Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8Ai8GZc8rUDhYkKs1WGPypYNxP8.roa
File: 8Ai8GZc8rUDhYkKs1WGPypYNxP8.roa (raw, json)
Hash identifier: yoArbYmrjgFq6kXRxBt4tQ+W0rynr10JLn35i4LLpkE=
Subject key identifier: F0:08:BC:19:97:3C:AD:40:E1:62:42:AC:D5:61:8F:CA:96:0D:C4:FF
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01841E0881B389B7CFC8009F399C8C61231F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8Ai8GZc8rUDhYkKs1WGPypYNxP8.roa
Signing time: Fri 28 Oct 2022 09:59:44 +0000
ROA not before: Fri 28 Oct 2022 09:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9335
IP address blocks: 45.144.164.0/22 maxlen: 24
45.91.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:08:81:b3:89:b7:cf:c8:00:9f:39:9c:8c:61:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 28 09:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f008bc19973cad40e16242acd5618fca960dc4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:6f:72:7b:a9:c4:f8:9f:f3:f5:c8:37:f5:
90:2e:ab:2b:4d:65:46:4a:77:74:70:ef:39:69:17:
14:3c:b9:76:32:60:d5:ff:9f:97:c4:bd:9f:ca:01:
9b:90:6c:e5:0c:11:e7:9a:5f:86:02:68:9c:fa:c8:
94:d6:d7:78:63:c5:d6:6a:29:61:bf:49:52:f1:dd:
6a:05:f9:ab:5f:b7:74:74:2b:19:4f:f3:b3:19:1b:
16:0c:aa:87:0d:59:a9:6e:29:10:56:b2:e7:4a:d5:
09:cc:0d:34:f2:ed:b3:44:9d:31:79:4f:b2:fd:46:
3f:7f:c8:7d:3c:c2:e9:9d:bc:c4:41:65:0c:d0:1a:
0e:d7:99:09:d3:38:06:7a:0f:4c:49:93:d1:ad:b0:
44:73:5d:46:fe:8f:85:6c:2a:ff:45:49:4b:53:d6:
5e:ef:24:27:8e:d0:3d:ee:2f:40:63:f5:d8:ab:ff:
44:6e:e1:00:b6:9c:34:5d:47:f8:fc:9e:72:ab:ed:
c7:04:ed:48:99:d9:41:e3:b2:3f:40:23:44:70:07:
5e:dc:d6:14:03:3c:b7:be:75:43:14:be:ab:b4:70:
2a:60:ec:e1:b7:c3:03:ed:3a:85:21:e9:f4:0c:3d:
4c:cd:a8:d0:07:75:04:35:58:2b:bc:45:6b:d0:81:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:BC:19:97:3C:AD:40:E1:62:42:AC:D5:61:8F:CA:96:0D:C4:FF
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8Ai8GZc8rUDhYkKs1WGPypYNxP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.132.0/24
45.144.164.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f1:d2:05:ef:29:8c:59:e8:ca:7d:ae:ad:77:39:d1:ed:11:
d7:bd:cd:98:60:db:d0:38:80:5e:4a:03:da:b5:8b:c2:2e:e4:
5c:af:56:6c:79:7c:e2:34:33:77:88:67:fa:a4:97:5d:5a:bc:
8f:ce:23:08:43:84:6d:4e:60:33:3e:cb:3c:35:9d:7d:41:f5:
0a:8d:72:e8:f3:29:e8:67:d6:15:cb:fa:f8:e3:9a:45:3f:97:
e4:0b:25:bc:b0:58:b8:d8:47:5f:d1:a5:8d:00:f0:1e:a3:67:
a8:14:ac:4c:1b:5d:7f:29:07:a1:19:69:cc:99:14:5f:a5:67:
5e:f1:47:ab:89:8d:7b:46:dd:c0:73:b0:90:ad:2d:f4:65:d9:
69:f4:18:bb:36:16:66:3b:8f:60:4f:ef:af:d3:b9:55:47:36:
0d:83:24:38:35:24:7c:dc:d1:b2:d9:f0:6d:38:a3:c1:ad:92:
c1:47:f2:3f:8a:3b:08:4b:3e:56:6b:d2:a4:44:9a:e2:a3:92:
46:e1:bd:cf:88:90:f9:2a:2e:d9:70:d0:fd:9b:ee:22:6d:57:
c9:ca:f8:bb:c3:60:53:25:f9:66:f7:56:44:a5:5e:e1:d3:78:
7e:2b:18:32:25:b1:31:44:54:b8:06:cc:ce:bb:8c:73:97:b3:
6c:08:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org