Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qZP5ekTq_F9Fe844Y0ukQINlPS4.roa
File: qZP5ekTq_F9Fe844Y0ukQINlPS4.roa (raw, json)
Hash identifier: a1fp6a3GNhblwX2pHy4Ir5fVScSroy8rzgqkxs1JoQE=
Subject key identifier: A9:93:F9:7A:44:EA:FC:5F:45:7B:CE:38:63:4B:A4:40:83:65:3D:2E
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0185F2FA5442F462D08DC4FDCB6CE0EDC1F2
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qZP5ekTq_F9Fe844Y0ukQINlPS4.roa
Signing time: Fri 27 Jan 2023 11:26:09 +0000
ROA not before: Fri 27 Jan 2023 11:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:fa:54:42:f4:62:d0:8d:c4:fd:cb:6c:e0:ed:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 27 11:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a993f97a44eafc5f457bce38634ba44083653d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:21:ad:33:ad:c9:d8:41:59:43:92:b1:8e:
db:71:3d:be:a9:95:ac:04:73:1f:5c:46:4a:49:ee:
43:95:86:1b:88:6d:fc:98:72:5e:d9:07:b9:1a:0d:
4a:e5:7b:9f:88:ff:1b:aa:91:4c:8b:92:db:6f:f0:
4e:62:56:87:72:af:81:f8:d7:c0:68:e4:ed:9c:04:
1e:25:1a:54:dd:bf:0b:da:14:55:1f:ff:78:6c:1b:
10:24:93:9b:45:a8:6c:5d:55:58:d5:7a:b8:2b:f8:
01:ca:8a:c2:f3:0d:e9:63:0e:74:ea:78:bc:fb:79:
a2:dc:13:cf:4e:22:49:01:7c:a2:4a:87:1b:93:02:
89:36:67:79:41:d9:14:66:eb:40:41:40:a4:de:a4:
cd:d7:7a:4b:85:88:d3:ef:22:a4:cd:c2:ba:df:7c:
42:34:5a:10:b9:cd:9a:3a:72:be:62:78:cb:c1:9e:
e4:0e:5a:8a:c3:2d:33:79:1f:df:b6:cd:37:0d:6a:
43:dd:6d:b0:be:1e:56:f2:1d:1c:59:27:de:e5:46:
ba:09:3b:f3:b4:9f:6a:79:26:57:f4:d6:08:b9:92:
d6:f2:df:4f:53:ff:9c:fd:c8:4c:28:74:96:c0:0d:
e5:59:1c:6d:54:06:24:4f:d9:07:5d:af:f5:17:35:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:F9:7A:44:EA:FC:5F:45:7B:CE:38:63:4B:A4:40:83:65:3D:2E
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qZP5ekTq_F9Fe844Y0ukQINlPS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.228.0/24
45.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:44:df:19:45:d7:be:07:91:1c:13:d6:5e:84:1b:5b:15:98:
89:e4:ba:1d:f0:33:40:7d:58:0e:09:39:27:b8:83:d4:fb:51:
04:93:97:2e:31:8f:cd:7b:78:0e:9f:20:94:f6:17:f7:c6:bd:
98:88:85:72:b0:73:35:05:d4:01:59:ba:af:08:06:19:b8:55:
b6:5d:2a:b1:7b:0a:48:ef:ce:bd:0a:79:16:9e:da:17:f3:e3:
c6:19:3d:55:60:f5:ea:79:3c:df:1e:d4:09:e5:44:f8:46:14:
f2:80:50:6f:97:dc:4b:86:1b:29:04:97:b2:0b:0e:6c:12:56:
1a:56:70:b4:48:0e:75:7e:ec:8e:b2:a6:9a:12:1f:76:29:79:
80:27:64:b9:dc:16:d8:6f:7e:55:93:77:2e:ce:98:c7:86:52:
78:42:c3:7f:d6:7b:18:5f:d5:e4:d5:b6:1d:71:e8:5a:9c:41:
36:b8:b7:75:1e:2c:82:ba:bc:67:b0:bf:47:82:8a:72:4d:ae:
65:5b:94:57:f3:0e:7d:c4:0a:93:01:70:c7:c3:bf:0f:6a:9b:
9b:b7:a8:06:93:c2:65:d5:a5:3d:80:a3:a5:c1:35:00:00:03:
38:ee:2e:3d:2c:b9:80:11:f2:fd:2f:85:ad:f0:cb:d1:7e:76:
68:0d:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:22 2025 by rpki-client