Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R48b_V_tLeCJxZpKFB1xLQqy1JU.roa
File: R48b_V_tLeCJxZpKFB1xLQqy1JU.roa (raw, json)
Hash identifier: HPX8ZTHYEpMjW1jvOV72HzndRhQnqw4+erN9omUj2Aw=
Subject key identifier: 47:8F:1B:FD:5F:ED:2D:E0:89:C5:9A:4A:14:1D:71:2D:0A:B2:D4:95
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0182020D1B0564C2D9E678C8518102C2EDB5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R48b_V_tLeCJxZpKFB1xLQqy1JU.roa
Signing time: Fri 15 Jul 2022 13:29:49 +0000
ROA not before: Fri 15 Jul 2022 13:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:0d:1b:05:64:c2:d9:e6:78:c8:51:81:02:c2:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 15 13:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=478f1bfd5fed2de089c59a4a141d712d0ab2d495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:04:d7:35:e2:92:8b:2c:3c:20:e2:1c:6d:
51:ad:69:27:3a:a3:72:f2:97:15:cb:7a:18:77:ae:
3e:6b:bf:d1:80:77:4a:65:e2:40:ec:c3:6d:62:f2:
d9:57:0f:e9:1e:72:6d:bf:dd:7a:a0:c0:e4:9e:e4:
b7:92:16:0e:2d:1f:d8:9a:5a:ac:db:af:9b:af:5c:
4c:f0:d8:f4:fd:cb:f6:51:3f:2c:96:03:6a:cc:9e:
0d:41:34:79:27:2f:93:b5:b8:61:06:db:6b:a3:79:
ee:79:1a:83:bb:e9:4f:d8:fc:a5:51:18:cf:af:18:
cb:7c:8f:de:58:28:91:fd:79:78:38:a3:7b:77:27:
d0:25:75:8b:6e:0c:fe:10:3a:77:b9:84:f7:ac:4c:
73:ab:c4:c0:98:3e:04:ce:3f:bd:e1:a4:c2:3e:b5:
73:fc:aa:05:cd:f2:1c:bb:07:8c:e4:2d:f4:d0:7e:
77:14:7e:38:44:b5:95:5c:17:96:4b:b7:a0:f3:fc:
aa:75:77:cd:4b:16:26:c0:39:af:3e:98:d2:53:66:
bc:45:1b:6f:73:af:87:ea:84:20:3e:3b:6e:91:d8:
6d:78:2a:44:69:bf:fc:68:3b:c9:bd:8e:ee:72:bb:
55:c3:4d:3f:ea:f5:46:31:c5:b1:6a:21:03:3d:e1:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:1B:FD:5F:ED:2D:E0:89:C5:9A:4A:14:1D:71:2D:0A:B2:D4:95
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/R48b_V_tLeCJxZpKFB1xLQqy1JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
58:22:0b:27:fd:94:f4:6b:84:cc:bb:db:f2:4d:e6:96:d3:f2:
09:4f:f8:34:88:db:24:66:26:3c:32:bc:19:ea:2c:43:c1:c6:
26:f9:07:1d:fc:57:92:45:53:26:83:f5:ab:75:b4:0a:ab:92:
eb:2b:c6:f2:f9:37:65:ec:33:30:9f:ee:df:9b:a1:d0:60:ff:
eb:e2:6e:33:6d:3e:53:86:6c:f1:fa:a0:2c:20:68:80:03:02:
93:20:07:01:8f:1a:71:35:0f:7c:8e:eb:cf:30:b7:9b:bc:26:
28:03:25:e5:3f:e1:d8:76:11:0b:a6:b4:b5:51:89:7e:13:40:
43:ee:01:7f:6a:61:67:13:53:df:23:89:b5:c6:43:b3:5f:4e:
54:a6:1e:34:fc:b1:6a:6e:b6:92:ae:fe:63:0f:7b:f3:48:93:
9a:fa:ec:76:48:e0:2d:7c:cb:50:d1:0f:2e:d7:76:81:57:b1:
53:6f:d0:8f:88:13:34:b3:b8:d0:fd:ee:22:f4:cb:20:59:c9:
83:0c:d1:51:97:95:e9:29:fb:7a:84:af:fd:94:9d:92:19:7e:
4a:66:bb:f6:84:c1:d9:88:14:8a:ec:2e:7c:0b:ff:b7:ed:1a:
25:38:10:61:0e:81:90:cb:ad:98:8e:39:4b:bb:cf:06:57:52:
4a:c1:7d:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYICDRsFZMLZ5njIUYECwu21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIwNzE1MTMyOTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzhmMWJmZDVmZWQyZGUwODljNTlhNGExNDFkNzEyZDBhYjJkNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywE1zXikossPCDiHG1RrWknOqNy
8pcVy3oYd64+a7/RgHdKZeJA7MNtYvLZVw/pHnJtv916oMDknuS3khYOLR/Ymlqs
26+br1xM8Nj0/cv2UT8slgNqzJ4NQTR5Jy+TtbhhBttro3nueRqDu+lP2PylURjP
rxjLfI/eWCiR/Xl4OKN7dyfQJXWLbgz+EDp3uYT3rExzq8TAmD4Ezj+94aTCPrVz
/KoFzfIcuweM5C300H53FH44RLWVXBeWS7eg8/yqdXfNSxYmwDmvPpjSU2a8RRtv
c6+H6oQgPjtukdhteCpEab/8aDvJvY7ucrtVw00/6vVGMcWxaiEDPeG74QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEePG/1f7S3gicWaShQdcS0KstSVMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvUjQ4Yl9WX3RMZUNKeFpwS0ZCMXhMUXF5MUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYMCMA0G
CSqGSIb3DQEBCwUAA4IBAQBYIgsn/ZT0a4TMu9vyTeaW0/IJT/g0iNskZiY8MrwZ
6ixDwcYm+Qcd/FeSRVMmg/WrdbQKq5LrK8by+Tdl7DMwn+7fm6HQYP/r4m4zbT5T
hmzx+qAsIGiAAwKTIAcBjxpxNQ98juvPMLebvCYoAyXlP+HYdhELprS1UYl+E0BD
7gF/amFnE1PfI4m1xkOzX05Uph40/LFqbraSrv5jD3vzSJOa+ux2SOAtfMtQ0Q8u
13aBV7FTb9CPiBM0s7jQ/e4i9MsgWcmDDNFRl5XpKft6hK/9lJ2SGX5KZrv2hMHZ
iBSK7C58C/+37RolOBBhDoGQy62YjjlLu88GV1JKwX2+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:34 2025 by rpki-client