Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qCkH2xwnzRL3ZAP3fSQ7LfGNj20.roa
File: qCkH2xwnzRL3ZAP3fSQ7LfGNj20.roa (raw, json)
Hash identifier: DwUZ27g+ECsHArBpd8b+V+2/kcxIVPBDAjtrY+9bNcw=
Subject key identifier: A8:29:07:DB:1C:27:CD:12:F7:64:03:F7:7D:24:3B:2D:F1:8D:8F:6D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0B2CE3D2
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qCkH2xwnzRL3ZAP3fSQ7LfGNj20.roa
Signing time: Mon 04 Jul 2022 08:31:25 +0000
ROA not before: Mon 04 Jul 2022 08:31:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204422
IP address blocks: 45.153.24.0/22 maxlen: 22
45.137.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187491282 (0xb2ce3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 4 08:31:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a82907db1c27cd12f76403f77d243b2df18d8f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:89:77:23:1b:bc:49:15:a8:2f:09:c4:4e:
62:02:25:c7:8e:4f:e0:12:be:27:aa:6f:63:1f:d6:
85:b5:7c:dd:8a:ac:04:94:34:ad:3e:78:a3:8a:41:
4e:55:43:2c:4d:74:59:d7:6d:41:1e:45:49:77:cc:
29:7f:91:15:99:3a:4f:f8:3b:29:49:67:13:76:1e:
50:3c:28:d0:51:4e:e4:ba:59:4b:7a:ec:2b:bf:b1:
11:ac:b3:ae:78:37:c9:c5:31:59:e1:10:a5:4e:0c:
e4:06:6c:d2:42:92:1f:4c:f6:02:78:22:09:da:e6:
50:f9:d2:64:5c:b5:b8:fa:ad:57:5e:3d:a3:40:fc:
8a:e8:8b:4c:cc:0e:24:da:1c:74:46:0d:33:3b:4e:
ef:d7:23:17:53:64:5e:60:b3:89:9d:a5:75:d1:31:
6e:55:a7:b5:9a:4f:ab:f1:9a:1e:2f:c7:ab:d0:1f:
9b:03:d2:5a:6c:b7:aa:e5:62:df:37:4a:bc:bb:e5:
e0:21:e6:e9:9f:e8:0e:e2:c2:fd:50:1d:93:cb:2f:
70:25:54:33:34:7e:f7:52:41:71:a7:22:0a:57:47:
e0:99:54:e4:3e:6c:9a:9a:10:47:68:19:7d:ca:4b:
18:9b:44:c0:10:7f:99:72:8a:7d:c5:3e:6a:45:21:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:07:DB:1C:27:CD:12:F7:64:03:F7:7D:24:3B:2D:F1:8D:8F:6D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qCkH2xwnzRL3ZAP3fSQ7LfGNj20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.203.0/24
45.153.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:81:4e:63:2f:40:63:14:9c:4d:b4:53:00:2c:03:c9:8b:10:
d8:69:9d:ef:0b:b2:de:b7:2c:29:26:6b:f2:01:44:48:a2:f4:
f1:5e:30:70:3b:3a:f5:3b:96:9e:70:94:ef:d0:85:82:a7:cf:
e6:7e:1a:02:a9:09:2f:20:22:70:5c:b9:8d:d3:95:2e:b5:27:
14:02:1e:b2:5b:d5:7f:72:e3:2d:4b:88:9a:8e:6a:c3:ac:04:
bd:24:44:aa:ab:1c:cb:e6:b7:7e:87:fd:7d:34:87:7c:15:d7:
3d:5f:6a:a5:ad:21:00:d5:90:ff:be:5f:4e:4a:96:d6:e4:f6:
e4:86:05:ef:de:12:b2:75:91:a4:9f:0e:b7:7b:6d:66:99:e8:
ae:d9:d0:cf:96:38:9c:15:e9:c0:5e:d5:07:40:b3:94:20:4b:
b9:5d:27:c9:48:6a:31:15:76:aa:1f:2b:cd:ae:76:5d:e9:17:
21:6d:2d:b7:50:d9:df:2d:bf:d0:da:ee:4e:08:42:95:30:73:
16:76:cf:49:4c:78:2e:99:bd:f1:e2:61:b4:c2:2e:ee:fa:f8:
7a:96:2a:66:4e:8e:bd:38:19:a6:f0:a8:81:a5:e1:a4:26:a5:
01:4c:f9:07:3d:e2:36:0e:5f:23:9b:45:7d:20:b8:3c:a6:71:
71:f5:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org