Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/BnZFqM9NYS9bDF5_x3aqlADWlZ4.roa
File: BnZFqM9NYS9bDF5_x3aqlADWlZ4.roa (raw, json)
Hash identifier: UeFLMlwAWp36Jahjeo+vCPviOalgSSdStWHRJPu5z5I=
Subject key identifier: 06:76:45:A8:CF:4D:61:2F:5B:0C:5E:7F:C7:76:AA:94:00:D6:95:9E
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 031BDA
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/BnZFqM9NYS9bDF5_x3aqlADWlZ4.roa
Signing time: Tue 15 Feb 2022 13:44:43 +0000
ROA not before: Tue 15 Feb 2022 13:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34903
IP address blocks: 45.130.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203738 (0x31bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Feb 15 13:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067645a8cf4d612f5b0c5e7fc776aa9400d6959e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:da:ee:23:e1:7d:a7:0c:f4:24:17:ca:04:
8c:5c:6a:67:aa:9e:b0:bf:69:20:ea:9e:00:e4:ec:
84:74:09:54:79:c6:58:41:c7:20:2a:e3:89:f4:ca:
00:90:8c:6d:bc:12:33:3d:a7:43:0a:73:9f:6b:d1:
6c:63:e9:e5:26:47:51:6e:53:72:97:32:c8:1c:66:
75:48:1f:19:98:55:5a:79:ea:83:fd:28:5b:0d:6e:
01:48:e9:71:f5:c7:18:57:74:7e:93:e3:df:2e:33:
95:5a:08:47:11:90:fc:38:3e:a8:b5:89:3f:d9:d8:
a7:c7:37:ee:f8:63:e8:91:e0:f1:9e:b1:f1:d0:d7:
02:6e:7c:6d:cd:d0:57:0f:23:61:8c:0a:74:64:43:
4d:4d:95:32:dd:d6:cc:06:ce:87:0c:10:d4:2c:75:
31:e7:8a:72:03:41:eb:87:a6:9a:33:dd:f0:07:56:
aa:3a:1f:02:ee:28:db:7a:29:2d:77:eb:d2:be:5b:
32:38:b0:77:82:a5:1b:4b:e9:09:88:4f:11:d0:af:
c4:36:d7:f5:74:af:05:1e:91:f4:e1:22:0b:25:b7:
7b:c2:eb:39:08:bc:1a:61:20:4f:1f:b1:92:e0:fa:
e3:ca:1f:41:29:4f:0c:04:d3:0e:20:b8:7f:6e:47:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:45:A8:CF:4D:61:2F:5B:0C:5E:7F:C7:76:AA:94:00:D6:95:9E
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/BnZFqM9NYS9bDF5_x3aqlADWlZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.208.0/22
Signature Algorithm: sha256WithRSAEncryption
92:22:89:af:29:a1:c1:4a:94:cc:2c:bc:e1:09:ed:60:6e:c8:
2d:3e:87:4c:c1:c8:bf:c3:e6:21:29:0e:d5:f5:d4:20:84:24:
ec:2e:60:48:fb:23:36:36:ab:2c:0f:d5:42:36:8f:ea:6b:e5:
13:b0:a7:c4:64:e8:1e:b2:e9:eb:43:b9:2a:86:2e:f1:20:16:
84:79:6c:c6:d5:19:89:d6:c3:8c:11:f3:3f:50:95:b3:6c:80:
e2:ff:86:4b:55:be:d6:9d:9e:aa:e6:54:58:8a:a1:11:4c:11:
27:25:c9:47:b1:12:02:8f:de:62:a3:91:e1:82:7c:17:71:34:
36:8b:7d:64:44:7a:84:28:8e:57:55:02:4d:49:8c:14:45:d7:
49:02:c0:2b:f3:92:5b:e3:86:6f:80:25:2c:23:01:4b:44:32:
bf:6a:fa:23:28:bb:87:91:06:d8:ae:c4:8a:0e:8d:6b:2a:06:
ad:68:68:d0:e9:89:21:fc:8d:d2:fd:92:fe:7f:5c:d2:30:eb:
a1:0c:c6:11:18:75:c1:cd:1e:b3:9d:9c:c1:3e:c6:d0:5f:55:
45:3d:b5:58:22:a4:2f:c6:93:66:56:a1:3a:1c:04:e3:38:ac:
3f:74:ee:f0:20:f0:56:65:bc:55:32:57:9c:bb:04:39:d4:2e:
5e:8b:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:15 2025 by rpki-client