Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X6BdRK3yUL5uWfgs6IUQpq3sZhs.roa
File: X6BdRK3yUL5uWfgs6IUQpq3sZhs.roa (raw, json)
Hash identifier: IqB6zSV1Fe5bAcNaDXiWlR/mm4d2Aj86fIm1uHbHSN4=
Subject key identifier: 5F:A0:5D:44:AD:F2:50:BE:6E:59:F8:2C:E8:85:10:A6:AD:EC:66:1B
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0215BF
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X6BdRK3yUL5uWfgs6IUQpq3sZhs.roa
Signing time: Thu 03 Feb 2022 16:26:32 +0000
ROA not before: Thu 03 Feb 2022 16:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59645
IP address blocks: 45.91.12.0/22 maxlen: 24
2a0e:a40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136639 (0x215bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Feb 3 16:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa05d44adf250be6e59f82ce88510a6adec661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:2e:4f:04:fa:b1:9c:f6:8e:0d:d3:a2:3c:
85:7b:9d:08:0c:f1:64:bf:ee:72:d8:81:68:77:a1:
aa:02:67:ce:91:75:df:ef:3d:79:61:b6:c7:ee:4a:
e4:89:57:e7:9a:91:09:ee:d3:4d:79:8a:72:82:ae:
ed:c2:af:35:9f:ca:a7:91:62:78:ef:d2:39:3f:9b:
c3:3b:9c:85:aa:52:43:fe:24:56:5d:4a:f4:c7:f1:
5a:ae:89:32:ba:57:71:f1:89:f1:8e:b7:0b:36:92:
c2:f6:99:5f:81:44:86:59:34:1d:e1:af:94:4b:dc:
ec:80:13:e7:f5:ce:f1:f5:4e:3e:24:87:f4:d4:e4:
1a:b3:51:4a:3b:6f:18:e8:19:75:45:9b:f1:f9:68:
fc:19:8f:e8:da:5d:05:9c:69:ed:25:53:25:6d:bd:
54:0f:31:d5:e4:d5:1c:b8:2e:48:66:3e:99:4b:d8:
1f:9a:77:94:14:70:83:e9:dc:90:79:8a:93:31:c3:
f8:ce:97:15:c8:af:2d:43:e9:86:ae:58:de:84:52:
b8:7d:e2:39:eb:78:a3:45:cc:1c:6f:66:06:60:70:
a1:47:c8:a7:b5:5d:2d:ca:0b:73:86:47:2f:0b:46:
05:0a:c7:8d:58:ea:ba:5e:fb:97:5c:8a:9b:4f:86:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:5D:44:AD:F2:50:BE:6E:59:F8:2C:E8:85:10:A6:AD:EC:66:1B
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X6BdRK3yUL5uWfgs6IUQpq3sZhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.12.0/22
IPv6:
2a0e:a40::/29
Signature Algorithm: sha256WithRSAEncryption
41:d4:b5:58:f6:2d:15:e2:91:25:80:09:9b:65:56:5c:e7:ed:
d3:94:f0:29:4e:e9:2f:35:17:6a:61:d2:e2:e8:2e:e8:3f:72:
06:90:48:47:39:8b:80:f6:22:06:50:28:f8:3e:9c:f9:af:d1:
d5:ac:bd:10:0d:1a:07:3f:aa:f2:5d:02:57:9d:c8:0a:6d:64:
de:77:81:3d:78:e6:84:d9:92:5c:9f:0e:83:ec:d5:67:5a:ab:
d3:4f:a0:6d:3d:55:68:70:ae:81:0b:c1:63:b4:7f:e1:fe:c5:
21:e3:f2:df:6a:39:8f:de:e4:da:0e:f1:ac:e1:b3:96:62:72:
bc:1a:84:c1:0c:56:89:ba:d8:ab:7d:d5:33:8c:c9:ee:a7:9b:
7d:fe:07:e3:eb:ca:b1:fc:4b:97:af:21:bc:d3:92:ef:d1:fa:
18:73:d9:63:39:96:b7:1f:85:fd:1a:e7:7f:e1:00:a9:13:6b:
8d:60:19:aa:29:ae:ab:0a:ad:fd:dc:8d:09:03:f2:40:33:b8:
3e:45:f5:39:4c:73:7b:e4:94:ed:e8:0e:eb:47:a5:93:c7:68:
e9:2c:ac:92:3e:1f:86:46:d8:d6:b2:4d:24:51:7d:d1:b7:fc:
ec:79:3a:48:97:d1:33:58:14:bb:1a:0a:26:7f:de:58:53:79:
70:d2:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:35 2025 by rpki-client