Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/m4GndfYq_7eEubFPSS-zGiq8Pwc.roa
File: m4GndfYq_7eEubFPSS-zGiq8Pwc.roa (raw, json)
Hash identifier: 07fn+uUUBLay1D1p3hEAv/RBvPh+nJoB8okhsdLVcW0=
Subject key identifier: 9B:81:A7:75:F6:2A:FF:B7:84:B9:B1:4F:49:2F:B3:1A:2A:BC:3F:07
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018C49FCE9989F3F1866F92917BB8F91E923
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/m4GndfYq_7eEubFPSS-zGiq8Pwc.roa
Signing time: Fri 08 Dec 2023 15:12:40 +0000
ROA not before: Fri 08 Dec 2023 15:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 45.147.46.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:fc:e9:98:9f:3f:18:66:f9:29:17:bb:8f:91:e9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 8 15:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b81a775f62affb784b9b14f492fb31a2abc3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:09:da:d3:09:02:aa:62:da:80:c5:d5:81:
ed:69:77:47:b0:91:fc:1f:69:fe:80:77:a3:68:fe:
50:a2:93:d4:ae:57:93:44:d3:32:c1:78:f8:32:40:
66:42:90:06:de:0c:cb:82:ff:3a:4c:02:c0:b9:03:
cb:10:6c:13:9f:da:61:fb:75:71:d6:ea:00:43:82:
01:ff:e2:c8:c2:21:8b:a2:a5:64:1f:91:45:29:f4:
f7:7a:42:06:0f:e4:50:2f:51:30:79:c0:83:99:7c:
77:54:44:99:d9:ee:b2:3f:90:b5:4e:72:ef:53:64:
8f:23:1d:43:f5:5d:70:4f:8d:a6:0c:8a:1a:24:f6:
34:0a:dc:64:a7:fc:af:22:5a:bd:cf:63:95:69:63:
ad:6e:2b:b6:dc:02:14:a2:6e:61:4e:3d:2e:a9:bf:
3d:b5:d4:1d:df:d2:fd:0a:0f:57:f4:69:46:76:43:
6c:cb:3d:5d:00:85:90:ed:8c:c2:e0:40:07:c5:ea:
6e:02:62:b0:55:41:be:41:cd:e5:ce:cc:5b:fe:82:
fb:62:19:b9:15:93:fd:be:45:ce:7f:76:79:7f:2c:
bb:fc:8a:aa:ad:10:e7:3d:0e:e2:f8:c7:8f:0a:fa:
67:e4:14:1c:d4:ac:b7:87:b1:da:99:eb:08:db:b0:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:81:A7:75:F6:2A:FF:B7:84:B9:B1:4F:49:2F:B3:1A:2A:BC:3F:07
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/m4GndfYq_7eEubFPSS-zGiq8Pwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
45.147.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:04:9c:d0:66:90:09:d5:64:d8:9b:ac:63:94:29:8b:81:70:
55:a5:78:69:ff:e9:cc:07:f9:92:7f:33:78:b9:f8:41:41:21:
2e:87:3e:ac:18:7a:c8:5a:8b:82:45:10:53:fb:4a:9f:44:f0:
55:4e:5d:75:50:a7:7f:78:7d:f7:82:ba:fb:f5:39:e5:aa:6b:
88:77:1e:4c:8c:89:45:20:2e:79:f7:93:2b:6b:b6:11:b2:aa:
06:58:93:fb:57:03:49:da:ea:f4:e6:4a:e1:5a:3a:70:62:df:
c8:f2:36:57:49:59:aa:4f:56:bf:9a:f1:41:36:56:b8:32:62:
27:f4:87:73:fd:9b:7d:62:3c:ef:1b:ed:1a:18:f0:c0:ce:d6:
d1:35:03:04:8a:9b:0d:40:60:46:49:0b:92:9c:81:21:90:02:
29:f9:c3:4d:7a:ef:e8:18:8e:00:0b:17:9a:2b:9f:b5:29:0d:
f3:b6:2d:47:e7:de:88:12:96:fa:0b:25:f3:fc:34:d3:62:00:
23:d1:93:3f:06:da:b4:f1:34:54:64:0e:6e:9c:82:ee:8f:14:
83:b5:5e:0b:8f:53:57:fb:46:10:5b:2c:83:36:70:fe:98:29:
e1:5c:42:23:4b:70:55:1a:ba:34:bc:35:df:b3:62:26:9e:6d:
13:25:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:54 2025 by rpki-client