Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/vUjhZ3t5ScBQ9A6lXSRw7Oj9p0c.roa
File: vUjhZ3t5ScBQ9A6lXSRw7Oj9p0c.roa (raw, json)
Hash identifier: UZtCCsJgQI/o7MkT55UQTedmNJmHeUMUayEwlhUKz/s=
Subject key identifier: BD:48:E1:67:7B:79:49:C0:50:F4:0E:A5:5D:24:70:EC:E8:FD:A7:47
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 018BC935F073F68889CCE6B18312DDF3E80E
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/vUjhZ3t5ScBQ9A6lXSRw7Oj9p0c.roa
Signing time: Mon 13 Nov 2023 15:03:57 +0000
ROA not before: Mon 13 Nov 2023 15:03:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 185.229.204.0/24 maxlen: 24
45.135.241.0/24 maxlen: 24
176.97.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:35:f0:73:f6:88:89:cc:e6:b1:83:12:dd:f3:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Nov 13 15:03:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd48e1677b7949c050f40ea55d2470ece8fda747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:03:3f:6e:08:ca:7c:48:54:b9:ca:8d:04:
c8:c6:ae:d0:77:47:df:fc:75:7f:ce:4b:61:ae:20:
3f:84:5b:5a:99:82:88:b3:0f:a7:72:2b:85:bc:e7:
48:81:50:2c:2d:f3:c8:6a:ba:92:9c:20:04:e1:48:
0d:44:e8:e0:4b:37:29:92:e9:97:92:9c:d4:b1:fb:
01:67:b2:b4:ad:ee:47:d0:3d:e3:cd:85:ab:da:d2:
ac:2b:de:27:6e:1e:57:cf:0f:de:cb:50:1b:64:63:
99:45:41:1a:09:14:c1:1a:f9:59:36:4d:55:f5:c4:
86:3a:aa:26:44:d5:a8:1d:83:fb:10:ff:ce:a0:f8:
e2:31:d2:ba:6e:b1:71:af:b4:ee:5c:92:b5:ee:c4:
9a:e7:3d:5e:20:43:fb:6e:a8:76:19:e4:54:65:50:
c8:c1:e1:35:79:1c:33:6b:50:4a:fc:ac:f7:a8:8c:
48:09:0c:72:b5:b5:8b:ef:67:a6:a8:7d:c9:61:5d:
f7:ac:b5:ec:52:16:e2:0a:90:de:cc:2f:a3:37:03:
64:ef:ef:47:b4:c1:6d:fe:db:bc:cf:3d:85:b3:11:
b9:6e:e6:c4:b2:9a:83:ba:e1:44:e1:96:2b:01:b4:
b5:a1:94:4e:ec:b3:35:45:25:e0:66:ff:c0:50:93:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:E1:67:7B:79:49:C0:50:F4:0E:A5:5D:24:70:EC:E8:FD:A7:47
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/vUjhZ3t5ScBQ9A6lXSRw7Oj9p0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.241.0/24
176.97.220.0/24
185.229.204.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6b:49:87:71:c3:c5:34:01:fb:64:a6:b7:6a:97:ee:e9:37:
2a:da:e4:05:ae:5a:e2:27:8b:c2:fc:8b:b8:b9:ee:bc:60:1f:
ea:5d:50:ac:d5:2b:55:2f:b9:db:b0:17:05:53:f7:97:00:79:
14:ac:0a:74:e8:4b:d7:d3:39:a9:69:b3:39:fa:92:95:d2:95:
d4:5f:e4:36:93:02:a1:c7:31:fa:00:cb:12:1d:4b:3d:06:cc:
55:29:a8:a3:34:0b:41:6d:82:5c:a8:44:0f:18:a1:97:ed:ee:
99:93:88:83:00:20:b7:d8:1c:69:a4:2c:ad:7a:f5:04:10:87:
9d:29:ad:5f:da:ca:2f:06:80:a1:b0:ce:21:ef:0e:d3:b3:bc:
36:2b:4c:40:a0:dc:40:18:4a:73:23:1c:00:26:1c:99:f0:e5:
b8:89:ab:3c:44:78:8f:e3:8f:20:2b:20:d2:6d:11:26:68:77:
f0:81:ca:3e:e5:e9:96:12:81:90:26:f0:64:8e:37:21:83:1c:
bc:da:29:f0:47:ab:a0:3f:54:dc:5b:f3:c4:7f:90:ae:82:8c:
a1:32:fa:1e:9d:21:6e:fb:c7:73:97:af:a8:34:04:da:aa:2c:
6d:97:64:b5:9e:c0:ed:ce:fa:4a:f0:e2:17:0a:49:b5:86:7e:
71:49:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:58 2025 by rpki-client