Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KCwRcud7xJbsEcaG-xWNm6bj3bA.roa
File: KCwRcud7xJbsEcaG-xWNm6bj3bA.roa (raw, json)
Hash identifier: D7HwkO1I4SdXd17RC7S2OvuGGUbP24wXDhZa3ABtNx4=
Subject key identifier: 28:2C:11:72:E7:7B:C4:96:EC:11:C6:86:FB:15:8D:9B:A6:E3:DD:B0
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01841309FBF7EB1C5A76C36A19F956E61843
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KCwRcud7xJbsEcaG-xWNm6bj3bA.roa
Signing time: Wed 26 Oct 2022 06:45:32 +0000
ROA not before: Wed 26 Oct 2022 06:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202422
IP address blocks: 45.130.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:09:fb:f7:eb:1c:5a:76:c3:6a:19:f9:56:e6:18:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 26 06:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=282c1172e77bc496ec11c686fb158d9ba6e3ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:8e:5d:51:ea:b9:00:8f:60:22:14:9a:64:
c3:5d:da:c3:bb:26:f1:b1:20:e9:e8:67:e1:58:fd:
45:8b:4b:0a:2a:76:17:e2:94:14:eb:0b:b2:87:d8:
83:80:6c:c4:d4:b2:07:a9:8e:57:42:42:4b:9f:69:
df:42:1d:6f:21:2c:88:1e:ea:48:1c:4e:5e:30:21:
9c:28:e2:13:a2:c6:47:29:2d:6d:76:54:e3:11:d9:
19:00:6b:6e:f6:34:6a:b1:cb:96:61:56:9b:7f:83:
e6:10:84:69:f2:f2:dd:60:15:4e:e4:a5:5d:9f:53:
d5:27:97:9d:d7:05:7e:9f:f5:ae:49:bc:3c:be:b8:
cb:0e:de:4e:58:d0:2c:24:d9:af:88:ed:0a:61:4e:
08:db:3d:57:38:51:fa:58:fd:3b:5a:86:c4:9a:0b:
78:6c:f2:71:4d:f9:ef:ed:19:93:a2:04:7e:9f:c6:
ff:68:2d:63:c8:9d:1b:db:66:50:41:39:36:3c:8c:
81:ea:4a:3f:c8:e4:51:d9:49:40:0d:ad:19:9d:d1:
37:63:ec:26:e4:7f:f0:a3:73:52:5d:46:3e:18:95:
a5:24:d2:ae:4e:ac:c5:9a:65:6d:c3:aa:70:ba:75:
24:c0:b1:8c:c1:9e:d3:fb:08:c6:e2:07:33:ba:60:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:11:72:E7:7B:C4:96:EC:11:C6:86:FB:15:8D:9B:A6:E3:DD:B0
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KCwRcud7xJbsEcaG-xWNm6bj3bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
33:be:a1:e2:aa:44:36:f2:6a:7b:19:be:38:ba:d2:95:5b:6f:
4f:f2:9a:5e:e1:c6:1b:49:0a:63:fa:c3:e1:e1:e7:2b:cb:86:
8f:d1:47:c9:61:c3:e2:70:a9:08:b9:50:b3:65:f2:85:e9:1c:
25:38:b3:43:9e:e1:4e:9d:b2:84:0f:7c:6f:42:ef:02:71:12:
95:e2:03:20:bf:92:8d:94:7a:62:24:bb:fd:7f:85:61:5d:0b:
4a:e5:ae:ca:07:c0:b4:b1:99:bf:50:d5:29:c5:a6:d2:8d:7e:
01:69:ee:b7:13:9b:63:08:45:c4:2d:fb:b4:4a:cb:8d:10:f0:
80:2c:4a:cb:38:d0:53:7d:43:58:49:73:74:15:e6:5d:3c:d6:
8d:cf:5b:cb:cf:52:a7:75:17:2e:e2:2b:59:7f:91:04:d9:d5:
05:36:55:87:0b:93:47:50:65:a3:0f:e2:30:95:c6:0b:43:48:
3e:0f:80:1a:5e:a3:9f:e0:c0:c0:b5:e4:16:ca:2b:98:ab:98:
ad:24:86:25:e5:48:a3:b9:91:ec:3b:c3:eb:c3:df:cc:fc:27:
d4:15:b5:dc:bf:8e:59:65:00:8e:78:20:5f:a0:65:94:c7:4c:
4e:27:59:21:fd:b5:77:3d:43:43:65:ba:b6:4f:4e:50:a6:88:
86:ae:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org