Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/23UPcqkYmlS3sTjZShBbN4TafLs.roa
File: 23UPcqkYmlS3sTjZShBbN4TafLs.roa (raw, json)
Hash identifier: qM46paiCyGLHcZ8ivLeg5+qMgCXRITCgFBIbtA8/XIc=
Subject key identifier: DB:75:0F:72:A9:18:9A:54:B7:B1:38:D9:4A:10:5B:37:84:DA:7C:BB
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0187FFD089226B5394C824D2E44B5D0FDD98
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/23UPcqkYmlS3sTjZShBbN4TafLs.roa
Signing time: Tue 09 May 2023 09:21:09 +0000
ROA not before: Tue 09 May 2023 09:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35224
IP address blocks: 45.93.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:d0:89:22:6b:53:94:c8:24:d2:e4:4b:5d:0f:dd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: May 9 09:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db750f72a9189a54b7b138d94a105b3784da7cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:3a:90:36:68:16:58:15:c7:f8:e7:08:c7:
3c:72:dd:a1:91:04:4a:64:20:35:73:8c:7a:10:f0:
89:49:61:99:2f:e9:ee:28:4e:90:0a:6c:e1:85:ed:
d0:0c:2a:88:76:8c:58:bd:89:a6:aa:0c:1e:77:19:
77:03:8e:ba:80:b0:1f:13:59:0e:ca:84:5f:89:f4:
c3:98:0a:9c:42:74:0c:1b:90:42:8e:04:6d:7d:5c:
d8:43:43:bf:c2:d4:0f:5c:0b:95:55:56:ab:27:47:
ba:9d:c0:a5:b5:b0:df:05:2d:b3:57:a2:ac:9d:d0:
c3:8e:dd:74:4e:6a:a6:bb:90:53:d0:d5:cf:4f:27:
66:2d:66:74:88:ff:52:9d:a7:ef:a6:9d:74:8a:b0:
e2:cb:21:35:d4:71:c1:25:fa:a8:e5:77:28:46:e6:
d9:0b:63:41:05:e0:4d:ca:7c:c2:ef:a5:c5:e5:f1:
27:70:ff:24:c9:51:77:00:eb:cf:8a:80:74:64:5e:
73:95:7b:9a:ee:5c:e8:06:60:4c:cd:72:81:df:33:
3a:1a:95:fe:db:e1:91:96:9f:74:07:b5:53:55:49:
30:16:7c:2f:82:b3:41:b9:ac:d4:8b:f1:4f:0b:ca:
d5:97:53:f5:9c:a1:13:97:55:5f:c8:cd:d4:93:78:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:0F:72:A9:18:9A:54:B7:B1:38:D9:4A:10:5B:37:84:DA:7C:BB
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/23UPcqkYmlS3sTjZShBbN4TafLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
64:06:11:6f:24:f6:3f:fd:f5:2b:3d:d8:01:af:d1:bb:f7:00:
2d:22:c2:32:d6:21:af:ef:36:dd:c7:7f:68:92:83:ad:a9:dd:
26:fd:d0:dc:10:78:40:89:0c:d8:2f:fe:ac:70:d1:3a:a4:a0:
63:8b:b6:96:19:a1:ac:9e:40:7c:f0:36:28:97:27:97:39:05:
b9:fe:81:bc:fb:b0:b1:29:54:36:48:06:7f:52:ef:6c:14:b4:
11:14:e6:04:cc:5b:2a:a9:fa:cf:cf:bd:aa:88:f0:82:95:ef:
cb:b8:a7:46:5b:12:ac:db:09:e9:61:29:92:da:eb:94:50:f3:
63:b7:83:19:a8:fb:7d:cd:77:98:aa:2e:d8:ad:f9:a6:68:e3:
c0:ef:01:14:1d:e7:14:ff:41:ea:e2:36:83:a9:8a:1d:a1:68:
12:cc:3f:4e:92:0e:58:17:e4:cc:14:b3:38:0c:cb:d7:15:5a:
e7:f9:3a:0a:42:8b:0c:c6:e4:c0:65:3e:40:e9:30:29:83:e8:
1a:82:e3:96:c3:fd:cd:12:e5:f6:92:66:4b:ad:b6:f3:06:4f:
7c:4a:40:06:ae:b6:82:44:bf:db:04:7e:f7:c2:02:e6:0c:a7:
b8:9c:ca:ad:00:6c:de:8c:34:46:ac:5c:9d:43:d3:05:b6:16:
32:43:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:16:22 2025 by rpki-client