Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BopP3pqbodt0__pGVed7iE0uyKw.roa
File: BopP3pqbodt0__pGVed7iE0uyKw.roa (raw, json)
Hash identifier: 5MenAVLfxQULr7xmnqnYDs1bmqqGqZz0m7nh5k2AFko=
Subject key identifier: 06:8A:4F:DE:9A:9B:A1:DB:74:FF:FA:46:55:E7:7B:88:4D:2E:C8:AC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B90511A90F96856071DA80FE3077F0588
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BopP3pqbodt0__pGVed7iE0uyKw.roa
Signing time: Thu 02 Nov 2023 13:55:16 +0000
ROA not before: Thu 02 Nov 2023 13:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
45.130.149.0/24 maxlen: 24
45.130.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:51:1a:90:f9:68:56:07:1d:a8:0f:e3:07:7f:05:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 2 13:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=068a4fde9a9ba1db74fffa4655e77b884d2ec8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:f3:f1:d1:d2:1b:00:3d:e2:5a:f0:d1:9e:
05:17:3d:48:f9:d7:d2:f9:a4:78:60:5d:df:06:01:
30:6f:58:57:68:ee:d9:6a:32:4d:64:48:01:67:a0:
36:22:a7:96:a7:61:6f:a8:cb:9e:ca:39:7b:85:ae:
16:79:09:83:ed:2c:8e:7d:57:75:31:ff:32:97:31:
a0:b0:83:9a:7f:23:0e:9c:15:c7:a2:7c:bf:ad:23:
e2:ef:8f:78:87:c6:b2:dd:e0:5f:d2:a5:e3:35:b0:
cf:6b:5f:d5:aa:22:61:86:87:f6:e5:55:f8:2c:7d:
c2:2e:76:46:c4:f5:97:ce:77:c4:b5:1b:e6:93:3e:
0d:37:ec:db:1a:e7:e1:fb:a5:d4:5a:76:84:8e:a7:
f4:12:96:d6:4c:8f:3d:82:e1:8d:1f:28:4a:37:93:
a1:81:a9:d0:27:2b:eb:80:6e:bc:21:7a:b4:fb:f2:
ff:7b:77:10:53:96:d9:7e:c7:1d:aa:a5:77:11:c3:
a8:6a:60:c0:e0:b7:dc:63:0c:61:61:dc:b0:e3:75:
29:aa:68:d9:f8:8a:d6:08:d5:48:f2:a8:72:bc:b1:
ea:b3:10:a7:38:2e:a8:68:c1:32:2c:1c:f1:1f:a8:
09:21:d8:d5:49:50:72:07:aa:9a:e8:3e:cc:90:b9:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:4F:DE:9A:9B:A1:DB:74:FF:FA:46:55:E7:7B:88:4D:2E:C8:AC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BopP3pqbodt0__pGVed7iE0uyKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
45.130.148.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f5:02:3e:be:ca:3f:e2:a8:75:55:2c:70:a0:2d:ca:b8:b6:
6b:c2:8c:41:bd:c8:56:a8:34:dc:2e:79:71:5a:b6:6c:2c:9f:
1e:4d:8f:6a:fb:0f:50:93:8b:44:dc:77:f0:a0:1f:41:12:ef:
84:7e:7b:17:e4:5b:ce:7f:69:fe:f5:4b:d1:06:bf:65:b0:72:
09:41:9e:a2:5d:3b:d6:41:75:fd:0c:e8:fe:44:b8:dd:e6:6a:
67:af:54:e1:c3:b8:87:05:03:db:57:d8:6d:d9:53:d1:9c:95:
76:3f:fb:2d:0c:eb:b0:04:cf:d6:a5:6e:51:26:26:af:d3:13:
75:56:4e:eb:e7:ff:75:e0:c6:fa:7b:53:97:96:08:d6:0f:be:
f0:d1:e1:9c:73:9b:bf:02:c0:5b:a5:9b:14:ad:ac:b0:0f:67:
ea:25:b5:3e:ff:ec:1b:cc:75:5d:5a:dd:08:fd:e5:8e:4f:7b:
92:41:f5:90:52:bb:4d:20:ae:7a:38:e7:2a:b8:70:24:96:33:
56:71:5a:e2:e9:48:2b:d8:19:4e:c8:5d:39:a7:2c:32:39:71:
6f:d0:7e:3c:7f:a5:62:8f:ef:47:01:e9:16:79:51:1e:d2:96:
23:21:84:10:46:da:06:ec:44:78:84:c5:fe:d0:bc:e3:59:a0:
b2:5b:f9:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:56 2025 by rpki-client