Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/0YBkF9iPiM1yCpw5s61eWZIJyX4.roa
File: 0YBkF9iPiM1yCpw5s61eWZIJyX4.roa (raw, json)
Hash identifier: cx0POCAslg4HWhCLv73ty9uEbMYlsM8bIOPAY7iGOkg=
Subject key identifier: D1:80:64:17:D8:8F:88:CD:72:0A:9C:39:B3:AD:5E:59:92:09:C9:7E
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01856FA6D4FB2689E4B3740B12255C685229
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/0YBkF9iPiM1yCpw5s61eWZIJyX4.roa
Signing time: Sun 01 Jan 2023 23:24:42 +0000
ROA not before: Sun 01 Jan 2023 23:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 45.137.208.0/22 maxlen: 24
2a0b:fd82::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d4:fb:26:89:e4:b3:74:0b:12:25:5c:68:52:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 1 23:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1806417d88f88cd720a9c39b3ad5e599209c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:a8:a7:7c:6c:19:bd:84:af:6d:08:51:bf:
1c:c1:11:b5:ac:f8:94:37:c2:e2:0c:4b:c0:3e:71:
ce:45:e9:c9:2d:98:9c:e1:e8:73:69:1c:2a:a5:21:
f7:75:13:37:fa:c6:2f:5c:e9:53:1a:e7:e4:79:38:
ad:03:e2:b0:cc:c4:fe:b6:33:d2:c6:6e:77:19:e4:
69:6c:24:4e:db:a7:6a:85:c0:77:1b:28:13:3a:ce:
68:0f:4f:b4:36:78:73:d8:bd:31:f4:08:b5:8a:dd:
ba:1e:50:3c:7e:a5:2a:c9:83:42:30:2e:83:e1:b3:
0f:66:8e:b7:bf:59:52:ca:b6:ae:8f:87:32:20:a1:
86:38:67:af:26:99:1b:8f:d3:04:05:11:39:bc:39:
84:10:fb:4d:7d:1f:6c:c2:2a:1e:c3:7c:0b:7f:4d:
4c:99:de:34:d2:13:c9:62:68:9d:87:c7:dd:3f:d7:
15:a1:52:8b:d9:50:7f:ef:c0:6a:93:2c:11:eb:f4:
ce:2b:bf:45:39:9b:61:6e:8d:0a:5a:3c:1b:d5:cd:
93:61:d5:7c:7b:59:0e:79:65:62:1b:c8:ce:02:be:
54:15:2c:f9:69:6f:7b:f0:9a:c6:30:c9:79:9c:22:
f1:33:e4:8d:d8:18:0a:c2:f6:8c:a9:09:45:cc:05:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:64:17:D8:8F:88:CD:72:0A:9C:39:B3:AD:5E:59:92:09:C9:7E
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/0YBkF9iPiM1yCpw5s61eWZIJyX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
IPv6:
2a0b:fd82::/32
Signature Algorithm: sha256WithRSAEncryption
4f:af:d0:34:2d:57:a5:f9:6b:fb:f8:58:e0:ff:9d:61:9f:68:
ed:9b:2c:a4:fb:56:18:11:ad:89:db:6e:af:97:65:8e:5d:dc:
0a:ea:90:9e:50:ea:9b:a8:b8:31:17:c1:90:5a:f0:cb:97:75:
12:49:76:a1:1b:0b:82:5d:1c:ec:6e:f0:51:cb:e8:54:0c:43:
08:a1:79:96:e4:60:84:bd:b0:be:62:a9:4e:8a:04:75:fa:c1:
90:e6:39:5d:1a:41:10:84:42:7a:13:94:26:d2:8d:57:88:b6:
d8:99:3e:88:72:3c:24:9a:1d:79:33:5b:29:bd:74:08:df:0e:
ec:09:b9:40:18:73:8a:2e:4e:e3:84:a3:7e:56:02:fb:3e:c0:
ff:8a:45:47:04:37:4c:46:83:a6:91:53:a5:ca:07:ad:fe:bc:
79:4b:61:70:4e:cc:39:4e:e3:18:ad:8e:6b:87:ee:78:08:26:
88:70:99:b5:c7:11:1a:b8:4e:ee:54:8d:83:8a:2c:3e:76:85:
b3:ea:36:80:25:35:3c:24:a1:93:ab:f7:79:5f:a9:d4:ed:1a:
18:3a:ff:14:11:54:53:98:59:64:1f:6f:ba:16:a8:e3:fe:88:
f5:05:3e:90:48:67:0e:81:4c:f0:22:e2:2b:20:32:59:70:0f:
2a:e8:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:44:59 2025 by rpki-client