Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa
File: 48y5UlGOS0_rdWscsGuo29FUiIo.roa (raw, json)
Hash identifier: 2UQRlUvpGpBgq/8y4tlOj1zS0qxuFCumvWiRrUIAxH4=
Subject key identifier: E3:CC:B9:52:51:8E:4B:4F:EB:75:6B:1C:B0:6B:A8:DB:D1:54:88:8A
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 018B49591D1013C6C0F6C71CC8069E0F07FF
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa
Signing time: Thu 19 Oct 2023 19:10:58 +0000
ROA not before: Thu 19 Oct 2023 19:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64286
IP address blocks: 45.139.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:59:1d:10:13:c6:c0:f6:c7:1c:c8:06:9e:0f:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Oct 19 19:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3ccb952518e4b4feb756b1cb06ba8dbd154888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:2b:4e:5a:61:e5:60:a2:d6:01:55:a8:08:
73:b4:31:42:38:16:e0:fb:e4:f4:0f:9e:3e:9f:22:
b3:ee:e1:89:54:fc:e7:13:f8:81:36:a2:a4:be:c1:
f5:f0:23:a1:ba:d1:d5:24:29:3f:2a:e1:23:91:40:
db:eb:4b:90:1b:24:63:4c:49:06:4a:e4:a1:ca:c5:
a2:c6:32:32:ed:58:89:01:07:10:8d:9e:71:fc:bc:
78:97:fa:c0:e1:ad:ca:87:bd:c6:da:f2:a6:eb:d1:
41:e9:0a:f6:6d:d9:08:67:06:a4:7a:3d:0d:58:ab:
ef:40:d7:36:3c:eb:a4:60:08:3e:36:32:79:96:08:
b0:d2:2c:b0:32:fa:20:dc:08:49:88:81:09:d6:f3:
a0:e2:54:4a:b6:d5:72:c3:6b:a5:22:d9:0d:ea:cc:
8b:0b:81:26:a7:c8:e6:9f:d4:62:88:c4:a7:fb:6a:
6c:ab:2e:c1:47:83:31:8e:af:d4:dd:03:e8:0e:27:
4c:a8:a1:42:36:0d:25:ad:14:c9:1c:4c:85:1d:f3:
6d:fe:1f:bb:0c:63:28:78:66:e0:5f:78:3a:7a:94:
a7:42:22:fb:e3:69:0e:38:dc:e6:8a:eb:da:30:ee:
58:9e:98:2b:ff:59:4c:5f:a4:72:cd:88:f3:a6:c3:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:B9:52:51:8E:4B:4F:EB:75:6B:1C:B0:6B:A8:DB:D1:54:88:8A
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5b:8c:2c:55:a4:28:cc:de:c3:e9:c6:ac:2b:7f:a6:b9:54:
16:a7:d2:3f:7a:42:e1:3a:24:e0:a7:8a:74:49:0d:94:29:ae:
9c:6d:f0:7c:de:28:8b:37:fb:81:f7:97:90:f6:1d:95:75:19:
ac:ce:2b:9b:d2:52:38:42:58:af:59:39:c6:de:10:30:ba:4c:
a9:a7:6e:b8:41:5d:aa:31:9c:4f:0f:1f:5e:15:d0:34:ac:82:
1c:94:6e:4d:0d:cd:48:7a:aa:7e:8c:a9:78:d6:ca:88:40:e8:
79:49:78:a8:38:75:51:d0:b9:15:a7:a9:1e:ab:21:15:54:61:
2f:ce:f1:df:1f:ec:6e:a8:78:67:b2:5a:9c:63:b2:04:7d:be:
7b:31:f6:69:08:20:aa:f7:82:3a:44:12:4b:a2:f4:2b:94:1e:
b0:ed:60:84:27:0a:4c:18:86:f3:3c:8a:2c:40:b4:c0:04:cb:
7f:39:ca:63:1f:ab:54:1a:b7:7b:74:ff:52:f2:01:75:7a:1a:
3f:c1:81:82:3f:c4:aa:c5:5a:a9:6b:cc:8d:1d:9b:3c:51:29:
8c:50:15:de:1e:e4:38:92:d3:bc:44:11:ad:d2:f2:b0:fa:35:
96:44:9e:34:58:f0:b4:b1:54:fa:14:a9:de:a8:a1:2d:25:74:
2d:fe:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:39 2025 by rpki-client