Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/buVmmH-5qtw7ejG-JPqKZ0e7lGw.roa
File: buVmmH-5qtw7ejG-JPqKZ0e7lGw.roa (raw, json)
Hash identifier: mANr5rDuLzNgWeLEQyUuy+1SNyzqk0uKK6mzD57ojaM=
Subject key identifier: 6E:E5:66:98:7F:B9:AA:DC:3B:7A:31:BE:24:FA:8A:67:47:BB:94:6C
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 08AFAB3B
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/buVmmH-5qtw7ejG-JPqKZ0e7lGw.roa
Signing time: Sat 01 Jan 2022 13:02:02 +0000
ROA not before: Sat 01 Jan 2022 13:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44996
IP address blocks: 45.10.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145730363 (0x8afab3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 13:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ee566987fb9aadc3b7a31be24fa8a6747bb946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:8b:1a:2b:09:45:54:cf:4e:40:df:df:78:
2e:8e:2b:13:31:34:62:3e:e5:84:12:00:05:30:df:
71:f5:ec:1d:fb:77:34:54:e7:b6:d3:a6:fd:33:98:
0e:a9:12:aa:a2:63:3a:7a:76:75:ba:be:bb:5a:50:
d9:14:cd:a2:5c:f5:d7:6c:52:a8:9d:95:a1:3d:bc:
80:43:aa:19:05:14:60:5f:dd:b8:5e:2d:6e:63:a0:
ad:55:49:32:f4:db:13:5f:59:d8:c6:30:d6:4c:ae:
f9:70:90:a0:85:89:6a:b0:e9:e5:37:00:bf:3e:25:
92:3a:89:f3:e4:62:57:66:30:8f:a0:b1:35:1e:65:
bd:64:99:1c:d0:69:7e:e1:8e:fa:fa:88:0b:fe:28:
96:76:91:99:6b:45:a0:16:2e:1f:8d:0a:34:3e:86:
d7:22:c1:16:20:bd:8f:8d:93:87:8f:83:ab:14:73:
30:e0:80:f2:69:be:2f:0e:a7:92:34:d0:c1:d1:09:
9b:87:f3:cc:42:68:89:c7:13:c5:e9:4f:e6:a1:40:
0f:9e:aa:b3:97:81:ff:30:2d:e5:03:c9:30:79:82:
93:c1:fb:a1:a4:1b:af:dd:b7:3d:81:fb:d2:7b:f6:
04:8f:ae:b6:5d:25:a9:cf:0f:0c:d7:c9:f2:31:c2:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:66:98:7F:B9:AA:DC:3B:7A:31:BE:24:FA:8A:67:47:BB:94:6C
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/buVmmH-5qtw7ejG-JPqKZ0e7lGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7f:91:50:1e:66:1a:4c:d8:f1:20:36:64:c7:07:4d:e8:92:
ef:1c:cf:7d:f4:71:27:44:6f:33:db:fc:92:65:9b:b3:c8:09:
3a:38:60:2b:24:ff:77:c0:61:b5:33:be:16:7a:d6:24:9c:3b:
a5:b1:b8:dc:a0:02:0c:59:2a:b3:86:94:1e:f8:b0:ac:80:e2:
32:3d:8b:ab:df:34:39:83:c6:c3:6f:d2:3f:bd:d8:36:fa:c3:
95:23:c5:d7:c9:22:14:41:b5:41:43:29:57:b9:5f:44:fe:10:
27:b5:b2:fd:a9:06:4a:36:dd:f5:0c:33:9c:b0:c4:bd:ec:11:
8f:9f:e0:8d:1c:40:24:93:af:40:fa:c8:78:86:ca:95:d7:0d:
51:a6:ab:4b:61:73:96:c2:19:26:a7:d8:b3:0d:af:e1:5b:46:
01:86:d6:b6:d7:b0:4d:7b:78:b8:f9:97:51:71:f3:ce:8c:7f:
c2:a3:1b:32:bc:64:4b:04:58:81:55:ad:6e:c1:f1:5b:97:40:
c6:a4:40:68:6a:5e:51:ad:98:8e:53:7b:13:53:72:d0:42:aa:
b4:30:e0:a8:88:d6:81:81:0f:a1:3a:c5:d8:a6:4b:c6:ac:24:
c0:80:a9:d5:66:72:5d:86:f6:64:b7:5b:7f:9e:52:ce:97:91:
82:be:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:26 2025 by rpki-client