Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qfVNARU42KfXQ6F9fQkZDLqoOds.roa
File: qfVNARU42KfXQ6F9fQkZDLqoOds.roa (raw, json)
Hash identifier: kNTwBIMaq6XuMJqfvM9mrq0uJfkRKNV2W5Tv/6gydK8=
Subject key identifier: A9:F5:4D:01:15:38:D8:A7:D7:43:A1:7D:7D:09:19:0C:BA:A8:39:DB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 07D19F15
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qfVNARU42KfXQ6F9fQkZDLqoOds.roa
Signing time: Mon 28 Feb 2022 16:01:11 +0000
ROA not before: Mon 28 Feb 2022 16:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.131.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131178261 (0x7d19f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 28 16:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9f54d011538d8a7d743a17d7d09190cbaa839db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:23:34:32:6c:32:a8:6a:23:04:02:27:07:
35:f6:da:a0:f2:33:ac:16:e7:86:e0:dc:9e:e5:b2:
a3:ba:c5:cf:76:04:22:18:92:3d:b0:2a:b0:5f:e6:
5b:be:c4:37:b7:20:f6:fd:39:7b:90:60:fc:5b:81:
1f:b9:a1:44:1e:6f:a9:03:60:91:3d:f5:d2:65:9d:
f0:6c:ef:32:92:83:50:59:48:ca:be:c1:c1:c9:57:
97:5f:22:f2:f2:47:68:11:71:1f:e8:18:5a:b0:9f:
72:4f:ce:9f:36:76:95:80:d6:51:b0:41:34:c1:41:
80:46:33:3e:90:1a:53:18:51:c5:ca:94:3f:7b:ee:
aa:b1:19:3b:fa:a6:3d:05:1e:8a:16:4d:b5:0d:dc:
27:bb:4c:71:f2:02:63:af:a7:7b:0b:44:e6:a6:96:
4b:d3:0c:6e:b8:08:f1:69:b7:6a:1f:c6:76:f1:cd:
28:5e:01:e3:b8:49:2c:a4:20:5d:57:41:e7:c5:cf:
99:92:6a:f0:7e:a3:ca:14:ba:30:ec:b8:42:5c:d2:
34:1c:20:85:f0:5e:2c:76:25:28:c0:60:ff:c4:a4:
86:fc:8d:ac:53:24:72:d5:0f:75:97:ae:67:57:1a:
db:e1:e5:50:49:e0:bd:82:d6:40:af:6a:61:0d:26:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:4D:01:15:38:D8:A7:D7:43:A1:7D:7D:09:19:0C:BA:A8:39:DB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qfVNARU42KfXQ6F9fQkZDLqoOds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:79:8a:bf:eb:f2:84:ff:9b:24:a9:60:d1:8a:a4:87:40:19:
0c:ed:d1:73:c5:9f:8e:db:a4:cd:11:b5:60:a1:45:50:fd:3a:
f7:5f:5e:94:1a:0a:36:d2:fe:db:94:f7:14:d3:8a:00:00:9f:
75:b0:49:9c:6e:a4:62:62:56:ce:47:4d:72:66:58:6d:83:21:
d7:19:68:0e:6b:0d:73:c0:a5:28:d7:f8:ee:80:f0:44:cd:0c:
e7:82:7f:e5:1e:5b:3c:93:20:04:18:12:c9:3e:11:10:8c:f0:
8f:3a:d9:53:fd:f7:ca:8e:41:56:59:6b:38:11:59:bf:59:3b:
9d:cb:52:06:3a:e9:e6:5f:0a:e1:d6:42:ef:5b:e7:71:65:31:
76:1c:5d:ba:c1:4e:82:e8:db:03:f1:7a:22:6a:09:42:59:8e:
3e:44:aa:22:cb:f3:e5:8b:1e:93:35:9c:c2:d4:0e:16:96:ef:
eb:e5:3e:62:42:21:4a:92:c7:c7:c5:b2:e8:23:1d:a1:30:76:
fb:53:c2:88:a4:80:ee:d1:ab:d2:a8:d0:cb:85:8e:da:3d:ce:
49:42:1f:33:79:fd:76:f9:26:fe:23:cc:85:14:6c:ff:9c:12:
03:05:ee:5a:f9:34:58:ef:bb:87:40:b2:5f:f5:50:96:df:c7:
5a:07:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:48 2025 by rpki-client