Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/c5bZ48vJDMI1igxuqXUExoQCfJ8.roa
File: c5bZ48vJDMI1igxuqXUExoQCfJ8.roa (raw, json)
Hash identifier: MhSBAddfU14Aa24t5A6g4WJTGoVcLxr2kkfgehvuZe4=
Subject key identifier: 73:96:D9:E3:CB:C9:0C:C2:35:8A:0C:6E:A9:75:04:C6:84:02:7C:9F
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 02C6FD
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/c5bZ48vJDMI1igxuqXUExoQCfJ8.roa
Signing time: Thu 05 May 2022 11:46:45 +0000
ROA not before: Thu 05 May 2022 11:46:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42280
IP address blocks: 45.87.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182013 (0x2c6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: May 5 11:46:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7396d9e3cbc90cc2358a0c6ea97504c684027c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:34:c0:46:53:21:c2:87:73:e8:59:db:c8:
c0:20:75:4a:6c:6d:4c:5b:1b:f9:5a:0e:8a:01:c2:
94:ad:6c:a0:15:d9:ca:fc:d7:cb:c4:79:3c:d7:54:
ec:04:db:5c:6d:a1:60:b5:24:6e:3a:94:64:4c:27:
62:9a:7b:b1:9f:d7:06:54:37:27:d7:ec:66:de:32:
b1:80:e4:0a:04:ad:1a:8d:44:6f:8b:c5:e1:6c:68:
15:ea:55:52:d3:e5:27:84:2b:5c:78:d0:2c:e5:57:
9e:9f:9c:d6:a0:68:e4:5f:c6:32:a8:68:fa:c7:1c:
ba:4d:fa:e5:ff:c3:92:62:9f:86:36:96:e8:17:a2:
d4:82:a7:67:2e:06:b7:4f:17:6e:ed:db:c9:22:a8:
fd:8e:5b:28:2c:2e:2f:59:48:16:48:21:d7:57:d8:
8c:4c:bc:20:52:9b:ac:5f:86:07:35:13:82:aa:b4:
14:ff:0d:a2:c3:40:ae:22:a5:4c:75:18:b5:14:a3:
fc:2e:c5:2a:dc:4c:43:e9:f0:9b:3c:1e:f0:2a:51:
c6:3a:61:26:b7:97:5b:f0:35:01:ec:ef:a3:bc:0b:
33:b4:5a:7a:bf:be:4d:e8:93:2f:3b:c4:71:fc:c1:
0b:d6:29:1d:36:ec:ab:db:0e:33:e7:91:a2:21:a5:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:96:D9:E3:CB:C9:0C:C2:35:8A:0C:6E:A9:75:04:C6:84:02:7C:9F
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/c5bZ48vJDMI1igxuqXUExoQCfJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:d7:f6:54:5f:5a:99:36:32:53:98:3f:b9:73:1d:a3:63:
a9:a9:73:56:dc:48:58:98:45:bf:7e:9a:98:53:84:63:b3:41:
65:54:1d:a7:ef:73:11:8d:3e:31:c9:a3:03:97:f7:3a:45:f6:
65:a7:01:06:a9:fb:38:8a:ae:5c:09:41:da:16:ba:15:27:e2:
84:33:c1:8f:cf:ab:ae:eb:14:4b:6b:2a:05:71:ac:1d:e3:9f:
05:de:16:af:c0:e2:de:f3:c9:ee:54:8f:09:8c:39:20:68:f0:
65:e3:2b:3a:93:e0:45:88:b9:02:3b:8b:fd:73:34:0b:48:ea:
13:08:c5:91:7b:bd:99:00:7a:93:24:c8:3a:18:24:72:b6:b0:
7d:2b:dd:4c:a7:c3:cd:c4:94:4d:71:30:b9:0a:ef:a1:7f:65:
59:21:63:f9:49:f9:0a:f8:2a:87:30:ab:59:f0:d3:18:59:63:
76:6b:55:c3:0d:d7:23:5e:43:5b:d3:eb:df:0e:97:1a:e7:fc:
cb:59:06:53:51:00:70:2f:32:f0:e8:90:3e:a7:82:35:1e:46:
fc:fe:79:28:1f:51:e9:d5:58:50:0e:e6:85:48:92:65:c0:31:
30:c4:04:8b:6a:57:98:d3:3b:8d:b8:e7:67:47:a7:96:49:4a:
ab:4d:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:03 2025 by rpki-client