Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QwVGixwghRlc7T-gJKCsDwBsIIw.roa
File: QwVGixwghRlc7T-gJKCsDwBsIIw.roa (raw, json)
Hash identifier: 9iZyMYC1bZs3fjh4Wlurs/sgAAzxfKmxMqzVnpjClUU=
Subject key identifier: 43:05:46:8B:1C:20:85:19:5C:ED:3F:A0:24:A0:AC:0F:00:6C:20:8C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0183C7B1B8CD07A9F4C6D180A736FB291E93
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QwVGixwghRlc7T-gJKCsDwBsIIw.roa
Signing time: Tue 11 Oct 2022 15:37:36 +0000
ROA not before: Tue 11 Oct 2022 15:37:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60798
IP address blocks: 45.145.250.0/24 maxlen: 24
45.138.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:b1:b8:cd:07:a9:f4:c6:d1:80:a7:36:fb:29:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 11 15:37:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4305468b1c2085195ced3fa024a0ac0f006c208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:39:3f:c4:04:73:f7:10:96:76:c2:23:39:
0b:39:45:f9:c2:c3:ea:11:32:99:d5:17:c4:85:56:
b7:0f:09:9b:f1:10:dc:bb:ec:31:e5:4f:eb:a0:58:
9b:26:be:44:8a:84:d0:ba:d1:cf:d6:cb:16:97:ea:
18:bd:ee:92:2b:71:c8:dd:3d:5f:96:03:72:e3:42:
e8:27:6d:ae:67:b7:81:5c:48:44:8d:be:fc:4b:56:
6c:2d:9b:1c:85:a3:f7:4a:db:cb:72:5e:57:b3:e0:
52:6f:24:c1:5b:00:22:b0:d3:88:75:a6:f4:97:df:
e5:80:7d:86:a0:a7:5d:4c:50:55:3e:0e:94:85:34:
76:63:84:d8:12:aa:9a:a3:77:24:e0:cd:ff:7d:23:
ed:74:2a:53:4e:6a:4a:3d:ab:19:86:ba:b3:09:9a:
f3:64:71:97:76:88:99:93:87:82:b5:14:05:09:50:
8a:f1:79:a7:cf:f2:0f:c4:45:f8:da:99:f0:ba:3b:
97:51:5b:04:d4:93:be:3d:b0:67:70:7e:1b:10:cc:
2d:d4:df:d5:af:c9:c7:df:f0:67:5b:31:09:a6:ac:
26:80:3f:4e:da:dd:c6:e4:7c:93:41:fc:49:c1:11:
af:32:db:aa:89:d2:fa:e1:3f:0f:00:4b:6f:b3:23:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:46:8B:1C:20:85:19:5C:ED:3F:A0:24:A0:AC:0F:00:6C:20:8C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QwVGixwghRlc7T-gJKCsDwBsIIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.18.0/24
45.145.250.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e2:95:eb:8d:5e:d7:6a:cf:ad:54:cd:a9:a9:c1:de:ee:1a:
08:38:9d:8f:6d:81:b9:ac:27:f0:59:21:b2:21:f7:b7:c7:a3:
f7:6b:8e:89:8f:9c:a5:15:ec:db:40:bc:2b:f7:38:45:20:83:
26:f7:27:b6:33:00:e3:a4:24:35:76:be:c7:f8:04:76:21:7b:
59:bb:de:d7:88:d6:e0:60:74:92:ac:eb:61:2b:eb:92:d6:8c:
bf:1d:74:3f:7a:61:e4:03:96:1a:f5:4d:e8:8b:a4:22:f2:54:
a8:a6:2c:ab:06:7f:16:0a:19:5a:98:40:12:c4:84:dc:aa:f5:
82:43:eb:4b:02:27:a9:02:8f:00:02:5d:19:20:11:95:57:78:
6c:cc:fe:c0:99:25:b8:66:63:52:9a:c0:fc:da:21:ba:b8:dd:
6d:ee:d2:5f:7c:2a:76:d2:eb:ec:a8:ad:59:ac:07:0d:05:0a:
52:da:e9:15:56:2b:16:0f:b9:5c:a4:87:d2:e1:61:c6:1b:4a:
ff:51:7a:d7:93:1d:5b:ab:7d:05:1f:1e:02:af:18:75:83:30:
98:54:b4:76:f3:1e:61:3a:e6:d0:ae:8d:c1:98:59:7f:a4:e6:
14:31:36:47:6e:6e:dc:6b:18:a7:05:01:39:d0:17:d1:6a:a6:
a0:9e:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org