Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Beq2fuzdhghQmgmJ_kIZlwSxWTA.roa
File: Beq2fuzdhghQmgmJ_kIZlwSxWTA.roa (raw, json)
Hash identifier: FeUZ0/Cag0aauRIOJnkHVZNCrQnWPembVjEWwBKYsVU=
Subject key identifier: 05:EA:B6:7E:EC:DD:86:08:50:9A:09:89:FE:42:19:97:04:B1:59:30
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07A3FF65
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Beq2fuzdhghQmgmJ_kIZlwSxWTA.roa
Signing time: Sat 01 Jan 2022 16:05:58 +0000
ROA not before: Sat 01 Jan 2022 16:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.92.125.0/24 maxlen: 24
194.33.36.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.15.164.0/24 maxlen: 24
45.83.116.0/24 maxlen: 24
171.22.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128188261 (0x7a3ff65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05eab67eecdd8608509a0989fe42199704b15930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:59:21:57:8c:9f:9b:a9:7d:a3:bd:2d:3d:
a0:4b:2b:16:90:6d:ba:09:e4:8e:d2:e9:35:cb:a7:
d3:06:dd:8c:a4:6b:31:00:75:0e:75:b2:1c:5e:3c:
09:50:68:3a:cd:1d:67:b5:8a:39:3a:f7:7d:51:b6:
7a:64:f3:dc:2e:ea:3e:bf:97:37:d5:b2:c5:37:9d:
40:e8:44:fd:e8:02:df:6c:35:94:f0:b9:42:c9:e5:
41:5e:d9:a6:27:73:c0:57:11:7a:65:36:5d:8d:10:
60:64:cc:74:c2:c7:94:7d:9a:7f:e7:c5:dc:98:93:
47:8f:48:0a:2b:44:d1:31:d3:7f:62:81:21:c2:69:
77:d4:0a:c7:04:47:ef:95:b2:bb:ef:42:e0:8b:03:
83:f6:37:c8:80:2c:97:29:3c:18:00:94:4f:c9:e2:
da:b9:e1:c9:52:d6:64:cd:6e:9b:ca:70:ca:01:f7:
5b:5d:95:a9:3e:e8:81:95:9d:be:88:bd:b8:ac:25:
29:1b:b1:27:77:28:40:48:69:05:9f:63:cb:ba:80:
bb:48:81:61:b1:b6:7b:81:fe:08:2f:e9:ac:f4:a8:
fa:9f:24:b2:5f:6d:6a:d2:56:7b:44:3f:08:10:8f:
3c:e2:ed:d8:13:19:17:b2:37:93:0a:a8:9f:8e:21:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:B6:7E:EC:DD:86:08:50:9A:09:89:FE:42:19:97:04:B1:59:30
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Beq2fuzdhghQmgmJ_kIZlwSxWTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.164.0/24
45.83.87.0/24
45.83.116.0/24
45.92.125.0/24
171.22.125.0/24
194.33.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b8:0b:4e:32:84:7a:05:a9:db:ea:df:ce:32:2b:8a:43:7e:
c4:1a:81:cd:2b:b1:9f:58:73:c4:14:72:b8:11:af:34:7d:54:
b7:83:01:50:8a:ec:fa:32:b4:68:08:a2:7f:73:0f:3a:0e:6b:
94:41:75:83:13:54:cb:ba:2b:03:b7:18:d0:4b:f6:87:43:1b:
40:13:c6:2c:28:94:6a:96:0e:27:3d:d7:22:58:d6:ac:bc:c2:
7b:63:9d:9f:53:e0:8a:ed:3e:bd:d3:cb:71:cd:21:ee:de:76:
3c:07:1d:27:28:cd:b1:82:ec:e4:c6:c4:29:44:99:f7:8f:14:
05:5a:11:36:a2:84:ed:08:b4:b3:75:98:6b:96:d0:07:d8:49:
97:45:b2:05:92:f4:6c:db:58:82:98:33:e6:0d:e9:46:ac:84:
14:d2:6f:52:2a:4f:a7:80:72:22:0a:f5:5c:90:6f:c7:89:df:
3a:7f:58:77:81:a6:e0:bf:2a:d7:c1:72:e4:40:68:e7:74:5d:
89:9b:f0:83:26:ba:f9:1b:6d:b4:87:01:d1:5f:94:4d:cc:22:
2f:6f:38:a1:91:40:cb:a9:40:40:bd:5a:4d:d1:04:d6:5a:8d:
7a:ed:cf:dc:da:be:b9:1b:3c:cf:1d:55:a9:38:28:6a:6e:0d:
cd:b9:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:00 2025 by rpki-client