Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cVSDkU8_jM2EILUQtW8KXpGs7tQ.roa
File: cVSDkU8_jM2EILUQtW8KXpGs7tQ.roa (raw, json)
Hash identifier: 9ptXskjWBBsOdzw25jeNpQcr8yxAdzSSfMxRK9593Rw=
Subject key identifier: 71:54:83:91:4F:3F:8C:CD:84:20:B5:10:B5:6F:0A:5E:91:AC:EE:D4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01842A0D1A0A43C49AD251DF41F63039BDA7
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cVSDkU8_jM2EILUQtW8KXpGs7tQ.roa
Signing time: Sun 30 Oct 2022 18:00:12 +0000
ROA not before: Sun 30 Oct 2022 18:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2a:0d:1a:0a:43:c4:9a:d2:51:df:41:f6:30:39:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 30 18:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=715483914f3f8ccd8420b510b56f0a5e91aceed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:09:86:87:24:25:87:1a:aa:d2:8c:ad:ad:
d8:a3:0c:f2:15:2f:32:0f:1a:f7:d2:73:50:33:d0:
22:94:cf:2a:2c:19:3b:6d:53:f3:92:f2:d3:71:f6:
83:60:31:f2:59:cf:0c:6a:d2:cb:b7:01:3a:8e:2a:
a4:00:39:e4:33:c9:95:a1:ac:be:a2:9e:ff:31:c6:
84:a7:b6:15:c3:7f:fc:f1:ef:f9:e0:f1:74:14:10:
8c:94:e0:62:03:b1:2d:ea:34:28:de:dc:4b:90:73:
9a:ee:0f:92:05:5d:52:c7:5d:c4:73:aa:28:5c:b0:
ac:bb:8a:7c:df:8d:4f:6d:d1:dd:c6:08:87:9b:d3:
fe:d3:e6:d8:bc:63:9f:81:fe:9a:81:0a:32:c4:19:
ff:09:5b:31:44:ad:c0:15:4b:20:49:f6:e7:13:9f:
6a:2f:14:c8:86:ac:62:1c:4f:28:a4:f1:00:ab:23:
d4:05:44:64:7b:3a:e8:e3:a6:a0:00:ea:fd:f0:75:
b7:07:54:a8:bb:01:80:1c:36:63:30:0d:ad:81:a3:
36:b9:fa:b7:3c:8f:9c:cf:f9:14:3d:df:bc:27:5d:
ab:97:11:a5:9d:55:ef:14:f8:61:e8:3c:89:16:e5:
c4:df:3f:61:79:a0:1c:af:e7:11:52:10:a6:b0:76:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:83:91:4F:3F:8C:CD:84:20:B5:10:B5:6F:0A:5E:91:AC:EE:D4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cVSDkU8_jM2EILUQtW8KXpGs7tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:dd:7a:b1:fe:cb:74:98:5c:bf:fb:af:a9:01:25:c7:3d:d2:
cd:d6:65:df:bd:74:84:ec:0e:2f:18:10:c2:b5:d1:19:76:ec:
3f:80:3c:17:25:71:c4:9d:eb:2c:5f:ff:84:f7:3e:4d:ae:be:
36:9c:6e:2d:80:ba:79:48:6f:42:94:88:77:40:9c:ed:c2:b2:
25:a8:09:78:5f:c6:2b:6a:24:9c:85:f6:a7:55:6a:7a:6a:2e:
cb:e5:c9:ef:a7:b5:13:a7:6a:2e:16:0a:4a:fa:1b:b5:4a:75:
54:df:e6:f8:7b:b8:34:53:26:fd:9f:95:64:dc:32:26:c1:1b:
ec:7a:3c:1d:8e:2f:6d:07:36:01:ea:59:8e:ff:ee:96:7b:9a:
aa:9f:dd:e2:3c:30:0b:20:9f:2b:0a:35:0f:c9:27:af:a5:62:
ae:c4:00:64:e1:44:b2:a0:51:a1:af:0f:18:1e:94:f1:e0:c4:
54:56:ea:87:06:a1:5f:2a:cd:6c:55:d9:fc:a2:92:0e:7e:0f:
c4:06:08:0e:20:8c:b3:ee:23:2a:db:a0:e4:a7:6b:67:79:5f:
07:a6:94:a7:28:24:16:d5:0f:7e:e7:61:9f:50:5b:15:60:73:
8c:7e:c1:96:b3:9c:43:c4:82:8c:7f:06:8b:af:49:73:8e:e5:
62:e6:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:14 2025 by rpki-client