Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa
File: uNwR_K_f6bOzbWScFP-mqa5CnsM.roa (raw, json)
Hash identifier: OW1XJWOgwLGImc/25cjSYgBpxhNnUO0v8cni0LUGBwA=
Subject key identifier: B8:DC:11:FC:AF:DF:E9:B3:B3:6D:64:9C:14:FF:A6:A9:AE:42:9E:C3
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 01857030776C13F8D8B643FA0908DF8D3116
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa
Signing time: Mon 02 Jan 2023 01:55:02 +0000
ROA not before: Mon 02 Jan 2023 01:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208567
IP address blocks: 45.91.125.0/24 maxlen: 24
2a0e:f41::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:77:6c:13:f8:d8:b6:43:fa:09:08:df:8d:31:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jan 2 01:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8dc11fcafdfe9b3b36d649c14ffa6a9ae429ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:27:a9:55:bd:9e:3b:ad:91:39:81:e7:19:
a3:e1:25:8d:3d:db:44:9b:f5:a0:f8:f9:a2:ac:9c:
02:26:21:28:01:9a:b8:d7:0d:12:f2:b8:ed:cc:40:
ff:b9:4b:3b:41:fe:41:40:82:b9:b0:1c:9d:d8:7a:
fc:47:f7:c2:29:e5:f3:85:62:ba:8c:ae:d3:57:51:
ed:64:97:89:4d:4b:04:9e:3b:37:d7:9f:44:92:7d:
84:4b:7a:4c:29:db:e3:11:15:60:65:77:7c:a6:a0:
b9:07:28:6a:e7:50:65:d4:b1:a8:3b:2a:5d:1d:e7:
c7:c4:fa:ac:f4:15:b1:e4:42:1e:60:c1:5d:7c:c1:
e9:43:de:25:7d:28:01:4c:af:96:93:ff:64:6a:ca:
1e:af:93:20:49:ea:90:0a:55:b3:45:31:32:9e:aa:
4d:fb:59:46:d9:0b:18:d1:07:36:8c:e7:a6:48:ed:
20:b3:3c:fa:5c:bb:4a:d9:41:13:d6:3f:c4:f0:1e:
a4:26:5b:5a:88:0b:da:1c:ba:b1:0f:25:9b:01:a6:
ca:7f:44:45:86:89:b2:a6:f3:79:09:70:66:a2:b6:
12:62:79:73:21:d5:97:ce:28:7c:8a:2d:f1:89:c2:
14:e8:ae:ff:f6:61:e1:40:f1:d2:2b:34:b6:83:8d:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:11:FC:AF:DF:E9:B3:B3:6D:64:9C:14:FF:A6:A9:AE:42:9E:C3
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.125.0/24
IPv6:
2a0e:f41::/32
Signature Algorithm: sha256WithRSAEncryption
be:53:59:e9:70:27:04:39:92:68:4f:31:ee:c9:a8:1c:82:94:
d4:3b:c2:f4:d9:4e:cd:c9:b2:5e:5a:68:33:3d:14:38:10:ab:
8a:30:68:c9:bc:0a:1e:8f:8c:ba:71:4a:23:3d:46:50:af:ac:
b6:1a:fd:97:47:22:84:e7:b3:be:f9:e7:15:9f:4d:b5:ba:1e:
cd:02:d4:bc:fc:a9:0d:b1:75:a8:47:5a:a6:7a:4d:58:bc:66:
a3:dc:bd:9f:24:52:ee:e8:af:fc:aa:a5:ef:72:92:7c:64:f4:
76:73:2e:a6:14:08:be:6e:2a:45:00:42:15:41:ab:f2:5a:5c:
85:a2:23:2a:17:70:ab:10:ef:d6:ba:f2:a6:b9:93:82:5f:1d:
e3:91:c5:6e:37:cc:6e:65:0d:b4:f7:45:ed:c0:7e:01:9c:15:
80:f6:29:18:ab:28:32:31:68:da:38:45:1b:0b:26:d7:21:8e:
5a:32:98:4b:f7:90:f8:35:0c:61:2e:41:ad:f7:36:f8:a1:e5:
38:e3:d0:1d:60:f5:ad:60:7b:12:0c:d7:69:3f:31:f6:0d:2c:
a5:e0:f4:91:96:c4:ce:c3:d9:e6:2e:fa:62:63:6d:9e:aa:39:
ee:5b:cc:ab:88:6d:45:4d:0e:3d:85:d6:b1:be:36:54:5e:97:
08:73:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:28 2025 by rpki-client