Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SDeqYXqHAJg2yr3dkdcJvY3cybY.roa
File: SDeqYXqHAJg2yr3dkdcJvY3cybY.roa (raw, json)
Hash identifier: 2gBO5A/EfZKOvkjmhoXOoXL8tv6ftiSLhXwQM0nZg+8=
Subject key identifier: 48:37:AA:61:7A:87:00:98:36:CA:BD:DD:91:D7:09:BD:8D:DC:C9:B6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01842A0D19097999127A28E3766236E3BCF6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SDeqYXqHAJg2yr3dkdcJvY3cybY.roa
Signing time: Sun 30 Oct 2022 18:00:12 +0000
ROA not before: Sun 30 Oct 2022 18:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2a:0d:19:09:79:99:12:7a:28:e3:76:62:36:e3:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 30 18:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4837aa617a87009836cabddd91d709bd8ddcc9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:26:b7:14:7b:c8:55:5f:79:78:55:14:d7:
bc:ef:8b:ab:8c:15:17:f9:60:b1:d9:3f:9d:91:fc:
5b:08:0a:e6:c6:4b:5b:c0:96:ec:4b:8c:d8:f7:4a:
ee:64:9a:10:e7:1b:99:62:46:b6:c7:46:b0:01:03:
20:cd:a8:bb:f8:07:7d:1e:2f:f4:e8:56:d7:c2:6c:
1b:5e:7a:68:a2:41:6c:55:fd:26:f1:6e:29:72:3d:
f9:4d:55:a3:78:05:7f:31:93:a1:5e:30:6e:87:54:
da:d9:85:3a:2b:21:74:c0:8b:cd:7d:9f:7f:52:91:
61:bd:d4:ed:2a:f7:96:08:2a:c7:55:f9:6b:17:87:
43:99:8e:b0:08:9d:77:87:e6:dc:25:ea:f8:62:18:
74:b7:74:33:a3:b5:a5:a5:c4:31:ac:7f:fb:93:9a:
96:f2:9a:87:57:b0:af:99:94:5f:b7:07:24:a6:1d:
81:0e:56:0d:c3:b4:61:d1:41:83:ac:96:6a:ab:5a:
85:c6:e1:62:02:9b:a3:7a:ca:32:32:92:be:f5:46:
51:45:8c:d4:df:70:9b:0e:32:13:03:8d:02:4f:95:
52:6f:09:05:97:26:8d:05:7d:61:f9:d4:00:c9:48:
d8:7f:f1:18:df:1d:46:8e:b5:18:78:f6:be:90:e2:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:AA:61:7A:87:00:98:36:CA:BD:DD:91:D7:09:BD:8D:DC:C9:B6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SDeqYXqHAJg2yr3dkdcJvY3cybY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.136.6.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d4:5c:17:fa:bf:cd:78:da:08:a4:5c:a6:70:d9:f2:24:4f:
3a:19:25:aa:61:9d:61:42:31:70:51:a4:4f:4c:a5:84:67:fe:
62:75:e1:e9:49:fb:e4:27:0c:12:e4:a3:32:9e:5b:00:43:82:
6f:66:b4:c5:92:e6:a5:4d:61:b5:14:61:c2:28:49:35:b5:15:
bb:1f:38:44:0c:75:27:39:1a:e1:e4:29:fa:49:08:e7:9f:6a:
17:8f:9a:0b:6c:c2:e6:54:ab:67:fc:0e:6b:74:13:5b:5d:33:
e9:12:40:77:33:4a:7d:42:ba:86:05:0e:6a:1a:d9:54:89:d0:
79:bd:d4:4b:f2:3a:e6:7d:b7:b0:55:4d:7b:44:04:6d:ea:8a:
23:c1:f8:32:8b:e5:f6:7b:26:06:11:79:87:93:be:b4:05:56:
4b:89:94:ec:9b:55:ab:8a:86:c3:00:3a:8c:6f:31:ae:aa:5d:
97:cd:91:d2:38:a0:3c:77:74:e4:e4:09:71:75:64:9b:98:71:
f7:4b:87:d5:67:b8:7e:60:55:c0:3b:98:53:f9:4c:6c:49:32:
09:20:21:66:f7:9a:c4:fd:41:2b:17:c7:14:2c:f3:94:53:3c:
9f:06:58:50:c2:15:da:93:83:4c:db:8d:3b:6c:35:cc:ab:37:
9b:24:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:16 2025 by rpki-client