Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/rjayh9RX6RnbkLD2YsomR6Nvb_8.roa
File: rjayh9RX6RnbkLD2YsomR6Nvb_8.roa (raw, json)
Hash identifier: nw4R8Msf9grWIiu/TeVYoIdEq6+g6qMJBnlnJ4p9ZyI=
Subject key identifier: AE:36:B2:87:D4:57:E9:19:DB:90:B0:F6:62:CA:26:47:A3:6F:6F:FF
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 087110F6
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/rjayh9RX6RnbkLD2YsomR6Nvb_8.roa
Signing time: Sat 01 Jan 2022 05:59:32 +0000
ROA not before: Sat 01 Jan 2022 05:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.13.84.0/22 maxlen: 22
45.13.85.0/24 maxlen: 24
45.13.84.0/24 maxlen: 24
45.13.87.0/24 maxlen: 24
45.13.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141627638 (0x87110f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jan 1 05:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae36b287d457e919db90b0f662ca2647a36f6fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:1b:69:35:80:25:d6:46:d8:0c:54:4c:c2:
24:66:4a:3d:0c:44:51:cd:7c:61:56:ff:20:06:0c:
5a:6a:ba:0a:81:4d:d4:f0:d9:a7:51:f0:ad:0e:73:
19:a5:83:dd:90:93:e2:d1:01:08:7a:79:45:4a:a2:
79:d0:5d:03:d0:6a:47:b6:de:59:a5:ad:08:89:7c:
da:55:8d:95:49:1d:c2:2d:25:3e:af:23:f4:e7:ad:
24:f1:a2:89:01:18:b8:d1:89:fe:f3:f1:3a:09:7d:
b3:87:0e:51:ca:7e:1a:5f:98:a8:44:a5:bd:56:a6:
b8:a7:45:55:c7:dc:85:76:60:3a:41:9d:5a:0b:01:
99:db:ea:6e:76:ee:92:4b:3f:bd:19:23:5b:5a:39:
19:90:83:1b:bf:c6:fc:bf:04:26:64:f9:12:d6:55:
92:f0:3f:0b:4c:9b:c9:31:11:54:82:f9:6e:6c:a3:
14:23:4c:53:6d:cb:cf:d7:d7:03:9c:d3:8a:29:db:
ca:8c:d2:82:ec:0b:8d:7f:66:22:4d:27:c2:e9:38:
54:3f:90:ad:af:4d:68:8a:4c:11:32:11:a9:ca:dc:
c9:2a:1d:bb:92:b0:a9:b8:0d:69:7d:35:ff:9b:c7:
d1:54:97:f1:f9:fe:cb:bf:74:29:34:ff:e8:a8:5f:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:B2:87:D4:57:E9:19:DB:90:B0:F6:62:CA:26:47:A3:6F:6F:FF
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/rjayh9RX6RnbkLD2YsomR6Nvb_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:03:cc:bf:1b:0c:f7:4a:2d:28:41:4c:38:a0:41:3c:6c:15:
4d:1a:cf:20:a2:77:8a:f2:7a:3d:4f:71:ee:32:f4:fe:04:9b:
de:ba:90:37:47:46:68:db:bb:b7:f3:a8:ee:62:2c:a4:49:8e:
b6:80:72:0e:2d:8a:f5:78:5f:b8:ed:5a:96:5a:05:4f:72:18:
3a:e8:bf:35:a8:ec:11:a4:11:b2:15:2b:a0:67:94:fb:b3:f3:
99:0f:7c:57:82:bf:1e:b5:b6:81:fd:5c:af:94:f1:4c:03:fb:
9f:6c:da:a0:fd:e1:50:7d:b3:6f:06:2c:b6:ba:22:1f:45:98:
f7:2d:42:b0:c9:2f:b8:df:88:08:ff:62:3e:2d:4e:15:6d:85:
15:f1:96:cd:8a:81:7f:3b:a4:00:4a:42:75:92:bf:d8:80:0c:
8d:dc:a7:40:f6:52:e2:1c:7b:66:e3:69:8b:15:13:6f:7c:7a:
cd:05:55:0e:98:b3:0e:5a:cb:97:27:da:95:cf:a8:78:8b:0b:
09:fc:f9:d4:58:31:03:c4:57:05:3f:90:f4:2d:ad:c0:30:23:
ec:cb:44:8f:45:e5:6c:00:6b:8d:3e:7d:34:be:59:62:ff:a6:
37:e6:dc:7d:d1:be:c6:79:68:28:30:48:f4:6c:bd:3b:8c:d3:
53:aa:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-ams.rpki-client.org