Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ncjrmsuDF5IYPdTVUdUO_HJpH4M.roa
File: ncjrmsuDF5IYPdTVUdUO_HJpH4M.roa (raw, json)
Hash identifier: 78jh0AVe/oVcVADXfIjWdUTyTpZpGaQgprtiXdo4G+Q=
Subject key identifier: 9D:C8:EB:9A:CB:83:17:92:18:3D:D4:D5:51:D5:0E:FC:72:69:1F:83
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018557D6539DE4FA6C58CC71D9618A34EB13
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ncjrmsuDF5IYPdTVUdUO_HJpH4M.roa
Signing time: Wed 28 Dec 2022 08:25:41 +0000
ROA not before: Wed 28 Dec 2022 08:25:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398395
IP address blocks: 45.67.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:d6:53:9d:e4:fa:6c:58:cc:71:d9:61:8a:34:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 28 08:25:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dc8eb9acb831792183dd4d551d50efc72691f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:87:3c:46:95:f9:34:86:29:15:1e:be:09:
f2:7f:12:39:02:89:76:47:b5:9d:78:12:3d:1d:38:
43:3b:1f:46:f8:46:6c:81:5c:d9:19:98:4b:ec:90:
71:a6:03:00:95:9b:d0:55:d6:8a:bb:de:63:3c:b1:
93:6e:12:58:21:c4:7c:5e:15:54:e3:24:aa:40:13:
78:44:6a:d7:65:ee:16:a4:81:c2:bb:d1:cd:53:38:
d0:4b:86:11:93:3e:7f:eb:3f:86:95:99:c7:16:9b:
db:d4:b9:92:5c:61:92:25:b9:38:1f:e9:86:ee:05:
ce:82:95:3b:be:f0:46:1f:1c:04:96:4b:1d:84:c3:
60:31:cc:52:83:bf:31:01:e6:e4:78:06:be:43:66:
01:21:af:e9:f7:07:09:81:49:37:81:bf:58:d0:c2:
b3:b7:bf:4e:22:d7:81:42:a1:2d:dc:37:95:eb:d0:
10:8d:41:80:13:a6:ed:4e:d9:07:a2:4a:2b:0b:9b:
81:86:6a:8d:53:64:bd:04:da:e1:01:3e:56:eb:a2:
d4:14:26:4d:98:01:d2:0c:76:6c:43:ca:e1:d9:37:
71:79:f5:c1:6a:c9:5c:31:4f:42:ee:cc:f7:99:19:
30:35:c0:ad:97:e2:6b:02:cf:9a:7d:ce:61:df:a3:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C8:EB:9A:CB:83:17:92:18:3D:D4:D5:51:D5:0E:FC:72:69:1F:83
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ncjrmsuDF5IYPdTVUdUO_HJpH4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.87.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cc:33:a0:86:55:f2:0a:ba:e7:2c:6b:19:d4:5f:c9:28:e8:
40:14:d8:46:38:2f:aa:5b:e0:6e:5c:cd:cb:23:cd:3f:98:66:
e4:a1:dc:93:00:6d:e8:26:bc:01:0b:66:4a:71:b1:55:7e:a3:
5d:8f:79:0c:15:63:4b:48:c6:d9:f9:d1:e0:fa:aa:b8:e0:90:
e8:83:d5:df:2f:11:ad:24:69:c7:88:08:4d:b8:e2:ff:0c:4e:
83:bb:76:73:5b:88:9d:4f:75:68:58:6b:96:17:2e:3c:32:8e:
41:d8:c6:dd:b6:47:52:ed:6f:b1:63:d4:f6:13:a0:c2:b2:ce:
5f:2d:a7:3a:b3:fa:ac:7f:ac:02:bf:42:35:87:84:e4:55:79:
1e:eb:89:81:0a:7d:d5:d5:3d:5b:3e:32:86:03:7b:ef:a8:f4:
79:d3:20:fb:ff:33:cf:10:a5:7c:7a:ac:9a:38:14:87:a2:24:
ca:38:cb:19:f0:19:e1:1c:6f:47:a8:2e:54:4b:fc:a1:a3:49:
2b:53:73:ba:03:f4:7b:00:42:d1:5b:96:c6:42:ac:41:6d:2a:
65:c6:e7:97:8a:26:b1:5f:22:52:9b:ac:c7:4a:e6:33:cc:28:
70:d2:d9:dc:94:ed:ce:82:7e:02:0c:83:66:33:d5:de:a1:0e:
35:43:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org