Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uAx0zhuEMGtTQokP05nZxjkEymg.roa
File: uAx0zhuEMGtTQokP05nZxjkEymg.roa (raw, json)
Hash identifier: VoUtd7nyicnWUuGI6ee8X/BWgRvIExca+OKtri9L7Uc=
Subject key identifier: B8:0C:74:CE:1B:84:30:6B:53:42:89:0F:D3:99:D9:C6:39:04:CA:68
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01836E33BF8B800113E96F8DA1F5F21BE41D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uAx0zhuEMGtTQokP05nZxjkEymg.roa
Signing time: Sat 24 Sep 2022 06:33:48 +0000
ROA not before: Sat 24 Sep 2022 06:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6e:33:bf:8b:80:01:13:e9:6f:8d:a1:f5:f2:1b:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 24 06:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b80c74ce1b84306b5342890fd399d9c63904ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:4c:96:04:ba:47:cc:13:49:30:6e:aa:06:
5e:d9:82:bb:1d:ba:5f:81:ef:a4:2f:37:92:17:c6:
15:da:3c:42:8f:ef:f5:b1:f8:21:bc:ac:12:bb:15:
23:72:99:64:c1:e3:d7:3e:08:2b:0c:b2:22:8d:89:
a5:57:71:4f:d8:69:0b:67:c2:90:86:3f:44:63:e7:
bd:10:e9:4d:6d:0e:a1:ca:c9:bc:72:6e:14:1f:7a:
91:f4:0b:ac:b9:e3:39:dd:54:05:f9:d6:c0:a9:21:
03:71:ff:0e:d5:04:37:ef:cd:3a:7b:f9:b4:dc:bb:
cd:75:88:7e:be:d0:c0:61:7f:4b:e7:ad:67:27:15:
d3:2a:7e:12:22:03:af:8d:5c:3e:49:ad:7b:8d:2b:
b6:06:1b:1b:dc:1f:61:95:25:1e:5b:e0:2a:2d:fb:
f7:09:f0:28:76:55:73:26:17:51:cb:9f:53:a7:fa:
f0:1e:7f:7d:74:58:75:e3:6f:b1:0f:e8:8e:9b:88:
8f:61:bc:d4:ee:95:41:4a:a9:f7:61:35:66:76:05:
c8:a1:c4:ea:0c:e6:cf:3b:d5:67:1f:93:62:62:99:
df:31:99:65:52:9f:61:d0:bc:0a:3f:c1:77:50:65:
44:d8:7e:82:b3:c0:9d:e1:b1:93:a3:73:2c:57:92:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:74:CE:1B:84:30:6B:53:42:89:0F:D3:99:D9:C6:39:04:CA:68
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uAx0zhuEMGtTQokP05nZxjkEymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:72:a3:87:22:e4:16:79:b4:10:eb:79:5e:a0:49:2b:f6:a6:
59:7c:9f:e0:32:1f:8a:cc:74:7d:e6:4a:72:3b:0a:ba:e5:09:
54:06:e8:c5:cb:80:cc:bb:3a:00:7c:ec:5e:04:06:90:7d:0d:
2d:61:be:5c:1c:92:77:82:68:1f:15:8e:83:3d:39:d1:ed:96:
b9:b8:e3:56:f8:1d:89:1c:17:a3:5c:38:56:4e:cf:ba:21:48:
41:5a:1b:22:fc:fc:51:b0:de:98:a3:75:29:04:ae:67:1d:db:
a3:2f:28:25:1c:8a:0b:03:31:97:53:f4:63:5b:de:3e:03:09:
d9:23:55:89:7f:f4:1b:6d:9b:bb:ad:53:ed:be:e9:e0:26:36:
1e:c2:0d:9d:17:c6:30:ab:4c:fc:a3:98:d0:52:36:85:e9:5b:
47:f9:7c:08:82:a1:d9:20:74:63:cb:a5:f9:fb:8a:5e:05:92:
ee:64:05:29:f2:ce:6c:36:6e:89:72:d8:83:8e:3d:ad:87:ab:
56:6d:ca:91:fa:e0:1f:a2:ec:85:b0:19:d2:03:44:c1:c0:8e:
ed:f4:7d:3f:2a:09:60:f9:94:5b:f8:9b:71:d9:86:ff:d8:cc:
61:31:a6:d6:2f:f0:f7:a5:98:b6:0c:86:84:7c:97:f8:11:48:
8c:dd:dd:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNuM7+LgAET6W+NofXyG+QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIwOTI0MDYzMzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODBjNzRjZTFiODQzMDZiNTM0Mjg5MGZkMzk5ZDljNjM5MDRjYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNRMlgS6R8wTSTBuqgZe2YK7Hbpf
ge+kLzeSF8YV2jxCj+/1sfghvKwSuxUjcplkwePXPggrDLIijYmlV3FP2GkLZ8KQ
hj9EY+e9EOlNbQ6hysm8cm4UH3qR9AusueM53VQF+dbAqSEDcf8O1QQ37806e/m0
3LvNdYh+vtDAYX9L561nJxXTKn4SIgOvjVw+Sa17jSu2Bhsb3B9hlSUeW+AqLfv3
CfAodlVzJhdRy59Tp/rwHn99dFh142+xD+iOm4iPYbzU7pVBSqn3YTVmdgXIocTq
DObPO9VnH5NiYpnfMZllUp9h0LwKP8F3UGVE2H6Cs8Cd4bGTo3MsV5LX6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgMdM4bhDBrU0KJD9OZ2cY5BMpoMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvdUF4MHpodUVNR3RUUW9rUDA1blp4amtFeW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgHMA0G
CSqGSIb3DQEBCwUAA4IBAQCKcqOHIuQWebQQ63leoEkr9qZZfJ/gMh+KzHR95kpy
Owq65QlUBujFy4DMuzoAfOxeBAaQfQ0tYb5cHJJ3gmgfFY6DPTnR7Za5uONW+B2J
HBejXDhWTs+6IUhBWhsi/PxRsN6Yo3UpBK5nHdujLyglHIoLAzGXU/RjW94+AwnZ
I1WJf/QbbZu7rVPtvungJjYewg2dF8Ywq0z8o5jQUjaF6VtH+XwIgqHZIHRjy6X5
+4peBZLuZAUp8s5sNm6JctiDjj2th6tWbcqR+uAfouyFsBnSA0TBwI7t9H0/Kglg
+ZRb+Jtx2Yb/2MxhMabWL/D3pZi2DIaEfJf4EUiM3d3o
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:41 2025 by rpki-client