Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/UIgyVRnsx89w6kbjuvKhAHD9Ys0.roa
File: UIgyVRnsx89w6kbjuvKhAHD9Ys0.roa (raw, json)
Hash identifier: 0urMKTlMOyRPF4Xasy9mRRqVQNAlaBNbUJvBhdoxtuw=
Subject key identifier: 50:88:32:55:19:EC:C7:CF:70:EA:46:E3:BA:F2:A1:00:70:FD:62:CD
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 9C5375
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/UIgyVRnsx89w6kbjuvKhAHD9Ys0.roa
Signing time: Mon 04 Jul 2022 13:49:25 +0000
ROA not before: Mon 04 Jul 2022 13:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141384
IP address blocks: 45.129.227.0/24 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10244981 (0x9c5375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jul 4 13:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5088325519ecc7cf70ea46e3baf2a10070fd62cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:33:d2:06:de:7d:9d:8f:32:b7:ff:04:0d:
5c:ae:5d:1f:06:70:52:85:d1:09:0a:b9:20:6e:b0:
57:01:9f:f5:2a:86:59:96:70:1d:b0:5f:08:dc:c2:
cb:36:fb:e3:3d:d6:9f:55:6f:4d:01:c1:72:54:ea:
59:1b:31:a0:02:61:22:95:1f:80:c2:a0:b6:b8:1c:
88:10:4c:5d:22:c1:18:bd:58:d1:35:ef:71:4c:6b:
8c:23:35:ad:6d:f3:e1:a5:8c:fa:db:ad:3f:e3:8a:
24:4e:a5:de:38:5f:6b:e1:fc:40:cf:ae:b6:74:81:
c0:38:2a:75:ee:ff:aa:57:93:66:d3:69:dc:a9:ec:
2f:44:b0:d9:be:e2:9f:cb:57:7a:61:c8:9c:0c:e7:
7f:ee:06:73:cb:3f:f2:e6:ad:81:f1:a4:f1:f9:0d:
2d:5f:45:dc:a8:9d:bd:e2:60:75:66:3b:3a:7c:df:
5d:36:ca:e4:51:d3:d1:4c:14:04:9f:35:be:02:66:
81:44:2b:4f:9b:e3:86:50:ab:3d:1c:4b:b0:c5:c4:
2c:80:37:4b:ba:98:29:4c:8d:f6:b2:a9:98:e4:48:
14:9d:20:a0:8d:22:b3:14:30:41:23:46:4b:59:83:
cb:a6:11:f8:6b:09:dc:b6:b9:92:cc:ce:10:83:38:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:32:55:19:EC:C7:CF:70:EA:46:E3:BA:F2:A1:00:70:FD:62:CD
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/UIgyVRnsx89w6kbjuvKhAHD9Ys0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7e:c8:2a:a9:cb:c1:db:31:6a:81:da:98:d1:74:8c:11:55:
98:d0:f9:13:5d:01:77:1c:f3:86:61:df:29:27:55:9c:63:70:
e9:27:5c:ac:1a:50:be:d1:6a:f3:10:c3:65:7f:56:5a:bf:fd:
ff:59:71:91:d5:2c:5c:6f:ad:82:90:dd:ef:cc:d9:8d:1f:b9:
b1:dd:d2:f2:75:c3:f6:66:f2:10:34:0a:2e:e0:bd:3d:e4:ba:
dd:98:c4:5b:27:3e:b4:ee:2c:46:7d:ef:2d:7a:c7:2d:0b:96:
ed:3f:4f:2c:b9:30:a8:da:46:c6:a6:00:b9:5b:9c:73:86:c3:
9c:53:65:ff:a8:29:2a:68:f5:f4:dd:db:00:8e:d8:31:ee:33:
e3:71:58:ee:f8:b8:f6:bd:26:b8:d7:0c:b6:de:26:13:20:c2:
ac:1e:d3:67:fe:76:e5:46:50:e5:de:bf:46:ed:2a:4d:fc:04:
d1:4c:26:a2:5a:8a:86:e5:1b:b4:2f:08:eb:41:3e:f4:1e:34:
45:af:25:7a:4c:70:0b:b4:c7:e8:cc:3d:b4:63:72:23:4b:a4:
ad:a7:d7:97:b6:d6:33:7f:20:12:2c:78:06:39:ac:4d:ed:79:
9e:1c:f9:91:17:69:16:3b:6b:4c:22:86:bd:1f:a4:05:d3:13:
ed:58:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:45 2025 by rpki-client