Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BfQONYGYjZdOJtILx1KD5I7ebpA.roa
File: BfQONYGYjZdOJtILx1KD5I7ebpA.roa (raw, json)
Hash identifier: 4dYxo95DV1MLu9O7z4nSRT9isZejgwhibYFsN0qSh/M=
Subject key identifier: 05:F4:0E:35:81:98:8D:97:4E:26:D2:0B:C7:52:83:E4:8E:DE:6E:90
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 07333FDF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BfQONYGYjZdOJtILx1KD5I7ebpA.roa
Signing time: Sat 01 Jan 2022 14:08:20 +0000
ROA not before: Sat 01 Jan 2022 14:08:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 45.131.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120799199 (0x7333fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f40e3581988d974e26d20bc75283e48ede6e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c2:cb:4d:69:56:ca:b6:d5:ee:82:0e:8c:f8:
2c:d9:01:77:aa:d0:de:ee:2b:c0:bc:46:84:3c:43:
ed:d9:a4:28:5e:44:a8:d7:1f:ba:2f:c7:ee:29:54:
e9:49:5b:fe:68:c1:75:53:82:ae:3a:4a:35:f5:a1:
d4:33:bc:ee:2c:5d:16:d3:19:b6:f8:63:66:b1:a8:
f2:dd:e1:06:31:c5:95:49:e0:f6:d1:b8:01:12:d6:
48:f0:c5:cc:ac:e7:bf:4c:c2:69:e7:d4:e0:50:3e:
d1:6d:fa:46:60:1f:39:c4:32:1c:03:32:0e:b5:23:
70:95:56:57:ed:83:9c:25:b8:10:ee:37:a7:b9:39:
29:d9:d6:3a:13:44:8a:47:8d:31:cf:a8:54:ed:c2:
99:a0:68:91:78:ab:ab:a0:23:8e:b0:c6:01:73:6f:
05:f6:e0:90:51:54:d7:33:73:3c:34:b9:e1:89:23:
bb:66:1d:20:7a:fa:4f:f5:7b:6f:3a:6c:ae:34:e7:
64:5c:b2:0d:37:c3:a2:f0:64:a5:83:4f:47:da:4d:
cb:63:c7:ca:fb:b1:d0:af:68:4c:8d:fc:7b:49:7c:
03:95:91:43:70:a7:c6:24:cc:8b:a7:80:5e:05:7a:
2f:0d:21:aa:4d:e8:7f:1c:d4:c7:fc:72:0d:4f:10:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F4:0E:35:81:98:8D:97:4E:26:D2:0B:C7:52:83:E4:8E:DE:6E:90
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BfQONYGYjZdOJtILx1KD5I7ebpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:dd:9c:18:4d:3c:ed:f1:1e:4d:15:b2:22:e8:17:ef:9a:57:
06:80:6e:15:df:c4:2a:13:c9:b4:09:6e:24:d1:35:b9:5f:42:
70:37:2a:ef:3f:9e:f5:e8:92:dc:9b:0a:05:99:87:1b:c9:5c:
37:d5:83:be:24:30:e4:31:1b:49:e1:4d:64:e6:d6:19:97:f7:
8d:3d:cc:ea:6a:f5:e4:37:af:97:e4:4e:05:c6:a2:cc:a5:90:
37:f8:1c:5d:69:67:bb:98:4d:38:4e:5c:f3:ea:08:35:7f:45:
0a:93:5d:6a:0a:9f:fd:b0:cd:fb:04:b8:76:ed:99:5b:77:94:
bb:9b:67:ad:7b:15:51:8a:f6:49:8c:31:6e:d6:fe:6a:07:c7:
1c:64:33:a4:f1:6b:7e:a4:60:2d:4d:cf:25:62:95:c1:36:fb:
44:01:0b:48:ad:f8:37:89:8c:4b:4b:80:5d:66:04:8f:8a:b3:
67:91:27:35:af:1b:bd:0d:85:96:3c:3e:8a:96:a0:06:e7:fb:
29:cb:1f:cb:cc:c6:41:fb:bd:4e:4f:23:cd:1b:c2:52:e0:e4:
ab:44:47:e2:a7:c4:48:e7:54:e2:b7:95:a2:01:ab:95:87:4f:
fc:06:ab:c3:13:68:00:8e:53:76:9f:40:c3:da:34:55:a6:77:
1c:de:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:38 2025 by rpki-client