Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa
File: 4cDq52levktJbVgGIErix26GZzg.roa (raw, json)
Hash identifier: qvWhDM9iVoXWx/lkY0S0vDatV1N8uOLrxw/DrPCpCuA=
Subject key identifier: E1:C0:EA:E7:69:5E:BE:4B:49:6D:58:06:20:4A:E2:C7:6E:86:67:38
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0185C54433C0E41CF037C3C3A6264365E04E
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa
Signing time: Wed 18 Jan 2023 14:24:19 +0000
ROA not before: Wed 18 Jan 2023 14:24:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
2a0f:fd00::/29 maxlen: 29
2a0e:5040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:44:33:c0:e4:1c:f0:37:c3:c3:a6:26:43:65:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jan 18 14:24:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1c0eae7695ebe4b496d5806204ae2c76e866738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:71:31:58:44:2c:32:ad:7d:ce:e5:95:0d:
2b:1e:0b:ca:0f:a1:47:9b:7e:9f:24:fd:ef:79:a4:
25:37:91:89:2a:fa:83:8f:c2:90:b9:66:87:46:73:
28:4b:00:ac:fa:18:17:ca:df:23:ba:60:a2:39:cd:
b8:89:bf:6c:a9:32:ec:7a:4b:bf:1e:10:e5:c7:2a:
27:8f:6b:7b:d1:e3:34:75:b1:a2:81:bb:5a:88:01:
80:81:4e:47:72:01:88:d3:23:a1:12:c0:47:49:b8:
c0:11:f9:83:3d:50:98:5a:b0:c4:89:05:36:31:fa:
fc:7c:73:51:9a:f1:f5:04:d5:ad:39:f0:a5:1a:47:
0d:ee:b0:ac:8d:63:c3:f7:3a:6a:13:db:68:65:3b:
0b:c1:c2:27:a1:95:e9:fb:8d:fb:54:68:9d:5d:3b:
01:c1:32:41:68:78:50:9c:ee:cd:c8:d9:43:7f:eb:
1b:8d:f4:c7:79:c7:22:32:43:34:14:75:99:a5:2c:
ec:20:4a:0f:94:b6:4f:89:e2:13:db:d3:18:98:ec:
3b:7d:97:2d:75:3a:4c:9a:8f:68:17:a6:2a:60:cc:
f6:ba:7d:56:a1:e2:1f:39:a7:ec:70:4e:42:4c:5d:
89:4e:04:20:35:14:cc:b3:3a:4f:ed:70:1b:cd:e3:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:EA:E7:69:5E:BE:4B:49:6D:58:06:20:4A:E2:C7:6E:86:67:38
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:24:af:ba:1e:75:14:3f:f7:22:61:8e:e8:60:48:c9:63:92:
87:de:8d:22:a7:f6:c3:00:e1:3c:4e:6e:53:8e:88:1c:19:60:
68:65:37:71:10:49:40:bc:32:f0:9c:a4:bc:a0:ec:1d:e8:87:
2e:89:59:11:c2:7b:cf:e9:0a:4d:ee:64:d3:8c:80:05:8d:f8:
98:2a:1d:38:00:43:44:73:70:4b:6f:a7:3d:79:3f:b7:3d:cc:
7f:23:2b:f4:4e:ea:26:e5:ba:59:79:e0:f2:39:c4:d6:c2:5d:
c0:bd:9f:89:35:79:91:cd:b7:ae:33:d0:42:fd:f4:45:ec:dd:
14:01:10:57:a4:13:35:1d:de:b5:54:75:3f:bd:09:c0:fa:57:
fd:31:a1:9f:37:f0:27:51:6f:38:77:ae:e4:b3:0f:2e:4f:78:
c9:df:47:d8:b2:a8:eb:50:82:f7:99:ce:1f:59:b9:25:ef:73:
68:8a:fb:55:c2:99:98:74:97:5c:d3:db:3b:1a:c0:f6:0d:1b:
f8:8a:44:aa:96:d5:39:2b:7a:cf:cc:ff:db:b5:d5:af:ef:eb:
f2:aa:28:53:80:47:02:5f:b2:58:24:a4:c5:04:d9:df:18:df:
4f:0c:08:7f:b1:4e:9f:92:fb:9f:0a:68:60:78:ec:08:df:9b:
9c:8c:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:07 2025 by rpki-client