Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-qB6BNqAkqh7Muc3XfVLixXpW5M.roa
File: 1-qB6BNqAkqh7Muc3XfVLixXpW5M.roa (raw, json)
Hash identifier: B5q6YOz0hd5xBdqjJQMhtvxv3oqigmtBDEeTstt7hio=
Subject key identifier: FA:A0:7A:04:DA:80:92:A8:7B:32:E7:37:5D:F5:4B:8B:15:E9:5B:93
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9B7E324B29A38689710B841B2A86
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-qB6BNqAkqh7Muc3XfVLixXpW5M.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207643
IP address blocks: 45.147.44.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9b:7e:32:4b:29:a3:86:89:71:0b:84:1b:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa07a04da8092a87b32e7375df54b8b15e95b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:39:3e:d1:39:b5:40:a5:ff:d8:18:fc:2c:
0a:bc:9a:fb:4f:ee:1e:ad:34:17:99:a0:ef:be:02:
87:83:40:18:55:01:45:72:64:2c:5e:00:75:14:19:
fe:6a:c4:ba:0c:59:f6:2a:96:71:07:57:e5:ba:f9:
c6:c7:ac:27:d4:ab:94:8b:bd:f7:9e:df:98:70:63:
96:79:c3:4f:e8:e3:b2:69:d2:a2:10:35:ec:a5:5e:
dd:8e:a1:4e:86:9c:07:cb:cb:e7:eb:78:7b:f6:c8:
3a:e8:08:f8:2a:35:d3:7a:88:9b:7b:2f:c0:3e:97:
6f:06:db:3a:31:5c:f7:1f:21:43:0a:5a:62:22:98:
e7:db:4b:e3:af:2c:ec:b5:47:3c:a8:97:8c:df:ca:
bf:fb:9c:2b:ae:b6:85:3a:86:04:74:7a:3b:01:04:
ae:4c:7d:64:22:c0:ae:58:f6:c9:26:99:79:42:25:
78:3b:07:38:a1:26:9a:32:d3:60:e2:17:95:92:93:
b1:4b:1c:56:93:b9:57:6d:18:e1:aa:2e:e5:c0:06:
f2:0f:03:94:34:25:78:85:c7:c8:e9:0f:7c:37:8b:
12:5f:8b:eb:b7:f8:68:41:eb:4e:b7:c8:db:53:07:
43:3b:1f:04:d0:c5:23:30:4c:8c:c6:77:79:58:2b:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:7A:04:DA:80:92:A8:7B:32:E7:37:5D:F5:4B:8B:15:E9:5B:93
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-qB6BNqAkqh7Muc3XfVLixXpW5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.0.0/24
45.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bd:45:fd:0f:e6:b3:86:c0:d3:e3:35:0d:bf:a0:7a:68:a5:
3f:a3:2d:19:e5:72:15:67:ab:b7:96:32:b4:d9:60:b7:df:ac:
b4:7f:cf:df:3c:83:c3:df:a7:28:65:00:a5:0e:69:1d:e0:6a:
14:76:63:59:15:73:6c:cb:3e:cf:28:5c:05:a0:7b:ec:07:35:
1f:9b:7f:6c:41:60:bb:b5:53:97:ea:6a:ed:66:30:41:a6:ee:
09:db:f7:cd:af:ca:1c:88:3e:4c:b0:73:7d:27:ef:cc:ce:c5:
a6:77:7d:59:cc:5e:ea:e1:2f:db:75:a7:8b:cd:f6:9d:1e:72:
69:df:b6:17:f1:f4:29:8d:bb:b2:c2:cd:25:41:26:00:73:4f:
19:41:6d:2b:18:fa:69:48:96:8b:fe:ba:44:b6:73:4e:0b:55:
78:c9:3d:8f:58:3a:9c:94:ee:2d:c1:17:46:c0:13:9b:ac:6b:
fa:56:68:a2:a2:99:8f:fb:72:a7:96:2b:46:58:ed:fa:7a:91:
44:7e:d2:28:36:e1:b6:4d:22:e7:3c:fd:98:7c:0e:21:c4:41:
0b:1c:f2:c7:5c:38:78:48:5a:7f:94:52:69:80:42:d5:63:97:
e3:28:f4:f8:77:44:a6:f3:e3:2e:d1:0f:9e:6a:66:de:99:40:
2f:91:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:11 2025 by rpki-client