Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mnk5lfVmv5a_y9D7xnuLh3gB2fk.roa
File: Mnk5lfVmv5a_y9D7xnuLh3gB2fk.roa (raw, json)
Hash identifier: bimIugT6NTazgmkbDmcqYx9tnLWo/jP9GEtekpAuza0=
Subject key identifier: 32:79:39:95:F5:66:BF:96:BF:CB:D0:FB:C6:7B:8B:87:78:01:D9:F9
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0188FC34CBC7AA8EE4EB39258B62D2F91EC0
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mnk5lfVmv5a_y9D7xnuLh3gB2fk.roa
Signing time: Tue 27 Jun 2023 09:34:58 +0000
ROA not before: Tue 27 Jun 2023 09:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
45.87.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:34:cb:c7:aa:8e:e4:eb:39:25:8b:62:d2:f9:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jun 27 09:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32793995f566bf96bfcbd0fbc67b8b877801d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:ec:4b:5c:02:30:d9:d4:ed:88:7c:59:84:
c3:01:cc:39:63:2e:da:9c:4a:b1:15:0e:29:fc:d0:
e4:3b:10:fb:ed:53:24:5d:a5:a2:dd:7f:58:b2:4c:
85:d3:f4:fd:19:b0:0f:3d:75:64:28:fd:e7:c5:bd:
6b:24:40:01:16:85:62:e2:3f:8f:9b:34:03:e9:cf:
b7:0a:3a:33:70:53:97:7f:3b:fe:68:60:9e:d8:70:
22:4e:f3:82:4f:fa:42:d9:b2:44:37:1c:15:0e:58:
4b:ba:40:0e:41:73:ee:42:9c:bc:fa:ac:38:2a:66:
0e:df:b9:d0:b1:19:f3:bc:38:9f:c2:8f:9d:77:8d:
d8:e7:3b:66:10:91:7c:ff:22:2d:57:fd:f7:93:36:
da:03:c3:8a:71:40:33:7c:c9:6c:59:b9:c7:b2:73:
69:3c:d9:68:a1:56:70:c0:2f:82:ce:94:01:9a:40:
c3:1b:50:d8:97:29:47:24:08:49:d1:34:60:91:93:
9f:e6:80:df:77:40:06:a6:ca:f0:56:3b:91:dd:87:
64:f6:ac:34:63:dd:ec:16:a0:24:2f:d6:5a:e2:9d:
35:f8:ba:7c:50:0c:0e:c8:59:ec:04:74:d3:e1:34:
83:e8:a4:50:58:3c:45:69:d6:42:98:20:18:4c:2a:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:39:95:F5:66:BF:96:BF:CB:D0:FB:C6:7B:8B:87:78:01:D9:F9
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Mnk5lfVmv5a_y9D7xnuLh3gB2fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/24
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
50:aa:70:6f:04:4d:2e:1a:9f:81:16:16:56:e0:88:a4:24:76:
8e:3e:36:6a:2a:4c:5d:44:78:bb:f2:32:80:92:ee:93:53:21:
b8:cc:e5:db:4a:e7:22:6d:7e:90:29:0d:30:74:a7:d7:74:64:
03:ce:15:3c:c4:34:bf:cd:bd:8d:61:65:21:8a:1a:82:44:c5:
6b:c1:54:9e:9d:a0:b5:5b:6f:3c:98:91:bf:b3:81:da:46:c2:
db:f0:2f:0b:50:da:45:84:28:d0:3f:32:92:3b:12:a4:c3:9e:
fb:28:76:e8:06:c4:cd:dc:e6:ee:06:f0:4c:fa:d9:e8:1b:92:
8b:86:5e:6d:8f:67:b0:dd:2a:0f:46:b0:58:b9:d5:d0:f0:c3:
4a:50:a9:d8:b8:fd:4a:0d:4f:a0:2a:1b:e8:91:1c:8d:c4:76:
00:ba:cd:7c:fa:bb:4e:23:fc:e7:1a:26:8b:3a:7a:cb:f6:05:
b1:a9:8a:6b:11:62:47:a1:7a:bd:d7:ba:fd:3f:0a:4c:f5:4e:
e7:32:71:11:29:99:3f:c7:e0:20:94:b9:16:ac:19:e4:30:b3:
00:15:d0:a3:a1:8f:e9:11:02:2e:83:99:83:60:ea:fa:5f:09:
37:c0:0d:2d:92:37:54:7e:70:46:d7:06:29:6c:2e:0e:12:30:
98:96:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:05 2025 by rpki-client