Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SIUuOb7Ihsr3KOokc7vDBT4iLq8.roa
File: SIUuOb7Ihsr3KOokc7vDBT4iLq8.roa (raw, json)
Hash identifier: xShPVC/otRNAYA21T9dadpiu7Z/M3HEqzigzlZJT0mI=
Subject key identifier: 48:85:2E:39:BE:C8:86:CA:F7:28:EA:24:73:BB:C3:05:3E:22:2E:AF
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 05FF5BB1
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SIUuOb7Ihsr3KOokc7vDBT4iLq8.roa
Signing time: Fri 14 Jan 2022 11:23:06 +0000
ROA not before: Fri 14 Jan 2022 11:23:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136744
IP address blocks: 45.151.96.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100621233 (0x5ff5bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 14 11:23:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48852e39bec886caf728ea2473bbc3053e222eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:b4:de:e2:ee:45:6a:41:2f:73:d9:9f:8b:
c5:a5:56:9a:f8:93:20:0b:0d:bf:1a:eb:6d:b2:49:
4b:46:6f:02:55:55:98:ef:73:d5:14:7a:c4:fb:b2:
18:9e:ad:72:63:62:33:74:2d:ae:e1:58:4a:f0:34:
00:59:67:c5:11:78:9d:c8:23:8e:2b:ab:74:4d:8d:
12:fa:eb:94:64:71:95:79:89:03:d2:c0:74:cb:ec:
cd:58:c9:25:0a:63:d9:9a:c2:92:2a:fa:08:53:33:
df:c0:e5:b3:cc:d9:3d:f9:70:1e:e3:20:71:c7:fd:
96:58:83:48:4f:e8:1a:c5:7b:1b:72:4b:cd:74:07:
bd:12:46:04:7a:f3:66:df:5a:8c:fd:65:57:30:2a:
ce:c6:a1:f3:59:64:ce:10:7c:9d:84:af:fe:41:7e:
90:15:f7:59:56:67:b2:b5:bd:1b:ec:c0:5f:25:88:
f9:82:ca:9f:2f:af:c9:00:89:2b:61:cc:14:ec:64:
ea:20:a2:0e:90:30:9d:e5:c3:d9:04:3c:85:d2:66:
fb:7f:3e:8e:37:b9:fc:d9:fa:94:ca:14:69:c4:66:
b8:80:82:ac:a8:53:84:08:ac:15:f5:bf:34:58:ff:
5c:7b:28:44:67:ed:d6:cc:50:24:1f:1f:30:06:6f:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:2E:39:BE:C8:86:CA:F7:28:EA:24:73:BB:C3:05:3E:22:2E:AF
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/SIUuOb7Ihsr3KOokc7vDBT4iLq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/24
94.137.73.0/24
Signature Algorithm: sha256WithRSAEncryption
51:90:31:b7:b6:5a:26:93:a8:1f:62:0b:b9:b3:f2:82:18:42:
75:eb:96:03:53:c3:9d:0a:72:57:83:ae:43:c2:9e:06:2c:64:
7f:a8:01:d3:a3:eb:f1:1d:c1:8d:70:fa:88:ec:1d:f4:b0:fe:
2e:1e:e4:19:4b:f7:00:a8:8e:19:e5:2c:ee:d0:4c:56:1b:7f:
09:20:8c:b9:27:f0:3d:80:d4:b3:b2:cb:d5:95:21:1c:e3:3e:
e3:cd:29:52:13:ba:a2:0c:60:41:9b:f9:05:04:c0:af:cb:0e:
f0:10:1e:0c:c2:41:1b:4a:4e:23:e7:43:56:1b:d8:36:c7:65:
ab:df:30:fa:bf:b4:63:68:83:ad:49:83:09:f4:83:7d:64:01:
bb:12:04:04:47:8f:77:9d:1c:02:a6:ec:f0:d7:69:3e:49:10:
ba:6b:76:da:7c:81:a4:b9:9e:8c:27:6f:06:c7:f6:ac:51:71:
3f:7f:f5:2b:66:a0:26:41:d1:57:b8:bd:ed:28:53:3f:76:6b:
9f:e8:2b:35:6d:50:fb:a5:2b:b8:c0:45:dc:74:39:62:4b:bd:
ff:a2:ab:ea:c0:a2:64:e2:7c:78:90:97:b6:b6:10:11:ee:b5:
b1:50:b0:44:1c:49:f1:e8:9a:d7:6d:25:5f:96:cc:0b:25:a0:
97:f9:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:27 2025 by rpki-client