Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0YKCNR0BEGqbE_6KWRvRMm_SynY.roa
File: 0YKCNR0BEGqbE_6KWRvRMm_SynY.roa (raw, json)
Hash identifier: amGM7+547mE7i7eelOENl+ood3A205gipVk6g6bR58o=
Subject key identifier: D1:82:82:35:1D:01:10:6A:9B:13:FE:8A:59:1B:D1:32:6F:D2:CA:76
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09C17E81
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0YKCNR0BEGqbE_6KWRvRMm_SynY.roa
Signing time: Fri 11 Feb 2022 10:34:38 +0000
ROA not before: Fri 11 Feb 2022 10:34:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48658
IP address blocks: 45.131.64.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163675777 (0x9c17e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 11 10:34:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d18282351d01106a9b13fe8a591bd1326fd2ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:ca:9f:8a:19:43:55:63:f3:26:19:50:37:
56:93:32:fc:81:82:29:50:32:4d:2c:3b:fd:fe:4b:
3a:a0:84:76:f2:e0:69:60:82:95:23:ea:8a:3b:fe:
e9:a1:09:50:78:f9:ed:f8:50:8c:5f:6d:88:12:13:
a0:36:cd:59:f3:73:fc:12:ed:ce:eb:55:8f:a0:98:
13:9a:6d:89:44:df:46:cf:84:e9:b8:8d:26:23:01:
d5:94:83:48:f9:71:24:20:e2:50:9e:bf:c4:de:28:
0a:73:f0:6b:6d:29:22:78:45:07:25:1c:62:9d:86:
08:9d:9e:79:d9:89:24:ea:a1:d0:7c:f7:e6:be:38:
78:62:a2:b1:49:1f:b1:7e:06:cd:bc:7c:d0:05:43:
38:a7:a8:7a:31:3a:43:07:ce:c1:94:83:91:d7:d9:
e9:f3:21:47:0b:17:f4:e5:78:59:39:c5:6b:2b:5e:
cc:23:2a:14:fd:23:36:42:e7:68:f6:4b:17:bf:0d:
f5:bf:ae:fc:98:ce:8d:35:b3:2d:1e:4b:64:fb:37:
63:9f:29:f7:83:00:0c:ee:71:06:bb:28:4e:2e:a6:
bd:af:30:c8:6f:39:4b:e9:b7:3d:a8:ca:99:0f:fc:
83:a3:d3:01:bc:95:a0:0e:f3:9e:77:6e:ee:b2:0d:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:82:35:1D:01:10:6A:9B:13:FE:8A:59:1B:D1:32:6F:D2:CA:76
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0YKCNR0BEGqbE_6KWRvRMm_SynY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.64.0/24
45.137.203.0/24
Signature Algorithm: sha256WithRSAEncryption
75:29:ae:bb:e5:de:c6:e2:4d:98:fa:15:12:0b:7f:0f:ef:c7:
83:d3:03:59:37:f5:e0:30:42:86:58:1c:0f:3c:0c:3a:af:61:
77:bf:ca:ec:56:8f:e2:6f:60:89:8f:d1:3d:8a:82:60:2c:f6:
6b:fa:a5:78:1f:03:38:ea:4b:04:e5:d4:ea:15:29:7d:2c:5c:
63:76:66:c8:4f:62:b6:f9:46:cb:4e:5d:03:98:1f:92:2d:43:
b0:bb:9a:8c:d5:6d:13:48:02:c5:7c:47:71:4b:37:c6:53:7f:
c2:4f:9a:6d:43:77:3e:bc:50:ed:c2:f4:c3:4c:2f:a0:b3:64:
38:55:3f:64:76:f1:a1:fe:c1:be:7f:3e:1d:ec:cd:fc:07:03:
b8:65:ae:06:24:73:3b:91:bc:40:14:16:48:dd:7a:09:40:74:
db:4d:36:ad:bc:15:01:65:35:0e:cc:a6:a2:92:49:ef:b5:74:
4d:f5:14:ed:7e:55:96:c1:ec:1f:eb:5a:e9:31:47:f2:7a:2c:
1e:30:89:61:99:21:7e:ed:2c:c4:ff:24:fb:e3:f7:54:14:c3:
f3:cf:f8:e8:cf:46:d7:be:bb:00:9d:7e:22:04:bd:64:45:40:
19:5e:6b:aa:f4:47:79:9d:ee:f3:b4:ae:2a:6a:58:76:62:fa:
12:08:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-ams.rpki-client.org