Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1bRC2SCjmADxSO0tGbs5QZlABxg.roa
File: 1bRC2SCjmADxSO0tGbs5QZlABxg.roa (raw, json)
Hash identifier: jIMMZyWi1OgUKeckDOyDhiCykULxGpPTpMF5YE1KK/U=
Subject key identifier: D5:B4:42:D9:20:A3:98:00:F1:48:ED:2D:19:BB:39:41:99:40:07:18
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018456E0CD3BBC31F313D94F6D969B8BACB7
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1bRC2SCjmADxSO0tGbs5QZlABxg.roa
Signing time: Tue 08 Nov 2022 10:54:43 +0000
ROA not before: Tue 08 Nov 2022 10:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 46.175.130.0/24 maxlen: 24
45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:e0:cd:3b:bc:31:f3:13:d9:4f:6d:96:9b:8b:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 8 10:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5b442d920a39800f148ed2d19bb394199400718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:65:31:bc:ea:0e:32:9c:eb:de:ad:70:4b:
a1:19:58:00:57:fa:72:38:06:b4:b0:a9:cc:ce:f8:
ef:04:1c:b1:a1:34:a5:69:53:8d:b5:58:18:41:13:
04:54:7f:1a:10:f2:69:61:c0:7a:fd:65:31:29:0a:
94:fc:4a:8b:db:d7:73:a1:95:08:8d:d6:f0:b0:e3:
2f:54:f5:b6:cb:ae:bb:80:6c:97:a3:a9:90:89:59:
a0:ab:5c:47:1c:4c:3d:72:27:62:9c:e8:5f:ec:0e:
c2:cf:52:1e:c1:dd:be:01:dc:f2:26:62:9b:da:af:
a6:c1:24:9a:49:93:54:00:2b:31:bc:8c:25:f0:9b:
ef:03:7e:69:6b:33:20:ca:2f:2b:f1:12:42:2d:67:
38:a4:11:49:97:0d:3c:d6:5c:fa:0c:2b:38:0c:04:
5b:ca:65:be:70:c1:ba:c1:f3:a8:b1:6b:e5:ba:3c:
6e:69:eb:15:7a:d0:d4:5a:ab:d5:68:b2:fd:fe:f3:
02:76:c9:c7:08:6c:1b:d6:cb:4c:c4:8a:c9:1c:be:
9d:12:a9:8a:20:e8:f3:69:19:d1:91:8d:3c:c1:aa:
8f:7b:4b:a5:c9:97:10:a0:cb:24:f4:05:4c:53:45:
e7:91:37:27:b9:93:73:57:a9:d6:12:64:e7:64:cd:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:42:D9:20:A3:98:00:F1:48:ED:2D:19:BB:39:41:99:40:07:18
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1bRC2SCjmADxSO0tGbs5QZlABxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
95:21:d0:cd:17:ec:e1:c8:40:63:41:f0:18:82:1c:38:2b:21:
d7:48:b5:cf:99:fa:c7:71:b9:1f:dd:7e:53:c3:da:1d:05:f1:
3d:e9:d5:5e:8f:5b:f4:94:74:c5:a1:30:cf:43:51:d3:ad:1d:
13:f5:7f:24:2e:ff:35:10:a3:ea:d1:91:33:35:8a:cf:06:0f:
36:95:5f:b0:c7:b0:d2:c6:e3:f6:75:3a:f6:3f:89:04:5d:c1:
a7:3a:8c:15:de:fd:fd:f1:bf:97:82:9c:4b:4d:79:3d:1b:12:
e5:d5:f9:ed:ba:f5:03:40:b0:2c:70:6f:e7:d9:cb:a8:90:77:
31:36:3c:1b:14:a2:72:f7:b9:bf:4e:ff:41:28:7c:2b:da:0f:
df:76:7c:1f:9f:bb:c1:4d:19:5e:65:2a:03:72:d8:1e:a4:d3:
54:f2:b3:d8:35:c8:4e:fd:1c:75:c0:f0:6d:e6:c3:44:b4:25:
f5:9b:d6:6f:ca:73:af:39:41:38:ef:bf:ac:f9:7a:a7:61:69:
6e:b6:c1:a4:dd:fa:b4:d4:00:2e:78:d4:fd:87:c5:d9:18:2e:
dc:4a:ea:2d:44:da:9f:d4:bf:85:6a:5d:38:85:82:e7:90:1f:
c9:64:71:4e:be:cc:1a:e7:a2:94:7b:e9:39:44:ad:aa:f2:80:
3e:af:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:15 2025 by rpki-client