Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Bj5mUGEUwvBCpfpJR7pfCKQRwac.roa
File: Bj5mUGEUwvBCpfpJR7pfCKQRwac.roa (raw, json)
Hash identifier: CG9IPRwsHGLzVNecTMIN2DHWVoJqmSIQZmoOfn/yUnI=
Subject key identifier: 06:3E:66:50:61:14:C2:F0:42:A5:FA:49:47:BA:5F:08:A4:11:C1:A7
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 01856C939B1468C7271AE7CFA8494C70366E
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Bj5mUGEUwvBCpfpJR7pfCKQRwac.roa
Signing time: Sun 01 Jan 2023 09:04:50 +0000
ROA not before: Sun 01 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212122
IP address blocks: 45.143.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:9b:14:68:c7:27:1a:e7:cf:a8:49:4c:70:36:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 1 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063e66506114c2f042a5fa4947ba5f08a411c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:0e:00:46:86:55:9d:58:a0:86:be:fb:a0:
be:cf:26:48:6e:a8:1c:09:b5:a1:b1:6c:f8:e0:50:
c6:fe:29:87:33:a0:87:f3:b0:fd:dd:5f:2e:f7:15:
1f:21:48:0e:e0:80:20:7c:c8:e2:f8:11:84:81:ae:
b8:08:e6:8a:21:f8:f9:1a:e6:d5:cc:ac:f5:45:f5:
30:b1:a6:86:35:2a:ee:e4:3c:de:00:63:6c:c1:b6:
f2:9f:bc:51:cc:2f:06:68:79:a6:01:8c:22:cd:a3:
87:2c:fb:44:d5:99:20:71:02:7c:11:ef:73:54:4a:
64:8f:da:35:56:36:dc:fb:87:3c:0d:7a:56:8a:31:
db:41:65:b2:b2:14:43:50:e1:9c:35:c3:d3:bc:f6:
31:be:1a:e9:55:5f:f9:ae:5b:4f:db:ea:be:52:2b:
04:d0:e1:b7:79:c1:82:3b:6d:ef:62:2b:cc:a4:9d:
6d:eb:84:79:b0:48:2e:b6:82:28:6a:36:63:f5:b1:
c4:0d:d7:42:2f:b3:5b:3e:d9:94:1f:88:71:0b:5d:
4b:eb:39:05:21:f7:c6:d8:3b:27:4d:22:3d:f1:b1:
8a:95:17:60:f2:2c:86:69:09:71:b4:fc:3f:45:73:
93:87:a0:be:69:73:6a:b3:8f:98:76:a4:bc:74:46:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:66:50:61:14:C2:F0:42:A5:FA:49:47:BA:5F:08:A4:11:C1:A7
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Bj5mUGEUwvBCpfpJR7pfCKQRwac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3b:1a:53:77:a2:a0:fb:da:b1:57:39:1d:b2:7e:f7:77:e6:
96:47:53:5a:50:2f:3c:59:74:b2:5e:dc:d4:70:e2:9e:1c:0f:
3e:37:a9:f9:fc:a4:aa:d3:55:19:15:f1:5a:28:ed:e3:85:cf:
1a:a6:08:42:53:31:55:f6:a0:6b:56:ef:c8:54:a8:b9:84:2c:
9b:2a:d9:0a:21:3d:c5:7e:8c:2c:94:2c:c6:c5:36:93:7f:43:
71:68:d9:40:94:1f:59:74:e0:13:0e:7d:49:da:5c:14:fd:ec:
70:49:1e:a9:fc:8f:e8:ac:e3:98:88:57:58:b6:f0:33:ae:91:
63:eb:ac:2f:e3:3c:64:19:d4:e2:4b:50:d5:86:f2:c9:10:14:
fc:50:c8:62:89:1b:76:69:5a:81:af:df:86:55:c9:5a:16:62:
31:53:23:a1:00:82:3b:49:d9:99:76:82:b5:3f:42:4e:05:7b:
64:d1:ed:51:f6:38:99:05:a3:f2:31:20:68:08:46:72:59:ac:
d8:33:30:9c:30:4e:bc:96:b4:ea:3a:e8:08:09:c7:02:2f:a1:
5d:36:18:c2:d5:03:6f:0f:77:d3:0e:8f:9e:c4:a8:9b:d3:8f:
37:a8:bb:63:3e:64:49:4b:00:3a:48:5a:a0:f8:80:cf:ce:7a:
4e:38:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:43 2025 by rpki-client