Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9DeQDuKAxeIPbpHcm_a6JoRJZq4.roa
File: 9DeQDuKAxeIPbpHcm_a6JoRJZq4.roa (raw, json)
Hash identifier: WE74ydwkq5TP/r6tNLoXu+aDRvKCcKG2zeRRIOrFlk8=
Subject key identifier: F4:37:90:0E:E2:80:C5:E2:0F:6E:91:DC:9B:F6:BA:26:84:49:66:AE
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018BD1CFC92B8EF4156A2DAC777BB4C633C8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9DeQDuKAxeIPbpHcm_a6JoRJZq4.roa
Signing time: Wed 15 Nov 2023 07:08:57 +0000
ROA not before: Wed 15 Nov 2023 07:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47204
IP address blocks: 45.131.50.0/24 maxlen: 24
45.131.48.0/24 maxlen: 24
45.131.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:cf:c9:2b:8e:f4:15:6a:2d:ac:77:7b:b4:c6:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 15 07:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f437900ee280c5e20f6e91dc9bf6ba26844966ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:35:ab:24:9d:09:0b:6a:23:dd:0e:53:79:
92:c6:0c:5b:dc:1a:3e:81:5a:07:63:83:c4:c1:ce:
0a:7e:f0:f0:d5:0f:e7:3c:32:f0:d1:b5:ad:e2:f1:
c9:1e:fd:fb:7c:3d:15:53:7e:b2:61:fc:d3:85:68:
a2:69:38:25:e1:0d:40:6a:17:5c:ff:ae:70:bc:f8:
66:69:67:d3:7f:fe:0e:63:38:26:d7:8b:41:64:70:
f0:25:6f:a5:bb:a3:0b:f6:2b:06:89:94:47:64:8e:
4b:1e:66:5a:f1:1b:f1:99:7f:58:79:0a:d0:a4:93:
90:21:2e:59:e4:66:69:7e:f1:78:1f:98:86:21:99:
26:d0:25:f3:2c:67:79:e1:ee:4c:76:3b:dd:dc:97:
f6:5b:ea:ef:ee:3d:04:47:d9:d0:d9:7b:bb:2b:ec:
21:b0:92:f4:bd:ae:aa:c2:26:61:7c:6f:52:56:5e:
1c:2b:95:0e:2b:13:87:75:96:4a:76:b1:e6:f4:15:
2e:6c:cd:75:1e:81:de:80:68:8d:92:74:5d:1d:80:
69:4f:ee:4d:26:d6:b0:db:89:44:a2:5a:4c:e7:38:
1a:6b:a0:7d:77:58:83:96:43:60:f7:b2:f4:01:33:
8e:ff:59:4c:94:20:b8:7f:26:af:a7:93:ad:f1:f5:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:90:0E:E2:80:C5:E2:0F:6E:91:DC:9B:F6:BA:26:84:49:66:AE
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9DeQDuKAxeIPbpHcm_a6JoRJZq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.48.0-45.131.50.255
Signature Algorithm: sha256WithRSAEncryption
04:37:b2:1b:3b:1f:51:2b:f9:38:ef:65:bc:e7:9b:b9:7f:a7:
46:d9:b6:ed:88:c4:c9:72:03:ab:a3:3a:f9:cf:0b:34:9a:c7:
c0:72:52:e1:de:70:47:8f:c4:d2:cf:d3:cb:8a:23:ef:35:1f:
88:5b:cf:37:ae:9b:d3:5c:45:9c:de:c2:e9:1a:44:22:71:5d:
bc:e4:76:af:87:a2:7b:96:b7:68:53:9b:41:6f:5f:5d:63:e2:
58:f4:2b:13:0b:48:31:68:88:0b:ef:7f:b1:8b:e2:6e:f1:d4:
03:e7:b5:91:5d:5e:8a:31:39:47:32:5f:a7:1a:22:81:35:d9:
fa:71:ec:32:82:7c:a5:56:05:51:7d:f2:90:16:ac:72:04:6f:
99:44:14:ee:da:7e:0b:42:05:a0:2b:a2:08:08:3b:04:51:c7:
b9:7c:93:c2:fd:ec:b0:e6:52:df:ea:c4:4c:13:68:ed:dd:5e:
39:dc:2a:41:f6:a7:9b:f2:bf:3d:fa:09:08:dd:73:72:ab:29:
a4:83:2d:ea:16:fd:6a:e4:d0:99:e5:a8:49:98:17:53:15:31:
b5:ad:22:3c:49:5f:db:b6:32:55:cc:e8:39:e2:29:8e:6a:ef:
a1:84:7f:7b:23:54:55:53:38:c7:bc:09:72:7e:62:45:a4:f2:
10:e1:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:19 2025 by rpki-client