Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa
File: XuDo-3sq0S3gJ4cohym1r4_xT0A.roa (raw, json)
Hash identifier: 46Gvvd57wBwle38Rpwq7IK/aKtl2MxQa72Jva8awl3Y=
Subject key identifier: 5E:E0:E8:FB:7B:2A:D1:2D:E0:27:87:28:87:29:B5:AF:8F:F1:4F:40
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 02AA3EAA
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa
Signing time: Sat 01 Jan 2022 13:01:18 +0000
ROA not before: Sat 01 Jan 2022 13:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328543
IP address blocks: 45.149.148.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44711594 (0x2aa3eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 13:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ee0e8fb7b2ad12de02787288729b5af8ff14f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:47:23:c4:66:0d:e7:bd:7f:33:80:9a:16:
ec:3c:e5:5f:a8:53:5b:7e:8c:51:49:76:33:f1:34:
96:62:52:88:cf:94:4f:ad:2d:09:5d:d9:a3:a2:19:
1b:c9:d9:39:2a:1e:23:65:eb:f5:cd:7b:3b:2c:28:
62:8c:ba:13:69:ae:0b:0b:92:09:14:49:a6:94:7c:
05:05:63:f2:33:bb:a6:c9:49:5c:60:0e:d4:b9:38:
33:5d:c7:a0:75:03:9a:15:d2:1d:fa:ca:26:75:48:
2c:4e:62:b3:3f:cf:38:40:0f:85:31:20:bd:e5:d6:
91:24:60:96:25:ea:61:01:77:a5:c0:9f:4c:20:b6:
ac:9e:f0:76:05:f4:52:d4:56:5b:b4:d7:a5:b7:2b:
af:dc:ee:35:9d:10:7b:dd:9c:30:4f:e0:41:37:3b:
60:cf:c2:31:e8:39:ba:7a:ec:e6:f5:4b:ed:b0:7b:
32:74:e3:64:6f:11:28:0d:40:bc:d7:17:7b:52:16:
8a:c6:79:77:e1:6a:5d:99:7f:6e:f9:ab:e4:4d:cd:
40:01:e4:3e:00:7d:d0:0a:94:a1:00:65:37:c6:3c:
dd:8a:7e:72:0a:11:d4:dc:5e:8e:b7:38:5b:ab:7d:
69:f4:a7:b5:7a:ae:d8:61:77:e3:ff:61:f3:27:45:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:E8:FB:7B:2A:D1:2D:E0:27:87:28:87:29:B5:AF:8F:F1:4F:40
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.148.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b2:99:02:f1:c3:17:99:2e:2a:8d:00:4b:9e:75:8c:b7:4e:
50:a6:3b:89:f6:35:36:11:ff:ee:89:71:98:46:42:4b:a1:7e:
08:13:28:d9:18:72:6d:4e:bb:49:26:2b:f3:b0:4e:c6:ff:05:
f3:df:22:93:f7:bd:cd:24:f9:1f:75:63:6e:0f:dc:48:21:82:
f5:74:db:63:7a:53:b2:d0:03:bd:7e:dc:94:83:d9:eb:77:d9:
95:62:3c:71:04:d5:12:7d:52:35:38:86:6b:18:3f:ca:b6:e6:
bc:4c:25:2c:1d:35:ab:97:24:fa:e1:9b:d8:21:da:a1:2e:4b:
c4:49:c9:e2:37:27:42:c4:52:40:da:bd:8f:8f:99:0c:0c:f1:
36:4f:83:49:43:2e:66:5e:13:df:bf:81:ff:70:8e:32:a0:32:
bc:92:19:98:4b:c4:ce:a0:b1:03:ac:a2:8e:6e:82:54:63:54:
36:dd:01:78:61:a4:58:43:0e:1a:69:4c:54:bb:fb:92:2e:31:
5e:c9:be:cd:46:5d:8b:f9:66:a1:87:01:53:5f:c8:11:23:7b:
94:a6:7d:31:26:a1:a5:6a:dc:86:bf:1d:23:ff:0e:1c:58:9b:
ff:a6:4a:4e:40:17:35:3a:c5:ed:e9:de:ca:74:9f:a5:25:5b:
e0:8a:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:07 2025 by rpki-client