Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa
File: Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa (raw, json)
Hash identifier: McDByS4WMiW1ORiXV67UYQSPTeC5xnrYSVF5JgPhyqU=
Subject key identifier: 1A:AE:CD:0B:5B:A9:A7:E4:E8:62:9A:9D:D7:14:58:29:C5:BF:6D:66
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 06902C85
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa
Signing time: Sat 01 Jan 2022 10:04:35 +0000
ROA not before: Sat 01 Jan 2022 10:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47755
IP address blocks: 45.90.164.0/22 maxlen: 24
2a0e:2c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110111877 (0x6902c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Jan 1 10:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aaecd0b5ba9a7e4e8629a9dd7145829c5bf6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:48:51:5f:fd:61:c1:72:4b:07:9d:4d:56:
0b:d9:e6:93:ef:52:74:99:eb:47:12:13:2d:eb:36:
3a:72:ad:ef:e9:3c:3f:40:17:5c:15:7f:e6:07:24:
85:32:72:8d:2c:da:fb:27:de:5e:96:10:6d:37:f1:
cd:6a:8c:c4:89:c0:b3:49:a9:df:14:9f:a4:01:7b:
ce:4d:44:ee:a6:76:58:72:58:0f:31:10:33:13:cc:
21:f2:5b:6f:e7:14:27:ee:a5:e0:1b:26:84:0a:d3:
7d:28:e0:e3:c3:b6:be:17:ec:dc:23:ef:bd:d4:53:
0e:7f:07:5d:01:f6:01:82:f1:97:7e:b9:a3:d4:e9:
5e:22:be:7d:d0:75:3c:60:cd:22:a6:c5:73:66:28:
5f:40:ad:1a:c1:ef:04:f4:9d:d5:58:c7:19:c8:c7:
e7:4b:fe:03:ae:b4:f5:e4:5e:f2:14:38:f2:e3:f5:
78:35:d8:d5:cf:9e:b5:7a:51:69:1b:60:ed:24:07:
03:05:dd:4a:b5:55:0e:84:b0:d5:f6:de:32:67:79:
68:89:ac:5a:8e:78:e6:83:5c:a7:4c:c3:53:73:e6:
04:a2:2c:9c:de:17:cc:f8:81:99:cc:fc:0b:c6:1c:
6b:29:ee:26:a8:fb:4f:61:4a:3a:39:8c:a7:ae:64:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:CD:0B:5B:A9:A7:E4:E8:62:9A:9D:D7:14:58:29:C5:BF:6D:66
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.164.0/22
IPv6:
2a0e:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:24:e5:ea:91:db:78:3b:d8:55:de:39:6e:2b:90:7f:f7:60:
a2:8f:6f:18:c3:42:8b:dd:37:4e:c8:84:53:5a:a9:10:91:0e:
06:6d:ce:13:ff:7d:ad:6e:11:1d:4b:01:1f:b7:d7:0b:e1:63:
87:a4:10:79:02:c9:e3:4e:41:b3:59:14:90:b8:1c:46:fe:63:
3f:23:69:1b:78:e6:18:df:c2:21:51:d5:23:ef:e4:66:73:50:
31:0b:90:fc:91:d9:d4:55:03:c6:e1:9d:f5:4a:1a:4b:8f:ac:
fc:9c:f7:15:73:00:2c:65:73:82:18:6e:ef:aa:b8:4a:1f:0c:
cf:22:c9:76:9f:80:ab:01:79:16:0b:d7:2f:e6:bd:99:7c:4e:
74:62:9c:28:2f:3c:72:15:d7:2a:35:97:1b:53:28:af:5e:17:
5d:e6:3a:ee:e4:84:cd:bf:18:a3:67:8b:9b:b4:c7:04:1e:f7:
66:45:4b:b4:96:05:e6:40:3d:c4:5a:37:12:10:03:49:b9:fa:
99:f3:d6:8a:41:6b:47:3a:fd:4b:0b:d8:41:3f:0a:4b:95:1a:
0b:32:57:0d:2c:6e:3d:fc:30:e8:7d:a1:27:7c:49:f5:c7:31:
d7:fb:d9:f9:ec:b6:eb:0a:12:c8:e8:56:fe:7c:b9:38:84:3c:
15:b3:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:59 2025 by rpki-client