Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/U08vhT93Qztw2ofXdCEqUmWFsvk.roa
File: U08vhT93Qztw2ofXdCEqUmWFsvk.roa (raw, json)
Hash identifier: e95gjMDMQA4HfQ7+HfoGbNYw29qk3N5zxV2nHvWzUiU=
Subject key identifier: 53:4F:2F:85:3F:77:43:3B:70:DA:87:D7:74:21:2A:52:65:85:B2:F9
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 01856CC14389DA37E6352DAAF9722FCAA17D
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/U08vhT93Qztw2ofXdCEqUmWFsvk.roa
Signing time: Sun 01 Jan 2023 09:54:43 +0000
ROA not before: Sun 01 Jan 2023 09:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61075
IP address blocks: 45.90.78.0/24 maxlen: 24
45.90.76.0/22 maxlen: 24
2a0c:b5c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:43:89:da:37:e6:35:2d:aa:f9:72:2f:ca:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Jan 1 09:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534f2f853f77433b70da87d774212a526585b2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:17:a1:19:20:43:49:24:6a:15:c8:4d:52:
6f:e7:d5:d8:f4:bb:b2:0b:98:c4:44:0c:cc:e9:8e:
20:77:27:3e:e6:d1:91:5e:62:31:e2:f5:11:30:67:
88:7b:b4:34:9f:99:4c:42:88:8e:01:be:8f:30:cc:
72:05:be:e1:5e:d0:d3:05:f0:0e:ab:07:46:eb:46:
ae:22:c2:e8:5a:c2:d8:47:44:06:a0:b5:6e:4e:2d:
07:b6:7b:11:83:23:dc:0a:17:53:cf:1e:9d:b5:94:
69:b1:f5:76:a5:d6:30:11:26:a2:a5:6d:af:39:37:
fd:71:df:d1:c8:c0:b7:4b:a6:43:4c:74:92:36:d8:
06:f9:76:db:a6:76:3a:0b:f5:7d:48:03:11:61:4f:
3b:38:92:f5:e7:f3:ee:76:87:56:6e:96:67:ba:55:
77:9e:f1:32:7d:f5:af:91:a1:9d:1b:ae:da:d8:c3:
fa:00:03:85:63:ba:f1:83:78:01:72:3c:10:80:5e:
db:0b:c8:60:22:9c:c2:c7:39:7c:e8:63:b1:fc:0c:
22:13:54:f4:9d:37:59:54:da:88:6c:6c:2c:8a:81:
22:29:95:e6:7e:8f:4c:1f:8c:76:21:48:a7:77:0c:
54:12:2e:b8:f6:15:9a:3a:42:0a:f9:db:59:a1:27:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4F:2F:85:3F:77:43:3B:70:DA:87:D7:74:21:2A:52:65:85:B2:F9
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/U08vhT93Qztw2ofXdCEqUmWFsvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.76.0/22
IPv6:
2a0c:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:79:9f:7e:f8:8a:40:2d:11:d3:bb:54:47:10:f9:f0:a5:86:
89:b8:0c:c3:ec:cb:8a:b0:1f:e2:4b:54:01:03:81:5d:84:02:
e7:c2:5f:82:e4:d8:43:b3:13:66:cc:31:4c:c6:17:02:4c:b4:
89:33:8a:5e:28:9d:d8:65:29:be:e7:f7:c0:ee:12:1b:f5:ce:
cf:01:a8:a0:5c:e1:8d:5b:e0:60:7e:6b:dd:2f:5b:d1:9d:f2:
93:4c:d1:da:11:69:a1:d8:11:b7:55:5b:72:bb:5d:2e:90:8b:
13:28:ef:4a:d7:ee:40:e1:4e:ba:01:17:4a:81:6a:7f:ed:a2:
10:8b:a1:3f:89:e3:1b:ce:88:c7:d8:23:cb:58:9a:4b:21:1e:
96:82:a7:f9:0e:c0:65:5f:70:a1:3f:d3:65:cd:81:de:e2:ee:
2e:13:65:0e:60:4c:8c:d4:f5:b4:7b:8c:d3:95:2d:a7:39:29:
0b:e6:cf:bb:ec:86:7a:0d:5c:73:c3:be:f3:28:2c:f6:a9:5d:
c4:2f:12:fe:bb:8a:92:f6:30:a1:8f:08:8a:80:97:5f:fd:aa:
a5:cf:8a:73:f4:ca:e3:7b:7f:c8:1b:5a:ea:d7:a1:c2:2d:5d:
60:a4:ec:d1:a8:79:b3:ae:62:e3:bd:d9:4a:e9:e0:e8:98:4b:
0d:aa:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:17 2025 by rpki-client