Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/sRUHz_MA2iuT9yzhsR6ODo2agwY.roa
File: sRUHz_MA2iuT9yzhsR6ODo2agwY.roa (raw, json)
Hash identifier: nl0ig+d5fQuqnTWdNsJuu+l2TKfdXQ6mlnp6/2c28MY=
Subject key identifier: B1:15:07:CF:F3:00:DA:2B:93:F7:2C:E1:B1:1E:8E:0E:8D:9A:83:06
Certificate issuer: /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial: 087F9BB9
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/sRUHz_MA2iuT9yzhsR6ODo2agwY.roa
Signing time: Sat 28 May 2022 04:07:14 +0000
ROA not before: Sat 28 May 2022 04:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208064
IP address blocks: 45.157.132.0/22 maxlen: 24
2a0f:4280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142580665 (0x87f9bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Validity
Not Before: May 28 04:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b11507cff300da2b93f72ce1b11e8e0e8d9a8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:ff:26:37:d0:0a:4a:25:69:c5:4e:3f:62:
31:de:64:b3:7e:ef:85:a0:12:02:da:81:04:18:a4:
f7:60:3c:c2:4f:9d:aa:2e:07:1b:70:e1:0e:02:3d:
74:95:f2:1f:3a:69:55:73:fc:ad:6c:f7:5b:99:ed:
a8:7d:b9:11:e4:8f:53:fc:db:5a:ae:93:c1:ac:4c:
e3:ee:fe:39:08:de:f7:61:d6:1e:31:6c:99:99:68:
c7:49:4a:af:b4:07:58:38:75:1b:3a:bd:29:87:8a:
22:a9:e4:b9:b2:9a:24:67:82:85:56:f7:64:31:84:
c2:40:6b:00:c5:5d:f4:5c:19:be:79:40:ef:1e:4c:
d5:26:3e:84:48:44:08:a6:fa:31:5c:bf:1e:44:eb:
6e:7f:5a:07:fc:00:0b:e8:75:36:d7:3b:53:0a:b4:
04:2e:dc:cf:18:66:17:18:0a:f3:e1:65:ba:a3:98:
64:7c:b5:fc:67:01:f8:30:cb:7c:14:5f:eb:79:8d:
27:60:ae:7e:c4:07:6e:f3:2a:72:c4:5f:2e:b9:30:
ee:0d:31:b1:26:b0:83:5b:40:bb:dd:ef:91:57:5d:
43:2b:d3:37:51:d3:d0:28:6c:0b:a6:eb:df:b5:86:
15:9c:0a:3e:1e:92:92:51:cb:fb:23:9f:ba:67:9a:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:07:CF:F3:00:DA:2B:93:F7:2C:E1:B1:1E:8E:0E:8D:9A:83:06
X509v3 Authority Key Identifier:
keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/sRUHz_MA2iuT9yzhsR6ODo2agwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.132.0/22
IPv6:
2a0f:4280::/29
Signature Algorithm: sha256WithRSAEncryption
6e:e5:42:13:c2:7d:fa:58:4f:dd:68:b8:f4:1a:d0:1a:f4:af:
e4:c1:e9:68:06:f9:d0:a4:6c:be:fd:fb:a3:f9:7d:f9:16:dc:
33:d1:18:fa:d5:1e:9a:d7:e9:5a:f4:cb:2c:7a:1e:44:77:6c:
25:22:1e:b0:61:ac:db:23:98:28:4b:79:aa:07:a7:6c:b9:e4:
2d:e3:32:a1:17:a0:ea:ab:72:8c:68:dc:93:3e:3b:07:72:f8:
9f:ca:f4:71:81:f3:29:4e:99:e2:65:9f:dc:c2:f5:15:03:0e:
8d:5c:6f:1e:19:42:a2:05:35:88:b8:a2:cb:ec:c8:2c:e2:b3:
89:42:5b:d8:b3:b0:33:8b:91:82:ff:24:d8:fa:e9:1b:af:dc:
9a:32:4b:e0:98:f6:2f:63:11:d3:ef:01:83:a1:09:90:7e:1f:
26:3a:0c:8d:5b:21:0d:0a:e5:30:b9:f5:bc:5a:8a:fd:ff:30:
c3:1f:8b:53:db:d6:30:ad:a7:0a:52:ed:b1:63:2f:ae:a1:e5:
a9:e2:4d:c4:6b:01:6e:70:31:66:ac:a7:69:8b:af:2f:a3:14:
f6:9b:8b:64:04:78:94:98:17:83:42:75:e3:7a:a0:1d:b2:5a:
f6:1f:90:72:32:5b:ab:62:73:9f:5a:e3:09:7e:5f:93:68:60:
eb:67:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:02 2025 by rpki-client