Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/UFEGxMscgpkonRL2CQISMLwqfWY.roa
File: UFEGxMscgpkonRL2CQISMLwqfWY.roa (raw, json)
Hash identifier: gBB2GIW3KND/spvf6sZNxAw3QtNTaCFfLTCKLqZH/YE=
Subject key identifier: 50:51:06:C4:CB:1C:82:99:28:9D:12:F6:09:02:12:30:BC:2A:7D:66
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 07365C27
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/UFEGxMscgpkonRL2CQISMLwqfWY.roa
Signing time: Sat 01 Jan 2022 16:11:31 +0000
ROA not before: Sat 01 Jan 2022 16:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208702
IP address blocks: 45.154.93.0/24 maxlen: 24
45.154.95.0/24 maxlen: 24
45.154.92.0/24 maxlen: 24
45.154.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121003047 (0x7365c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jan 1 16:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505106c4cb1c8299289d12f609021230bc2a7d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:39:be:ff:d2:8b:ac:6d:df:c3:cb:56:bd:
c1:1a:c3:00:03:36:0a:d2:38:53:e9:04:4f:fd:06:
88:b5:c4:3c:eb:2c:fe:c0:b2:e8:81:93:e0:46:2a:
f5:ca:98:82:43:dc:bb:e6:3a:7c:30:1a:7d:57:54:
73:e8:ab:5f:d1:a1:ad:df:bd:44:a8:bc:b4:4f:1f:
fd:98:33:03:83:b1:42:de:66:2a:96:c9:3b:a5:1c:
69:b1:8f:33:75:dc:f2:20:29:f7:f1:9a:3f:f7:9b:
bb:82:f7:b2:15:a1:3b:10:44:0f:0f:97:77:3e:b0:
08:c5:02:e5:46:7b:70:31:70:4a:dc:20:eb:d5:d6:
68:45:a3:9a:c8:5d:44:45:70:37:7c:3e:03:a1:28:
97:b5:19:9b:48:b1:4c:45:d3:23:77:ba:02:87:c4:
64:91:cb:c3:ac:27:fd:e6:da:0e:37:6c:58:e3:c8:
46:b8:f7:e6:bc:3d:c8:34:b9:10:29:37:e6:ec:38:
75:3d:e8:a5:e3:bd:5f:03:17:20:8d:6c:c9:ae:5c:
f6:39:35:b1:e8:14:2a:26:82:74:62:f1:56:c8:48:
64:e6:e1:fd:e5:0f:4e:96:f4:87:ca:92:c4:b6:5a:
41:52:cd:fb:c1:93:84:45:5b:d4:64:e5:f7:2f:d4:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:06:C4:CB:1C:82:99:28:9D:12:F6:09:02:12:30:BC:2A:7D:66
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/UFEGxMscgpkonRL2CQISMLwqfWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:41:57:04:af:67:a7:14:03:e7:41:3d:85:9f:89:3d:79:90:
a9:c1:1c:5c:8a:e5:9f:32:06:21:04:0b:00:70:62:6c:27:cb:
4a:15:c3:19:f9:c3:6e:7f:44:c2:2d:b7:1a:cf:5a:07:ce:6a:
a3:d3:62:42:e1:37:72:24:e6:c0:1e:66:b3:26:5b:60:9c:85:
0e:a8:d3:4d:8a:57:f9:da:05:1d:4e:88:68:c8:b5:c7:20:06:
58:53:d3:f0:03:2a:de:5c:3d:49:a3:26:1f:92:2a:cf:61:9c:
91:25:6f:ba:12:af:67:80:44:20:11:df:6b:8d:4e:ef:34:66:
5e:9e:eb:cf:15:69:dc:70:3b:dc:48:0a:43:31:3f:48:b6:01:
31:9c:37:fa:65:2d:e7:a4:b6:32:34:d7:98:47:8d:db:54:e3:
96:f5:ea:8c:9d:41:73:a0:7e:d9:4c:36:24:63:4f:22:93:d0:
ee:7e:57:66:31:f5:14:1f:58:f8:a8:0e:d1:1c:f6:e5:9a:6d:
47:5c:27:49:17:5e:be:02:fa:a2:60:cd:fd:e8:dd:01:eb:8e:
79:ae:cf:18:e6:5a:d4:8c:14:aa:b4:bf:ec:44:83:1c:b3:f7:
08:b7:4e:65:43:b3:4a:10:84:66:ea:99:d3:b2:65:b1:7d:34:
82:6b:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:32:00 2025 by rpki-client