Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/vn6B1pKv4izhneVthAQoEF0ZCB4.roa
File: vn6B1pKv4izhneVthAQoEF0ZCB4.roa (raw, json)
Hash identifier: dOqz6merF8qlm4OnlgWG94pV/gi1uspTaxbCXZJH1uc=
Subject key identifier: BE:7E:81:D6:92:AF:E2:2C:E1:9D:E5:6D:84:04:28:10:5D:19:08:1E
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 059C2718
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/vn6B1pKv4izhneVthAQoEF0ZCB4.roa
Signing time: Sat 01 Jan 2022 07:58:21 +0000
ROA not before: Sat 01 Jan 2022 07:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.133.144.0/24 maxlen: 24
45.133.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94119704 (0x59c2718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Jan 1 07:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be7e81d692afe22ce19de56d840428105d19081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:91:c6:a6:8d:40:9e:bd:5c:44:78:80:99:
2e:59:e0:2b:a5:72:1a:04:df:0e:bc:7a:04:17:00:
98:1c:92:eb:d3:ea:b7:43:cb:b0:12:49:a3:67:c9:
13:a1:1a:32:c8:86:86:fe:d2:dc:20:52:53:c5:13:
ed:67:21:fb:3d:d7:99:13:3d:4d:d3:f1:7d:f2:e8:
f4:ca:f8:2f:46:48:fb:e5:b0:72:2f:69:6e:2b:6b:
1c:f2:63:ca:a1:51:42:d3:27:c2:fd:64:80:a3:73:
e2:92:14:46:bb:cb:a4:4c:57:79:18:0a:81:f7:7d:
12:37:5b:95:0e:d3:17:60:a7:cd:59:ed:31:15:b0:
2a:c8:51:68:5b:51:2b:00:84:05:9c:85:0c:4f:e5:
23:d1:9c:ac:f1:8f:ba:09:d3:36:ad:d3:c2:10:10:
e8:09:d0:22:e2:a5:39:2f:03:35:4c:eb:91:2e:3a:
79:03:da:61:30:18:30:fd:7d:3f:01:5e:64:4f:f8:
f0:0c:23:a8:37:21:2d:f2:55:8b:60:af:e1:e7:6a:
12:93:b2:fa:9d:b0:6b:5c:0c:28:c2:e8:e3:69:85:
21:f6:04:70:66:7f:0b:83:72:59:3d:4c:af:c8:d7:
88:b8:7f:d4:12:83:c7:35:0d:e9:78:0a:92:ba:65:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:81:D6:92:AF:E2:2C:E1:9D:E5:6D:84:04:28:10:5D:19:08:1E
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/vn6B1pKv4izhneVthAQoEF0ZCB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:df:04:fb:d9:e4:31:f6:9f:3b:69:05:50:fe:2f:f6:ed:93:
22:3b:0a:1d:d4:47:0c:58:8f:4d:a0:39:16:ec:72:f8:65:de:
68:52:1f:7a:cf:17:f2:63:02:30:40:12:7a:be:e2:83:56:6b:
b4:fd:93:fb:45:ec:e5:56:3c:19:bc:f9:b9:ea:b6:82:35:3a:
40:8c:4d:95:8e:0c:15:68:9e:bc:64:2c:86:e4:33:01:84:5e:
d9:7e:b6:4b:d0:3a:ee:57:81:d5:a6:54:57:fa:fc:6d:ec:d1:
53:e5:93:5f:83:07:39:64:e5:1c:43:8c:e4:31:57:c7:b9:de:
c7:55:9b:5e:95:fb:90:5a:80:97:f2:b9:66:ab:d3:ba:4e:3e:
6a:bc:4c:3c:57:13:30:a1:e6:3b:f1:26:11:eb:7d:81:85:4c:
dd:71:1a:35:8a:3b:67:a2:f8:e6:a9:7d:48:70:47:69:f4:4b:
9a:bd:53:fd:97:9e:9f:55:27:09:2b:71:b6:ec:c1:7e:38:19:
22:a5:9a:fd:77:90:cf:3a:1b:5b:c8:d4:41:ca:83:5c:28:d7:
a2:ec:81:93:0c:b1:53:31:12:b2:2e:23:63:3c:9e:4e:16:b5:
89:7f:24:61:a9:73:b1:bc:d1:05:c6:05:df:67:90:2f:5b:c3:
18:45:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:40 2025 by rpki-client