Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/ubtFWfHJ9QGNWEumouuenkmGQNw.roa
File: ubtFWfHJ9QGNWEumouuenkmGQNw.roa (raw, json)
Hash identifier: b2T8r79SGGd/opUCn4ABfBPhvqjQW+gozC4sNGYtjCc=
Subject key identifier: B9:BB:45:59:F1:C9:F5:01:8D:58:4B:A6:A2:EB:9E:9E:49:86:40:DC
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 018570675E0ADFAA3A5D7E1427CE99E3AC4B
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/ubtFWfHJ9QGNWEumouuenkmGQNw.roa
Signing time: Mon 02 Jan 2023 02:55:00 +0000
ROA not before: Mon 02 Jan 2023 02:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.133.144.0/24 maxlen: 24
45.133.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5e:0a:df:aa:3a:5d:7e:14:27:ce:99:e3:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Jan 2 02:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9bb4559f1c9f5018d584ba6a2eb9e9e498640dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:f4:90:80:6b:26:82:fc:a4:bb:b1:b9:f8:
e7:89:2c:d4:ff:e8:78:d4:49:87:a0:7a:95:e1:0e:
b4:d2:ce:fe:65:b0:e8:dc:14:ef:ea:33:c8:43:15:
35:23:82:83:4e:29:40:e8:9b:50:ac:16:f1:d8:65:
26:1c:2a:98:02:27:73:ab:d9:04:0d:6e:2c:5a:7e:
2a:29:85:de:b4:43:26:bb:10:67:f7:c8:a7:36:5b:
63:d5:0c:72:6a:87:93:6d:e2:b2:41:3e:29:4b:a9:
76:ec:dd:48:b6:4a:97:99:5c:97:ad:45:2e:47:cb:
7d:a0:db:a5:26:3c:db:32:06:96:d8:bf:cf:d8:1d:
1e:24:18:e7:83:62:2b:04:42:ed:fd:40:bf:a7:98:
53:ed:6c:88:06:b5:b8:b8:a2:78:12:e7:97:ae:54:
23:be:3b:c3:35:e8:c3:4b:0b:2b:2b:bd:5f:55:32:
b7:c8:43:15:95:b0:3c:c6:60:68:4b:9c:89:7b:3c:
13:6a:84:ab:1b:43:e0:cb:46:32:f0:a7:b2:ca:84:
ec:3e:2a:09:a4:a8:1c:dc:b4:f9:17:80:33:d9:d2:
bf:39:81:bd:22:30:54:b4:a5:12:c4:b4:05:3b:b1:
5c:dc:ac:ce:ed:b0:11:23:16:75:02:6e:30:e6:69:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:45:59:F1:C9:F5:01:8D:58:4B:A6:A2:EB:9E:9E:49:86:40:DC
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/ubtFWfHJ9QGNWEumouuenkmGQNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.144.0/22
Signature Algorithm: sha256WithRSAEncryption
39:2d:a9:1f:12:67:08:44:e9:f6:b2:37:65:e7:b7:e6:ec:e4:
4c:35:1d:53:de:4d:e1:a5:79:a5:d4:f1:ba:6e:01:37:d4:9e:
69:ce:9f:e8:3a:eb:00:97:51:21:90:dd:49:f6:3c:b7:22:8e:
10:14:a1:bd:1f:66:f8:07:d7:0a:8b:38:9c:81:98:93:c4:f1:
14:be:4f:43:39:2e:60:99:c4:59:d8:a6:fa:0d:51:9f:3c:a0:
ae:8a:5b:40:d5:dd:7e:fe:c7:76:27:ff:3c:7c:94:b6:82:ee:
0b:2d:16:e5:3d:10:5c:5e:95:a0:5f:e9:dd:d9:5b:d4:71:93:
50:40:2e:55:a6:50:bf:85:48:67:04:4f:ed:e7:35:27:9d:f9:
fb:d5:4b:f0:51:13:dc:18:f7:f7:f9:d6:6b:48:97:36:a0:f8:
1e:bd:46:7a:be:ee:e0:1f:8e:1b:7c:fe:16:e7:aa:d4:d0:cc:
16:7b:9e:69:d5:f5:3e:43:a7:37:66:97:0a:c7:9e:be:10:79:
e9:33:af:b3:1c:39:7e:c5:42:a2:d2:f3:d3:0a:d7:d7:5c:42:
39:9c:07:ce:09:09:43:93:13:b2:60:5c:9b:19:0b:57:bf:8b:
10:07:49:c8:96:a5:1e:43:3c:e8:ab:d5:31:98:09:ce:09:eb:
76:ef:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:31 2025 by rpki-client