Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p5rnyKzte4jsyPmU_m8JVL4sEwk.roa
File: p5rnyKzte4jsyPmU_m8JVL4sEwk.roa (raw, json)
Hash identifier: eM6PmpBpunl0Thi2O3nvYgF95wKUU0FcW0QJfyHP33Q=
Subject key identifier: A7:9A:E7:C8:AC:ED:7B:88:EC:C8:F9:94:FE:6F:09:54:BE:2C:13:09
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 073904AB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p5rnyKzte4jsyPmU_m8JVL4sEwk.roa
Signing time: Sat 01 Jan 2022 14:08:22 +0000
ROA not before: Sat 01 Jan 2022 14:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 45.147.45.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121177259 (0x73904ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a79ae7c8aced7b88ecc8f994fe6f0954be2c1309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:7c:24:00:a1:ba:2c:fd:ac:c3:13:6f:19:
90:d7:01:d7:f3:4e:82:55:d1:28:35:5f:ba:9f:3c:
dd:7a:4e:57:83:20:db:29:11:6a:1c:91:e1:a9:00:
70:a4:dd:49:b9:fc:a2:4e:34:00:ef:2c:c2:96:48:
c9:41:de:11:06:0c:eb:ba:ba:8b:0b:51:d6:8a:79:
e7:81:fd:43:8e:58:98:45:f9:c6:8f:c2:de:01:1a:
8f:4c:3f:81:fd:71:5b:eb:9a:30:a4:0c:bf:c7:36:
ed:44:4f:db:4a:4d:14:49:13:8f:c5:94:47:cc:0e:
c4:13:9c:af:44:be:c1:69:35:53:5e:98:72:ab:8e:
cc:64:e2:d1:ff:d4:fe:b8:b8:75:c6:54:20:3a:11:
db:98:8d:1c:8c:9f:ca:74:72:9c:b8:93:a0:34:4d:
79:fe:cd:21:d0:3b:f1:bd:fd:6d:09:cd:4d:b4:73:
dd:d2:f0:3c:84:e9:05:4c:7c:11:d6:90:25:24:1e:
5f:bc:07:b4:7d:11:81:61:a3:2b:38:a9:85:9f:77:
c4:80:87:ab:ee:2c:67:82:32:b9:2e:8b:02:48:bf:
12:d0:74:04:b4:87:10:f6:66:37:bd:79:91:e9:b1:
4c:5c:6e:24:9d:64:8c:74:27:c0:9f:4b:0a:1f:78:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:E7:C8:AC:ED:7B:88:EC:C8:F9:94:FE:6F:09:54:BE:2C:13:09
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p5rnyKzte4jsyPmU_m8JVL4sEwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a1:36:48:6e:f5:c6:da:ff:54:fc:9d:4c:2f:1f:e9:68:8f:
67:c6:bb:a7:34:c1:0b:84:61:5e:37:67:98:5b:a6:83:ff:b8:
df:7b:33:0b:90:c7:e7:56:8c:53:9c:b9:b7:5e:47:11:a7:d5:
e9:ce:68:40:4e:16:b4:53:42:f1:e8:ea:cd:d2:35:47:0e:b5:
93:aa:13:8a:a1:4a:5e:44:a8:4b:06:a4:7b:6a:8d:2f:56:01:
49:ba:ad:1e:cc:b3:05:af:04:8f:14:23:a4:fe:01:79:79:05:
d8:cf:04:62:76:93:3b:88:1c:4b:7f:f5:f1:dd:9c:34:12:aa:
ae:d8:1d:10:10:df:c4:80:07:bd:c1:61:47:97:f5:4a:3f:2e:
75:04:79:99:e6:74:20:f6:c7:ff:f4:32:30:65:c2:b0:13:7a:
7c:06:e5:06:28:83:5a:8b:00:c1:8a:e5:6a:11:d1:a6:f6:5d:
4c:88:bd:59:a8:04:81:dc:3e:29:93:6f:fa:8d:b4:a8:bb:87:
46:e5:a7:4b:3f:4c:4e:7e:f9:87:18:37:bf:a9:a8:b3:fc:71:
a5:eb:de:8d:e7:12:c8:e1:48:21:af:c7:e3:da:70:35:d5:09:
af:90:89:74:08:f4:54:49:ed:82:40:31:63:98:d3:26:76:bb:
45:9f:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:52 2025 by rpki-client