Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/1-1NM-BfaCrHzb_Sff7UUJBm5kSc.roa
File: 1-1NM-BfaCrHzb_Sff7UUJBm5kSc.roa (raw, json)
Hash identifier: CskLMwD05XfEQDlC09GCSUNmz3QQUIQFPmyj2IeiNCQ=
Subject key identifier: FB:53:4C:F8:17:DA:0A:B1:F3:6F:F4:9F:7F:B5:14:24:19:B9:91:27
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 0185730CAF69B597C4646AE4A541F47A8C19
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/1-1NM-BfaCrHzb_Sff7UUJBm5kSc.roa
Signing time: Mon 02 Jan 2023 15:14:49 +0000
ROA not before: Mon 02 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42675
IP address blocks: 45.148.16.0/24 maxlen: 24
45.148.16.0/22 maxlen: 22
46.227.64.0/21 maxlen: 21
193.187.88.0/22 maxlen: 22
2a0c:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:af:69:b5:97:c4:64:6a:e4:a5:41:f4:7a:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Jan 2 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb534cf817da0ab1f36ff49f7fb5142419b99127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:86:a5:2a:29:72:ef:a4:f7:90:c4:59:8f:
e8:cf:5d:87:c3:e7:ae:db:36:de:2a:e7:f2:30:98:
e0:ea:24:8f:68:4c:0b:fb:8d:4f:97:e4:f0:7a:f3:
16:22:5f:fe:43:f4:a2:f7:15:69:50:35:f7:79:70:
67:72:c3:c6:0f:8c:56:5e:38:5b:1b:a4:ac:56:2d:
3b:9c:8b:06:85:d7:19:cc:eb:b8:29:c6:26:f5:3e:
ec:b4:69:a3:69:61:f4:31:58:90:3c:01:3a:83:fa:
5a:78:81:99:d0:48:aa:01:c7:0d:68:27:e8:76:ba:
7a:ec:8b:a3:cf:b9:d6:a7:bc:a8:62:ce:44:53:e7:
e4:57:96:97:fe:de:45:c0:28:e1:19:e7:78:00:96:
88:c1:fd:c1:51:ef:e1:52:59:30:71:9d:61:f2:3d:
0b:3f:f1:e5:7d:db:1c:33:57:90:95:40:c9:0e:dc:
fd:b3:77:b0:ee:0b:14:33:63:b5:a6:ad:b1:f9:ad:
97:2d:7b:2b:12:28:c5:5c:3c:e8:26:27:f9:f7:24:
05:f5:c8:bf:bd:62:18:54:00:5f:40:1b:3d:2f:69:
a6:5b:a5:b2:d3:db:92:b5:0b:4c:f9:5f:b7:a7:5c:
25:06:a2:5e:78:f7:c9:61:01:fb:6b:0c:c4:fa:c5:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:4C:F8:17:DA:0A:B1:F3:6F:F4:9F:7F:B5:14:24:19:B9:91:27
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/1-1NM-BfaCrHzb_Sff7UUJBm5kSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.16.0/22
46.227.64.0/21
193.187.88.0/22
IPv6:
2a0c:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:f9:d5:2c:f9:61:1a:bb:04:bb:b4:8a:33:d3:93:d6:8c:01:
3f:54:e1:6e:84:c6:c3:cf:eb:c5:94:a9:aa:2e:d8:3a:94:ea:
98:35:40:c2:3d:0e:8c:2b:b1:89:18:46:f9:e5:85:95:5c:d3:
76:1a:83:ee:94:34:04:ae:01:f2:49:76:55:e0:94:e3:61:af:
48:1d:4c:a6:27:28:12:5a:3e:55:c2:74:02:f3:c9:81:15:dc:
48:7f:dd:7d:f7:af:6d:91:47:37:c3:09:ef:3e:96:a4:f1:c3:
0b:a0:5b:60:ee:93:29:94:bc:54:c6:ed:d3:89:20:9a:4d:3c:
89:bf:2c:43:e7:d5:6f:85:6f:f4:23:3f:e5:6a:48:b0:85:19:
bf:87:07:8f:ac:cf:5f:2d:79:ef:37:72:0d:a4:88:af:da:4a:
75:bc:50:07:84:4b:c9:d2:91:2d:bd:09:03:2e:56:ff:1b:62:
39:4e:44:de:ca:4f:bc:8b:88:96:22:48:8a:b6:07:7a:30:6a:
6e:b8:58:3a:65:65:da:b5:8e:67:10:18:28:94:ab:ec:bb:c3:
f1:6a:42:e5:c8:44:24:d6:40:3d:5f:2c:18:25:80:b4:2e:67:
19:23:dc:47:63:7e:b1:0f:29:ab:5d:a0:a8:50:f4:d3:61:16:
39:45:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:14:55 2025 by rpki-client