb:6b:18:b8:3f:68:a7:62:1b:9f:35:2d:7c:f9:ad:
71:bc:f8:2c:7c:05:93:f4:7e:57:13:85:ef:00:94:5f:d7:39:
97:23:bd:71:da:d4:6c:62:2c:58:dd:dd:cb:d5:f0:42:49:77:
1c:11:e2:9f:06:ed:78:8e:51:74:82:40:a0:bb:5e:6e:9d:2c:
4c:5f:e2:b8:a7:18:3c:5d:e0:e5:63:35:1c:a3:cb:e2:7e:e8:
64:e6:cf:6b:61:77:eb:76:eb:0d:78:ef:99:ae:f4:c9:49:8e:
76:cc:ff:47:eb:6c:5d:3a:23:28:bb:9a:a6:b5:49:a3:9d:69:
d0:82:25:b4:80:5e:ef:66:1e:76:52:14:3f:9e:33:6c:c3:88:
38:13:ff:f5:51:03:c3:80:6d:19:fb:9f:b4:6d:77:44:81:7f:
42:06:dd:43:23:ce:66:d9:1c:6a:5a:be:59:61:37:c3:58:28:
28:ef:33:46:85:89:e4:e8:f9:cd:4e:3a:11:de:5d:39:2c:6f:
b5:d1:89:fc:93:43:71:28:99:d3:23:c1:df:b2:ee:c8:b4:38:
32:87:94:a7:6b:9b:11:21:d2:c3:f7:24:e4:d0:32:9a:fc:25:
0a:d3:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:45 2025 by rpki-client