Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T5vASux78IMULhELT6XWxLCUohs.roa
File: T5vASux78IMULhELT6XWxLCUohs.roa (raw, json)
Hash identifier: uKxNK8H53JQGVrcx0LI1LYWy4ypLkAz117EcAz1hnyM=
Subject key identifier: 4F:9B:C0:4A:EC:7B:F0:83:14:2E:11:0B:4F:A5:D6:C4:B0:94:A2:1B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B134274C426959D98507A7337E519EFDA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T5vASux78IMULhELT6XWxLCUohs.roa
Signing time: Mon 09 Oct 2023 07:06:43 +0000
ROA not before: Mon 09 Oct 2023 07:06:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198767
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:42:74:c4:26:95:9d:98:50:7a:73:37:e5:19:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 9 07:06:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9bc04aec7bf083142e110b4fa5d6c4b094a21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:42:66:81:84:46:58:53:3b:e5:e9:b2:8f:
e6:ca:db:5b:51:ec:4f:85:60:6c:f3:24:40:9f:ec:
8f:21:4b:47:22:00:5a:f3:ea:38:61:04:fb:82:6d:
29:d4:93:64:90:0d:76:c3:ea:72:a2:73:52:1e:08:
8a:0e:b0:34:49:c7:de:d6:0a:18:ad:3e:1b:2e:29:
80:92:af:65:43:2d:0a:5b:48:a4:69:18:5f:fb:59:
7f:26:5f:22:55:52:31:1a:4b:da:fa:87:97:fa:15:
0e:e4:b5:ef:27:62:46:ce:2c:87:57:3b:17:17:05:
cc:f4:a6:2a:dd:89:fd:98:85:83:36:fe:f3:57:c8:
81:cf:fd:64:3a:c8:37:1e:09:ad:9b:a5:72:96:4e:
b4:2e:c6:ce:d6:c7:1a:9d:e7:c3:e0:0b:bd:d0:ba:
39:3b:4b:77:9f:cd:f2:d9:4e:3d:85:d5:84:30:66:
7d:1e:61:3d:e8:8f:16:17:54:80:21:8a:43:6e:06:
6d:b9:e5:1c:8a:b0:93:e3:41:4c:cb:a6:f5:59:62:
99:db:f7:6b:27:13:ac:8d:96:82:44:16:71:ba:33:
e0:ac:49:99:13:ce:18:61:b1:11:a3:9c:6e:c9:ca:
d5:5b:20:82:33:bf:64:a8:cb:50:b5:4d:52:62:99:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:C0:4A:EC:7B:F0:83:14:2E:11:0B:4F:A5:D6:C4:B0:94:A2:1B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T5vASux78IMULhELT6XWxLCUohs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6e:3e:7a:29:cf:ed:b6:69:bd:fd:cb:0c:6c:6f:d0:94:86:
6d:1f:e1:9a:06:99:31:35:69:3d:dd:2e:4b:17:33:16:f8:57:
a7:33:af:50:19:0d:2f:a1:32:4f:73:3c:59:1b:df:9e:1a:6a:
a3:e8:1c:b1:7d:9a:e7:cb:7c:f9:41:fc:ea:ea:27:4c:ed:7a:
d9:f3:ab:a8:d5:34:c0:29:03:2d:cf:b9:9a:6f:ef:e0:0c:95:
0e:e4:b0:99:11:3e:12:79:a9:d2:ec:49:c9:11:a9:d2:6b:9a:
66:e0:d0:a6:d9:2b:f3:67:a2:50:91:f7:3c:90:05:98:a9:d9:
e3:53:79:6b:2b:7c:a4:03:2b:9e:49:73:d9:7e:4b:56:c7:0b:
3b:21:f8:41:ec:4f:20:8e:c5:14:e2:c0:a1:f5:73:87:76:18:
5f:ef:b0:27:57:72:d7:e7:f4:db:18:7f:d5:22:84:ec:7c:70:
30:ff:ec:ee:0f:0c:f8:23:42:9d:8a:b0:0f:94:b8:33:7b:13:
42:db:a7:d1:3d:e7:a9:49:5b:60:bb:72:42:39:2e:01:0d:df:
9e:28:44:3c:df:45:03:54:ab:a2:d6:c2:ee:74:65:e4:47:a2:
3c:88:c8:b2:70:3a:43:07:ea:fa:52:45:9d:38:4f:a0:4a:95:
53:9f:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:28 2025 by rpki-client