Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/B3B1wf6CqTVNVU16MghqScJ1fdg.roa
File: B3B1wf6CqTVNVU16MghqScJ1fdg.roa (raw, json)
Hash identifier: m2UpgwGBx0ijLDLXuhmVwoh8bbhCDrEfn8FlerXCxgk=
Subject key identifier: 07:70:75:C1:FE:82:A9:35:4D:55:4D:7A:32:08:6A:49:C2:75:7D:D8
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 09251C07
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/B3B1wf6CqTVNVU16MghqScJ1fdg.roa
Signing time: Fri 18 Mar 2022 12:08:53 +0000
ROA not before: Fri 18 Mar 2022 12:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41652
IP address blocks: 45.80.2.0/24 maxlen: 24
2a0e:3780::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153426951 (0x9251c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Mar 18 12:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077075c1fe82a9354d554d7a32086a49c2757dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:5e:37:50:20:f4:d7:e1:a9:d3:00:c2:ee:
25:b2:cc:58:52:64:5d:57:09:b8:f1:24:16:36:d7:
61:2f:8c:28:40:e5:a4:98:ea:ed:84:fb:51:a9:ab:
ef:c8:79:ad:66:55:0e:6b:d6:bc:e5:bc:88:14:ba:
66:f5:2d:7a:45:64:f9:64:41:2d:26:4a:83:bd:87:
a0:53:13:b1:26:26:c9:55:5f:95:5b:c6:30:94:f3:
ab:44:16:e8:50:a3:14:03:5f:59:0d:8f:d7:12:ca:
1b:cb:b4:62:4f:0e:3e:c9:9f:0a:92:88:ff:b5:bb:
29:4f:b9:cc:fc:23:4d:00:f1:3b:ca:ea:5f:20:24:
58:60:03:3f:1a:a7:e0:78:03:0a:8b:d2:ae:0a:6b:
55:37:08:22:88:da:0d:12:e0:5d:46:80:15:e4:dc:
a6:34:4d:14:20:45:8a:49:52:11:71:43:39:60:61:
5e:5b:ea:b1:73:e4:9b:62:ee:da:1a:45:bc:7c:86:
79:94:ca:9a:16:91:cc:92:a3:f1:b7:26:3c:89:12:
f9:a8:04:2b:d5:a3:bd:e5:42:de:8a:82:6f:fe:d2:
cf:44:34:da:e7:0e:4d:ec:25:c1:bf:11:52:93:51:
0c:8b:83:bb:15:57:30:96:45:55:d0:a2:ae:1e:90:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:75:C1:FE:82:A9:35:4D:55:4D:7A:32:08:6A:49:C2:75:7D:D8
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/B3B1wf6CqTVNVU16MghqScJ1fdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.2.0/24
IPv6:
2a0e:3780::/36
Signature Algorithm: sha256WithRSAEncryption
90:0d:97:4e:6b:59:98:da:43:d1:8f:52:2c:d2:0d:7b:fa:ce:
fe:66:da:52:c9:28:ac:d7:2a:06:bc:4c:e5:6e:c7:1d:37:11:
c3:7a:44:86:2d:89:ed:db:35:75:db:d7:41:2b:6d:d7:04:8e:
cc:ad:1b:ff:42:69:5f:18:06:3b:c5:88:bc:f7:ef:b1:c1:17:
7b:1e:ba:c9:a3:f7:fe:22:42:1f:be:b8:32:e9:e0:06:bc:9d:
8f:7f:78:74:86:ef:9f:f8:6d:3d:08:fb:0d:98:93:9b:41:39:
b6:0f:22:4f:2f:64:3e:be:26:85:42:d2:85:5c:9a:cd:d6:29:
5b:af:8c:49:61:a0:89:51:83:f6:c8:ee:4d:07:d9:f0:59:48:
aa:db:ac:e4:fc:f2:63:e5:ff:2f:8b:7e:da:e2:87:0c:d2:10:
f6:bd:61:74:3f:21:1c:64:79:9b:fd:88:21:f0:dc:48:aa:ff:
d8:30:f0:be:fd:31:77:02:53:36:a8:bb:bf:6e:e9:fb:0b:9d:
66:22:20:b8:02:6a:04:a9:a5:c3:86:24:73:9d:ce:00:e4:c3:
eb:9b:93:e3:f3:8b:00:95:54:85:bb:2d:df:6f:ec:77:aa:51:
c1:49:c0:ba:6f:21:7c:c4:99:2d:c1:c9:f7:29:16:ef:83:7d:
79:02:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:56 2025 by rpki-client