Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PmHSUlGwBuNgF74TjMZFXgsbyZo.roa
File: PmHSUlGwBuNgF74TjMZFXgsbyZo.roa (raw, json)
Hash identifier: PvmeAJ7Q0LHtkA9FxqtZXAY2S8Fv2QEomOLKYkDshlI=
Subject key identifier: 3E:61:D2:52:51:B0:06:E3:60:17:BE:13:8C:C6:45:5E:0B:1B:C9:9A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09382485
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PmHSUlGwBuNgF74TjMZFXgsbyZo.roa
Signing time: Sat 01 Jan 2022 06:00:27 +0000
ROA not before: Sat 01 Jan 2022 06:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 45.90.96.0/22 maxlen: 22
45.67.84.0/22 maxlen: 22
45.13.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154674309 (0x9382485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e61d25251b006e36017be138cc6455e0b1bc99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:81:f0:24:7a:88:cf:e8:40:c5:bb:f0:0a:
ed:ac:2c:c7:ba:c8:d5:3d:be:51:5f:13:0c:1f:7b:
94:48:d9:12:d1:35:74:e0:0b:7e:84:9f:6d:b4:f9:
f3:67:74:a8:bc:4b:a8:60:52:71:23:17:81:75:01:
39:5e:34:e4:61:1a:7c:7b:ef:24:92:85:2f:be:35:
47:63:83:35:f1:5c:3c:fa:c3:04:11:97:83:50:67:
8c:9a:cd:71:3a:f0:28:50:f4:54:57:b7:c3:e3:f8:
53:72:4d:43:88:2f:40:6a:b7:f4:9e:e8:93:54:21:
0e:b8:b3:ef:2b:8f:b3:e0:b2:5d:f6:be:f9:03:d7:
6e:1e:cb:e0:c5:b3:63:c3:e7:a7:a1:5d:21:b4:38:
d3:d3:55:b4:86:3d:55:b0:11:d9:f2:da:12:1b:55:
ee:a3:81:b5:95:d8:4b:06:ed:d5:59:8d:2b:dd:98:
d0:77:7e:4b:49:06:03:9c:9d:e7:a5:f5:8e:36:61:
dc:9c:97:30:37:88:bf:76:e1:80:da:77:69:cc:a1:
3b:68:3a:5d:b4:fa:0a:14:70:f8:d4:7e:d2:d9:39:
b6:27:dc:1d:34:ba:cf:8a:c0:e1:47:18:87:7d:bd:
82:ae:ab:7a:1f:bc:d8:ba:d6:cb:bb:fc:58:07:9b:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:D2:52:51:B0:06:E3:60:17:BE:13:8C:C6:45:5E:0B:1B:C9:9A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PmHSUlGwBuNgF74TjMZFXgsbyZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.236.0/22
45.67.84.0/22
45.90.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:9b:27:ef:26:8d:43:06:69:24:1b:5c:0d:32:95:7f:64:5d:
9f:a0:27:15:1f:ab:df:98:67:20:89:18:6a:66:0c:b0:3f:c3:
12:4e:49:c9:1e:f6:9c:a2:ec:5b:ec:e5:ef:be:c1:50:8c:8a:
af:a3:2c:8e:62:8a:b6:94:42:c0:4a:a0:f5:57:8b:9a:65:b9:
82:49:c6:59:79:de:19:21:85:aa:bc:d7:45:74:dc:3c:ff:d5:
08:be:ef:ff:f1:5a:2c:01:84:85:a3:9c:17:8b:ce:39:fb:69:
ed:d3:70:f7:fd:6b:ad:65:6f:18:de:71:aa:fc:0e:28:29:dc:
a2:2e:29:aa:04:c5:ac:3e:19:6c:f8:11:03:ba:2d:22:17:f4:
56:65:13:5c:6e:b9:4d:70:4a:f4:81:2e:45:38:e4:f9:30:56:
a8:ab:34:44:5e:8f:83:c6:4b:fb:a6:50:4d:e2:a6:69:a6:20:
b7:a4:aa:fc:49:eb:43:ca:55:81:7d:b4:25:94:36:76:db:84:
7d:08:95:8a:7b:14:6a:86:c6:91:66:9c:b8:a8:7a:17:52:69:
d9:04:1e:6a:c3:ce:e4:ee:a7:76:be:e6:1e:60:4c:fe:83:19:
3e:4c:2f:61:09:e6:88:3e:d9:e9:47:f2:c5:1d:e7:b9:04:ed:
fb:87:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org