Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/L9wm8rrUXGzbUw58VryLMRB3_HY.roa
File: L9wm8rrUXGzbUw58VryLMRB3_HY.roa (raw, json)
Hash identifier: BuSvm1qiUfg28vmWlN+PsKlLGCkxU13JV4x18O2dxJw=
Subject key identifier: 2F:DC:26:F2:BA:D4:5C:6C:DB:53:0E:7C:56:BC:8B:31:10:77:FC:76
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 018345B13E6675647E9CAF5B99C2478CFE47
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/L9wm8rrUXGzbUw58VryLMRB3_HY.roa
Signing time: Fri 16 Sep 2022 09:46:27 +0000
ROA not before: Fri 16 Sep 2022 09:46:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.0/30 maxlen: 30
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2010::/44 maxlen: 44
2a0e:eac0:2100::/44 maxlen: 44
2a0e:eac0:2000::/44 maxlen: 44
2a0e:eac0:2110::/44 maxlen: 44
2a0e:eac0:2020::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:b1:3e:66:75:64:7e:9c:af:5b:99:c2:47:8c:fe:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Sep 16 09:46:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fdc26f2bad45c6cdb530e7c56bc8b311077fc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:be:f2:90:bf:1d:69:81:dc:00:39:59:9c:
cc:07:23:dd:af:8b:70:25:2a:82:52:95:9d:81:86:
e9:e2:9c:5c:a2:c3:42:62:a3:15:dc:42:f7:68:19:
ed:91:07:28:86:40:ec:3f:29:b5:15:6b:73:be:e4:
4e:26:30:34:58:3b:61:df:e1:d8:29:cb:cf:6a:1a:
2f:0d:5e:bd:2b:41:0a:28:fb:5a:9a:a3:27:02:c1:
a1:ac:2f:f6:fd:61:3a:7e:26:20:e0:2b:0b:e6:a0:
2f:64:0a:e2:ca:2e:f0:a1:4c:d5:db:8c:76:c1:46:
77:fb:65:76:9b:d3:72:f9:3d:f9:84:a3:16:a5:a7:
4e:0f:1c:56:a9:7e:dd:61:9f:54:c7:52:02:42:ff:
2d:7a:78:57:1b:e0:80:89:6e:83:6e:d0:a6:b8:46:
f2:5f:2e:30:0f:54:83:b2:6c:bb:4d:e3:bc:37:a9:
d9:ce:64:69:1a:44:63:cf:88:18:d0:73:29:81:23:
57:c4:70:01:00:a9:db:02:fa:31:a1:1a:90:36:c5:
23:5f:e5:d2:b2:ae:a0:40:d4:ec:d5:0d:44:8e:e4:
5a:e0:c2:34:34:5c:1f:a5:79:78:f9:76:af:f1:c6:
39:2d:ab:a5:43:7a:d9:50:f8:20:8f:2d:d3:fe:d9:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:26:F2:BA:D4:5C:6C:DB:53:0E:7C:56:BC:8B:31:10:77:FC:76
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/L9wm8rrUXGzbUw58VryLMRB3_HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/30
IPv6:
2a0e:eac0:2000::-2a0e:eac0:202f:ffff:ffff:ffff:ffff:ffff
2a0e:eac0:2100::/43
Signature Algorithm: sha256WithRSAEncryption
6e:cb:8a:4e:8f:35:0b:55:19:2c:45:33:b8:d1:c2:46:78:b7:
de:ad:c0:04:ae:56:ca:aa:64:2c:79:c6:50:6b:a5:95:fd:d6:
a7:25:9c:cb:60:8d:c4:05:14:6d:70:67:5d:e6:eb:02:c9:cc:
af:13:97:66:90:74:fb:05:0f:40:7d:b5:00:a3:5e:90:f4:8a:
d0:e0:3c:24:0c:9f:4d:6d:af:9e:9a:2f:7f:dc:b1:38:a7:de:
05:f9:ea:49:d5:04:4a:36:f1:01:33:c0:96:23:37:ee:ec:c0:
d5:2c:a4:6d:0e:2e:9c:11:05:23:46:55:3b:03:8c:a3:c8:57:
57:6c:e9:61:5c:e7:c0:6c:36:b4:41:7b:e3:87:12:7c:0a:ba:
00:11:ca:d4:a9:96:81:69:10:06:4a:a1:84:10:b2:b7:27:ee:
4b:ad:76:c9:cd:df:6c:f1:9a:6d:e4:29:66:b5:cd:b7:51:d8:
cd:8d:5d:1c:94:2c:be:30:17:55:ae:42:74:be:e2:b4:3e:84:
ff:78:19:7d:ce:31:d2:3a:b0:83:90:62:22:5c:df:79:f3:43:
da:e3:67:a7:fd:b6:65:c5:f4:1a:f0:8d:b7:4b:f5:99:4c:60:
f7:53:cb:e6:a5:f6:fd:0a:27:02:1f:f7:35:b0:e5:39:65:0f:
a5:0a:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:52 2025 by rpki-client