Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XN31WviW_jDr_o1DOnKqbwhzmow.roa
File: XN31WviW_jDr_o1DOnKqbwhzmow.roa (raw, json)
Hash identifier: o++Qp9xXuh6jKjWZ6bxCnBVpdwEWg3Hpb9XcDmf66FE=
Subject key identifier: 5C:DD:F5:5A:F8:96:FE:30:EB:FE:8D:43:3A:72:AA:6F:08:73:9A:8C
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01856CF87B5C5C198CDD9DA4B3D9E9876D7D
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XN31WviW_jDr_o1DOnKqbwhzmow.roa
Signing time: Sun 01 Jan 2023 10:55:01 +0000
ROA not before: Sun 01 Jan 2023 10:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203172
IP address blocks: 45.129.147.0/24 maxlen: 24
2a0e:5b44::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7b:5c:5c:19:8c:dd:9d:a4:b3:d9:e9:87:6d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jan 1 10:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cddf55af896fe30ebfe8d433a72aa6f08739a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:45:d8:bc:b1:7f:46:65:62:31:40:4c:9c:
56:9a:e7:ba:03:e0:0b:80:11:a5:2a:51:a6:c6:7b:
22:db:ac:44:85:d1:3d:19:f6:f3:f6:00:2d:a3:5c:
c3:de:a7:d0:95:00:5e:dd:7d:3c:f5:3e:f2:88:a1:
a1:18:7e:f4:10:31:32:3d:f4:7f:9f:60:f9:64:49:
66:8f:97:26:01:07:97:c7:6f:12:9e:d2:cc:a5:de:
0e:dd:e0:35:a2:27:5d:08:b4:a1:15:a5:42:5c:56:
95:c6:b5:c9:01:c4:55:82:20:7c:ea:2a:45:44:1e:
58:ee:f9:af:65:7d:b9:f0:9f:5f:20:24:ec:84:ee:
34:0b:59:67:c2:22:fd:50:07:b7:30:dd:91:e8:19:
d2:f4:d4:56:ae:ab:b6:44:87:62:7c:a2:47:94:ed:
b7:9c:cf:e4:d2:c7:d0:5d:11:a5:19:2b:fc:2f:0c:
4d:79:69:86:71:63:cf:86:ae:9d:40:ad:05:4c:c0:
36:33:a5:f4:4b:67:b7:18:7b:65:64:91:26:0a:04:
f5:00:3a:d5:6c:3d:ca:0f:9e:67:77:05:2a:84:c2:
12:8d:68:42:63:8b:df:84:bb:c6:0a:ad:2e:cd:e9:
7b:30:fb:3d:c5:07:2b:9b:24:12:82:09:7a:7b:fb:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:F5:5A:F8:96:FE:30:EB:FE:8D:43:3A:72:AA:6F:08:73:9A:8C
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/XN31WviW_jDr_o1DOnKqbwhzmow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.147.0/24
IPv6:
2a0e:5b44::/30
Signature Algorithm: sha256WithRSAEncryption
2d:2f:41:a8:da:ef:0a:d0:b7:fe:46:26:a8:ca:f7:a2:d2:da:
95:12:d2:3d:e3:1a:7a:21:ac:6e:d1:00:c8:74:b6:9c:ab:8e:
6d:5f:d9:94:7b:59:70:f5:83:aa:24:c9:92:0c:14:9d:9c:30:
2c:f3:99:c1:80:d1:3c:8b:33:6f:ec:e0:96:9a:50:8a:40:27:
77:ce:94:e6:52:b9:f0:87:cb:2a:72:cf:e3:95:3b:35:fa:7b:
bd:10:0f:b8:ed:0c:98:d6:ee:a9:02:48:23:13:a0:63:6f:6f:
1e:9e:0b:eb:89:b6:c9:f1:d7:e7:9a:32:f9:45:b5:8e:50:06:
c9:8d:33:51:fd:3b:ba:8b:7f:c7:a3:c7:65:a8:47:cb:b0:10:
0e:6f:32:41:0d:14:a0:14:a8:88:96:6d:aa:72:de:96:e6:c0:
dd:f6:78:af:fa:b8:b0:47:10:00:58:ee:d7:37:8e:89:99:60:
dc:bd:b2:ff:61:8a:f4:a1:79:b8:e9:6a:0e:66:b9:bf:63:0c:
cd:ad:e1:e8:af:3b:e1:ba:b0:35:8a:2c:8d:35:92:9b:53:7e:
5f:a3:62:f5:02:0f:b9:ce:5f:34:89:d8:0b:4e:e2:ca:28:96:
af:fc:ad:06:cf:83:d7:16:fd:28:56:f5:3c:5c:98:54:ef:ce:
9e:e2:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:27 2025 by rpki-client