Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/dWH8j1vn7lFtHiJBUoNplPoXNSY.roa
File: dWH8j1vn7lFtHiJBUoNplPoXNSY.roa (raw, json)
Hash identifier: wNa1Rv0irt1m7tiF/ETynOi3+QoqaeoZ8Kp1XzFkS2o=
Subject key identifier: 75:61:FC:8F:5B:E7:EE:51:6D:1E:22:41:52:83:69:94:FA:17:35:26
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 835AD3
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/dWH8j1vn7lFtHiJBUoNplPoXNSY.roa
Signing time: Thu 24 Mar 2022 15:02:31 +0000
ROA not before: Thu 24 Mar 2022 15:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.143.11.0/24 maxlen: 24
45.143.9.0/24 maxlen: 24
94.143.225.0/24 maxlen: 24
45.143.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8608467 (0x835ad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Mar 24 15:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7561fc8f5be7ee516d1e224152836994fa173526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:df:4c:6c:85:cc:92:73:6c:3c:7c:b0:0a:
73:39:4d:23:b6:2c:0e:b8:65:c3:02:53:fe:30:2f:
b2:8e:07:7b:3c:85:fd:c9:5c:47:79:0e:b9:c2:43:
c2:91:b5:bf:90:d3:f8:c7:60:4e:5f:8b:88:29:4e:
9b:e7:3d:c1:60:08:20:82:75:1e:f1:00:8b:a9:2e:
c0:00:1e:1a:ee:a1:95:10:7f:4c:5f:87:ce:7a:e4:
bc:97:0b:4c:46:9b:0f:3d:a7:70:cc:cf:fa:38:02:
54:5b:ba:d7:b2:ef:cd:8c:16:08:b6:56:7e:cd:49:
1c:31:c6:45:98:ab:96:95:cf:c9:fb:34:98:c6:88:
e5:ad:d0:10:23:f8:fc:03:7a:16:89:15:bb:17:d9:
32:2c:7f:6d:a0:c8:1f:de:77:fb:78:88:f8:4f:76:
f1:4d:80:58:b6:78:96:84:af:48:6c:a3:d2:48:15:
fb:c3:c9:ae:4a:a6:08:0d:22:87:de:04:e7:9b:50:
28:67:ef:e2:70:e7:f5:55:9b:4d:bb:15:e8:b0:5d:
e9:4d:8f:bf:ef:a1:fd:05:f1:81:f2:94:18:48:63:
95:f4:e9:d5:0a:7c:03:c0:25:06:45:e7:49:8f:4f:
7f:2c:42:4b:f8:b8:16:c7:31:8a:c1:ff:b9:60:91:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:FC:8F:5B:E7:EE:51:6D:1E:22:41:52:83:69:94:FA:17:35:26
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/dWH8j1vn7lFtHiJBUoNplPoXNSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0-45.143.11.255
94.143.225.0/24
Signature Algorithm: sha256WithRSAEncryption
98:93:40:66:bf:a7:1c:21:1d:79:0f:c1:32:e5:6d:c7:88:09:
6a:04:b3:30:31:70:f0:ef:c6:a6:71:ba:3d:db:01:5a:d0:59:
64:fd:65:b0:e4:ae:52:ef:b1:6b:e2:e5:f3:de:48:c6:89:af:
c0:53:e5:49:d3:0c:49:d1:8a:6d:13:6e:68:8d:bb:c0:62:c8:
12:2c:4a:a1:e7:8b:2b:a2:56:ab:0e:df:b1:90:a5:93:e6:78:
aa:87:7f:44:26:fc:e7:d9:40:ce:d1:5b:eb:d5:24:c1:8b:ad:
21:e8:ce:15:06:90:cd:86:ad:30:19:c5:4c:1d:d3:dd:2e:91:
62:80:f7:ab:e4:3a:e9:1b:04:c4:f5:f6:c4:61:dc:db:e1:79:
87:36:ff:88:f9:f2:94:ca:7f:fe:af:63:e8:0c:46:6f:93:c7:
71:8d:9b:a4:8b:b4:a9:05:f3:3b:75:f7:f9:78:d3:ea:00:51:
da:bf:f7:3c:de:d4:aa:e5:df:50:17:2c:0f:4a:89:ea:d9:e5:
d7:fd:f9:db:18:8d:b7:74:06:13:d9:02:de:16:54:95:0b:ce:
e2:7a:a8:0d:8e:e4:3b:b2:de:0f:c4:0f:42:07:29:ed:b5:43:
33:94:4a:1c:f3:0f:24:c8:15:c8:c6:fc:6f:d4:e4:01:21:54:
01:26:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org