Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa
File: RauXsAie8CfmuCaEWJI3jkpH4FA.roa (raw, json)
Hash identifier: su2/RRemzuhFM6UlBpPyKHuFZ9B68S9zKgVsmZXN+/U=
Subject key identifier: 45:AB:97:B0:08:9E:F0:27:E6:B8:26:84:58:92:37:8E:4A:47:E0:50
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 014A129F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa
Signing time: Sat 01 Jan 2022 01:00:19 +0000
ROA not before: Sat 01 Jan 2022 01:00:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211851
IP address blocks: 45.154.99.0/24 maxlen: 24
2a0c:b641:620::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21631647 (0x14a129f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 01:00:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45ab97b0089ef027e6b826845892378e4a47e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:55:cc:52:64:e8:b0:e9:54:41:86:ba:ac:
72:e7:ab:c5:57:08:62:9d:50:fd:08:10:b0:f2:d5:
fb:c1:0c:c2:74:7b:1f:e4:37:bc:73:4b:62:ed:91:
a9:34:b9:98:7e:90:0f:01:1a:05:4c:74:33:aa:1b:
54:b8:c5:d2:6b:d4:c4:83:28:92:ad:73:d4:ff:e6:
67:cd:a6:13:79:a7:d0:1e:41:90:bd:78:3a:2d:fa:
e7:bc:0e:8b:63:e6:2a:71:bc:6f:bf:9c:52:69:06:
2e:3c:65:bb:30:81:92:61:f7:bc:6a:72:4f:62:b4:
77:e4:f6:33:60:e9:80:87:80:72:83:44:b4:e2:9b:
23:f2:4b:15:1f:a5:42:35:c6:47:bc:cb:77:bc:ba:
02:f6:de:f1:79:6d:49:6a:7e:58:de:22:18:83:b4:
b1:66:55:b1:26:e9:e2:71:5c:63:69:6e:09:d3:e0:
b7:6c:97:61:e9:0b:86:5d:f7:46:c5:42:ff:a9:64:
d5:42:de:e3:ff:ac:b9:24:e8:7d:11:eb:ee:c2:75:
c2:05:75:cb:4e:d8:8b:fe:b8:88:05:eb:be:09:33:
8f:c3:2a:e1:11:d6:61:19:0b:3a:07:63:34:e4:fc:
ad:94:98:ee:e3:96:91:b9:81:2f:ea:7a:4a:b2:50:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:97:B0:08:9E:F0:27:E6:B8:26:84:58:92:37:8E:4A:47:E0:50
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.99.0/24
IPv6:
2a0c:b641:620::/44
Signature Algorithm: sha256WithRSAEncryption
81:82:01:bf:42:b4:12:e0:97:25:e2:d3:31:6a:5b:b9:21:75:
fd:45:c0:35:77:7d:cc:3b:42:8f:fa:ed:ff:8f:56:40:4f:91:
b8:04:3e:14:8a:f9:1d:da:02:2c:60:cc:b5:46:72:26:0d:52:
59:fb:f7:43:43:00:b1:ae:64:f6:2c:a9:6d:1b:a4:c0:d3:23:
6d:22:4e:2f:78:98:67:36:4a:13:42:26:38:81:9a:d3:4e:ec:
5f:73:61:dd:23:5a:25:9c:1c:0f:0a:74:a0:82:cf:5e:17:9e:
ed:c8:99:bc:e9:4f:fc:af:d6:2e:d4:6b:c4:8b:0f:9f:e4:66:
ca:1e:27:9d:dc:bf:22:e6:3a:e0:5c:18:c4:f9:ba:8f:4e:86:
c8:b6:37:d4:42:94:e2:de:c5:c9:37:2c:5d:08:f9:6e:7e:91:
52:7a:ab:23:e3:24:e3:34:63:26:62:d4:95:fc:8d:4f:ad:90:
c3:af:0a:b1:4c:66:63:03:77:bc:c4:81:83:5b:0e:4b:e0:f3:
03:a2:e4:24:d2:b3:34:b0:db:94:11:2f:6a:1f:49:69:71:66:
07:d5:52:9e:e0:fc:7a:82:96:d5:92:70:1c:c8:1e:f0:15:42:
65:5a:31:c1:80:e1:46:c7:40:4f:e3:7b:3f:7e:9b:42:3f:a5:
d3:55:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:43 2025 by rpki-client