Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/23NV2LfK7PbnFrjLfdSpxyuNaiA.roa
File: 23NV2LfK7PbnFrjLfdSpxyuNaiA.roa (raw, json)
Hash identifier: YrICgjDqYtt6JojEF4cdn5fVysaYf1oRKURgWXH1SNU=
Subject key identifier: DB:73:55:D8:B7:CA:EC:F6:E7:16:B8:CB:7D:D4:A9:C7:2B:8D:6A:20
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0930DC39
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/23NV2LfK7PbnFrjLfdSpxyuNaiA.roa
Signing time: Sat 01 Jan 2022 06:00:23 +0000
ROA not before: Sat 01 Jan 2022 06:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19844
IP address blocks: 45.133.72.0/24 maxlen: 24
45.137.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154197049 (0x930dc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7355d8b7caecf6e716b8cb7dd4a9c72b8d6a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:7b:1c:bc:13:84:2d:4f:c1:a8:a9:e8:57:
6d:cd:ea:07:c1:aa:c2:36:5f:70:6c:ad:6f:3f:1a:
fc:c9:35:f4:ed:4d:e4:d0:85:7e:c1:00:41:6d:eb:
2d:d5:b7:c6:b4:45:d2:ca:a7:42:3d:d6:25:bb:82:
15:4e:92:93:b2:3e:3a:62:79:c9:c8:9f:fd:69:be:
a7:fe:a6:2f:2e:9f:2d:40:8f:53:9c:fc:ec:02:34:
6c:88:07:e6:c7:12:6c:fa:0e:48:56:8e:66:b4:58:
1a:2a:4f:33:5e:59:5b:42:13:50:41:87:d4:0b:af:
c1:33:e5:f6:2a:f1:b6:aa:8e:90:36:70:8a:4e:9d:
65:67:39:0e:e6:1a:54:94:24:99:34:83:ac:e5:b2:
ee:49:18:e0:0d:07:4e:d6:1f:f4:53:72:26:28:03:
b2:76:b7:9e:93:fe:e2:1c:5d:7c:ee:b0:0b:81:03:
e4:4c:2e:58:fa:de:21:0e:ce:ea:88:5a:a3:57:e3:
ed:a0:ad:e0:73:a4:c9:25:4e:a8:91:1f:4f:41:6d:
03:eb:e1:b0:d5:60:6d:a9:67:1c:1c:01:9d:89:bd:
8e:4f:ea:33:0c:e7:81:b2:65:08:3f:93:ad:c3:f9:
a7:56:6a:4e:98:11:7d:eb:64:22:7e:04:25:ef:b5:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:55:D8:B7:CA:EC:F6:E7:16:B8:CB:7D:D4:A9:C7:2B:8D:6A:20
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/23NV2LfK7PbnFrjLfdSpxyuNaiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.72.0/24
45.137.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a2:e2:9a:a2:a2:da:c4:dd:ce:68:12:46:af:b3:e0:7e:a9:
62:15:d9:e6:7a:8d:3a:8b:4a:5d:50:c8:93:a7:d4:f4:d6:ef:
ee:63:5c:0a:8d:49:13:d5:c9:4e:e9:7a:89:ba:5e:f1:c2:4e:
bc:ce:31:c8:b1:14:c7:88:7b:07:95:0f:d2:40:ed:77:86:42:
3d:1d:b1:30:a9:ad:44:e7:99:8f:76:ee:d7:22:42:07:b3:2f:
e0:3f:5a:74:77:62:30:25:b8:ff:00:8b:38:e1:e1:78:d5:cf:
9e:8e:56:a4:9d:d8:aa:b9:22:45:dd:0a:9b:54:7c:31:e7:fc:
70:27:2a:47:da:e5:08:bc:7b:58:80:66:65:b7:5b:2d:b3:26:
55:f0:2e:42:66:b6:98:b0:f5:50:b8:9e:19:8b:4c:96:34:43:
a8:81:64:b5:af:1a:7b:57:36:f1:e0:30:9e:2b:7f:4b:0d:97:
5f:7f:eb:91:5a:bd:c2:ca:f6:e6:61:b6:6f:36:2c:27:f6:30:
06:99:d2:36:42:0d:2a:0b:20:7b:d5:05:46:64:13:a5:fa:bc:
6e:e2:61:ce:46:6b:f9:f4:79:8b:1c:7b:2b:ea:49:7f:bd:88:
6e:61:fb:f5:51:e8:7a:a2:de:5a:4f:0e:b8:20:6c:be:20:b6:
70:ff:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org