Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J9jjx5-IP0-ILd7QK7CRZT1Mlok.roa
File: J9jjx5-IP0-ILd7QK7CRZT1Mlok.roa (raw, json)
Hash identifier: iSV55FIHK1ZUSszNTq388DbGf5ivFU5CVw6OMofYfVQ=
Subject key identifier: 27:D8:E3:C7:9F:88:3F:4F:88:2D:DE:D0:2B:B0:91:65:3D:4C:96:89
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01847EFCBFC3765A96B44D9059B7943D2748
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J9jjx5-IP0-ILd7QK7CRZT1Mlok.roa
Signing time: Wed 16 Nov 2022 05:50:04 +0000
ROA not before: Wed 16 Nov 2022 05:50:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.140.215.0/24 maxlen: 24
45.142.205.0/24 maxlen: 24
45.142.207.0/24 maxlen: 24
45.144.157.0/24 maxlen: 24
45.144.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:bf:c3:76:5a:96:b4:4d:90:59:b7:94:3d:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 16 05:50:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27d8e3c79f883f4f882dded02bb091653d4c9689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:d0:1f:2c:85:1e:a2:07:ae:e6:1d:29:48:
93:5d:83:1c:3b:33:19:2a:ce:c9:42:0a:c7:51:48:
17:81:25:d6:5c:25:72:38:4d:73:af:3b:31:8b:76:
bb:1d:e3:3f:ff:34:61:f5:3a:19:1a:76:e3:35:83:
15:66:b3:88:81:0a:33:6b:2c:de:18:a0:17:ab:46:
fc:42:e0:57:bd:4c:70:c0:a2:75:f9:4a:19:1f:ed:
32:76:0f:11:2f:ae:cd:f5:0a:e7:09:4e:11:c1:36:
5e:3b:5c:85:39:8e:3b:d1:34:a5:b7:98:0d:32:98:
c5:2d:16:e9:65:4e:cd:7f:77:03:07:97:49:8f:ba:
ec:8b:d8:28:91:56:45:b6:84:19:3a:e8:95:74:99:
ca:e6:a1:fa:0b:5b:53:a2:b7:df:7a:43:b9:05:d9:
4c:99:21:36:4b:8b:ef:f3:95:b5:d0:54:8d:b7:a0:
25:82:70:a7:12:6d:bd:2a:06:7a:52:01:96:c6:a3:
d2:48:90:30:31:10:ab:8f:15:36:4b:6a:16:db:a1:
5d:66:dc:73:5e:af:52:52:c1:49:b7:f2:b0:d5:45:
eb:de:d4:be:36:99:d5:27:6b:45:83:4f:4a:14:39:
c1:69:72:3b:72:46:cd:bf:67:7c:a2:76:cf:8f:82:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:E3:C7:9F:88:3F:4F:88:2D:DE:D0:2B:B0:91:65:3D:4C:96:89
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J9jjx5-IP0-ILd7QK7CRZT1Mlok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.215.0/24
45.142.205.0/24
45.142.207.0/24
45.144.157.0/24
45.144.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:34:6f:b0:97:0e:f0:27:5a:3c:c3:39:d2:1c:d5:a5:ea:eb:
ce:0e:7b:a2:cc:23:e2:85:2d:eb:ce:e4:07:38:64:d3:ff:68:
fa:9b:64:05:40:e5:25:6f:cb:53:5b:00:29:4f:5b:ad:13:a4:
ba:1c:27:fb:de:64:84:af:d1:5c:6f:aa:11:22:a8:83:f2:de:
22:20:db:c2:06:66:26:e2:ad:d2:35:ac:5d:e2:35:ca:f2:41:
4e:f9:07:51:ce:a8:87:a7:01:8d:62:bc:92:83:a9:d6:fe:03:
12:5a:ea:d0:8f:fc:17:bd:2e:bc:64:32:92:81:73:3c:32:60:
1a:f6:6a:4b:f7:03:db:72:d4:84:aa:e5:4e:41:40:f2:c3:95:
78:3e:66:d0:b1:c1:6e:9f:0c:cc:e2:6c:68:62:2a:11:03:7e:
41:f6:af:5a:a8:3e:ec:1b:49:fa:af:b9:61:12:f8:e9:0e:50:
82:89:20:a6:87:58:15:5e:b9:30:b0:a7:9a:db:58:3f:a2:44:
61:90:c6:08:73:68:a4:36:ef:6a:55:a2:7d:37:58:fb:09:a9:
4a:24:91:51:34:be:aa:30:47:62:d4:18:32:45:61:af:a2:29:
c7:dc:d3:21:bf:c9:c1:58:0e:80:5f:d2:d2:5b:db:bf:d6:d8:
51:40:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org