Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/5y8C3T1edTz882v5I6u36bkqVEQ.roa
File: 5y8C3T1edTz882v5I6u36bkqVEQ.roa (raw, json)
Hash identifier: trqXuq++9F5a98xRcgDR0AyqpfqePd5CgAZQaG/gpjw=
Subject key identifier: E7:2F:02:DD:3D:5E:75:3C:FC:F3:6B:F9:23:AB:B7:E9:B9:2A:54:44
Certificate issuer: /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial: 02F97560
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/5y8C3T1edTz882v5I6u36bkqVEQ.roa
Signing time: Tue 08 Mar 2022 12:41:05 +0000
ROA not before: Tue 08 Mar 2022 12:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 45.129.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49902944 (0x2f97560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
Validity
Not Before: Mar 8 12:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e72f02dd3d5e753cfcf36bf923abb7e9b92a5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:24:eb:9a:84:57:08:3f:65:0f:a1:ea:42:
de:52:a7:1d:c4:ee:0d:cf:d2:65:36:f1:b5:69:9c:
07:3d:dc:4c:27:63:d8:1e:f5:eb:11:8e:77:f3:7c:
11:63:37:ff:85:f6:91:16:ba:79:a2:71:b8:03:99:
96:89:a8:2a:3f:7d:5e:11:ef:42:b8:c4:84:b2:f6:
dd:a8:09:fd:b9:d5:a6:29:2e:2a:6c:d2:e5:a1:92:
47:c2:64:d3:df:37:ec:d1:ff:45:54:cb:40:25:42:
ac:24:0d:23:62:af:f6:46:5c:13:9b:d9:ef:bf:da:
c0:f0:51:34:2a:85:5c:44:ea:51:36:86:65:09:ba:
4c:d6:e3:aa:41:ec:dd:22:7f:3a:90:9a:e7:8c:a3:
d5:ef:e0:5b:67:2d:c5:bb:9c:30:59:dc:b7:d9:f4:
e7:f7:97:d2:90:2c:3f:42:89:f3:12:58:82:53:19:
00:b5:56:c6:89:4c:35:56:c2:64:19:bd:7a:d7:3f:
40:7c:9b:f1:c3:ab:90:54:24:4f:2d:e5:d6:c0:05:
72:ac:8d:70:53:07:1c:8e:55:52:f1:9a:92:d9:28:
47:1f:45:4f:25:4a:8c:09:c6:a9:36:49:af:d5:50:
c1:bc:98:de:15:ab:4a:01:76:8c:cf:72:b0:c8:90:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:02:DD:3D:5E:75:3C:FC:F3:6B:F9:23:AB:B7:E9:B9:2A:54:44
X509v3 Authority Key Identifier:
keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/5y8C3T1edTz882v5I6u36bkqVEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.69.0/24
Signature Algorithm: sha256WithRSAEncryption
25:53:bb:e4:23:96:b8:3b:fc:56:2a:3e:44:f3:2e:c9:c2:d5:
7a:b3:a8:24:a4:76:ff:5a:98:10:22:fc:79:16:ea:79:74:29:
2d:b0:6e:6e:d9:2b:d0:be:7f:7a:ca:f0:e9:b0:b1:99:ef:8d:
62:be:27:af:c7:63:fe:f0:0d:1f:60:cb:cc:75:2e:4a:2f:c6:
dc:c8:21:f9:36:e3:02:79:09:ca:18:a3:42:35:5f:45:7b:0d:
4b:bf:0e:80:30:cf:09:31:2e:cc:80:c8:2e:b2:d4:5b:e8:47:
ec:a3:0c:39:a2:fa:48:f5:1d:b8:68:91:0a:54:f3:20:7b:fd:
a2:10:0c:bc:ca:67:6e:30:a2:28:02:9f:31:c1:86:fe:d3:8f:
a6:7e:ee:01:07:6c:a7:9b:93:4a:95:35:0f:2b:63:15:02:09:
4a:da:96:43:92:48:1a:f3:a6:81:45:d4:ca:eb:4a:c5:67:3c:
86:a3:1d:31:33:24:15:c8:30:22:8f:e9:59:6e:16:d2:59:7f:
f2:78:ba:a9:f0:e3:3c:3f:5f:85:f9:78:53:71:f1:25:65:80:
4e:47:f6:03:72:84:0a:de:ab:99:bd:a5:28:3c:fe:48:1a:c7:
02:00:f5:93:7c:61:a3:1d:6b:fd:cd:e3:5a:70:fa:18:87:e5:
6a:f8:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:49 2025 by rpki-client