Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa
File: uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa (raw, json)
Hash identifier: /4/KwYJ2pFeXu1dCrodgAaVVSNuw6moURtB+gjWmGeQ=
Subject key identifier: B9:74:0C:01:2D:EC:B3:5B:F7:5A:7B:1A:01:93:30:C0:D8:4E:02:67
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E39EFD4EB18F81D66BE626A373149
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa
Signing time: Mon 02 Jan 2023 06:14:44 +0000
ROA not before: Mon 02 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34854
IP address blocks: 45.13.118.0/24 maxlen: 24
2a0c:b642:fc0::/43 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:39:ef:d4:eb:18:f8:1d:66:be:62:6a:37:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9740c012decb35bf75a7b1a019330c0d84e0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:11:60:1d:c0:49:66:80:d5:d9:8d:66:07:
85:97:ec:da:1f:b0:58:b5:ee:b8:cb:f7:62:90:91:
cf:47:c2:66:75:83:4f:87:70:01:2e:67:83:d1:10:
21:f0:34:a8:63:d5:68:69:b2:e1:cc:dc:4c:1d:b9:
16:54:8b:97:eb:cc:10:84:92:ba:74:8d:db:b2:47:
c2:98:4c:6c:4b:31:ca:42:68:68:61:33:88:31:aa:
ee:07:c3:79:8b:e9:b7:72:a7:c8:2e:c6:55:7c:ec:
b8:08:0b:08:e1:fb:73:ef:a1:ae:e8:09:4f:40:48:
18:14:95:13:28:dc:1b:7f:bf:29:67:22:f0:77:92:
c5:0b:77:c1:e8:1e:fd:fd:0d:3c:77:b1:52:d7:61:
56:4d:6e:9d:ab:65:99:10:62:61:df:d2:fb:f3:3d:
53:43:74:b9:ed:3f:8a:49:08:51:ec:61:71:a1:56:
82:d4:3b:70:17:b5:52:75:93:f7:95:57:f0:0d:86:
64:00:ca:88:22:fa:3c:92:9d:45:ef:50:d0:32:68:
91:f7:63:bb:d4:c6:a5:d3:56:8c:a3:8d:44:87:2d:
26:8d:44:24:8b:b1:3b:0d:a1:a6:0f:5e:e3:48:14:
33:c9:02:e1:86:d0:31:85:4b:88:5e:66:6c:a3:6d:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:0C:01:2D:EC:B3:5B:F7:5A:7B:1A:01:93:30:C0:D8:4E:02:67
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.118.0/24
IPv6:
2a0c:b642:fc0::/43
Signature Algorithm: sha256WithRSAEncryption
40:58:20:d8:3e:38:36:04:31:86:ad:06:e4:66:5d:80:27:91:
06:51:92:5f:ea:cf:70:8d:5e:d2:ae:97:84:76:c0:86:f9:21:
52:83:1e:79:aa:0d:f5:ce:53:ce:d3:b8:93:91:95:96:ec:fb:
0a:b5:fd:b9:fc:b6:c5:55:9f:bb:24:53:50:e2:21:76:90:a5:
23:e9:1f:bf:b0:14:f5:61:a5:59:90:21:9f:d8:7b:56:a8:f4:
13:e8:e6:30:da:2b:7a:11:79:76:7d:d8:85:15:67:68:c5:7d:
80:b4:9f:38:a6:5e:89:56:39:6d:05:5b:7c:49:e7:ef:cf:ce:
ea:d5:ec:67:ca:2a:39:64:22:10:62:2f:f6:57:97:cc:52:0e:
fa:8c:a1:8b:94:20:9d:ba:29:06:7f:27:02:cf:25:2b:30:87:
03:5c:c1:a2:95:e0:3d:99:f1:65:7c:79:e6:74:1b:c6:e6:90:
ad:cd:6f:76:29:83:7e:a5:b3:9b:d0:67:bb:7a:9b:fd:52:74:
52:8e:61:43:c4:cc:87:83:96:c8:fd:28:c3:a2:eb:00:85:73:
97:71:91:23:a8:d9:d9:3d:03:b7:24:ba:b1:ed:6d:4b:56:00:
18:d3:2c:2d:f1:1d:45:d7:95:67:86:aa:cc:b1:ef:89:bb:ae:
4e:c9:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:18 2025 by rpki-client