Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiSO29f3uXr1IoTQ3zH9IVV70RM.roa
File: SiSO29f3uXr1IoTQ3zH9IVV70RM.roa (raw, json)
Hash identifier: PoNA2Y/ZJo6KsU/Gzh3PiHq3GvVkJAqqWuSbR+2jjTI=
Subject key identifier: 4A:24:8E:DB:D7:F7:B9:7A:F5:22:84:D0:DF:31:FD:21:55:7B:D1:13
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B79E082
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiSO29f3uXr1IoTQ3zH9IVV70RM.roa
Signing time: Wed 25 May 2022 12:13:13 +0000
ROA not before: Wed 25 May 2022 12:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 45.138.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460972162 (0x1b79e082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 25 12:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a248edbd7f7b97af52284d0df31fd21557bd113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:61:14:fa:11:23:ac:7b:32:b2:4a:74:cd:
8c:97:3b:80:5c:cb:4e:cc:69:04:40:f2:ad:d4:42:
91:17:39:42:3a:14:dc:82:5c:36:48:6d:1b:52:bb:
2d:ed:37:6b:34:c7:89:04:5d:6c:75:2a:f4:26:e9:
54:58:a7:4b:64:a5:7a:c0:03:b6:12:f7:b8:7c:41:
bb:f2:d2:53:52:f2:3b:e2:bf:bc:04:bd:af:ed:80:
bd:26:82:61:7b:1e:69:b5:d3:8e:b5:94:c4:26:f2:
b7:a5:84:d5:e7:28:06:dd:06:6e:86:8d:3b:08:27:
8d:11:e6:51:89:49:4d:f9:07:c1:f6:99:0f:68:83:
34:0e:27:c9:14:62:e0:20:09:5f:3a:93:ab:03:e1:
8f:7b:28:60:08:77:3c:60:4d:aa:51:62:45:2f:83:
3d:8d:4c:3d:33:2a:cb:e4:66:38:03:9d:12:64:5d:
dd:a4:61:e7:b8:b8:25:08:27:bc:8b:fa:e9:15:bd:
35:5e:bc:2b:ac:10:eb:f6:5b:fe:87:c2:59:c7:78:
e5:4c:1b:73:10:53:27:4f:29:aa:b1:9b:8d:fe:b2:
27:17:6d:a1:6b:fd:d7:19:62:68:8b:6c:3e:be:10:
37:c6:2f:7d:42:45:24:10:1a:56:f5:7d:70:16:1d:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:8E:DB:D7:F7:B9:7A:F5:22:84:D0:DF:31:FD:21:55:7B:D1:13
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SiSO29f3uXr1IoTQ3zH9IVV70RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f2:97:be:ca:59:0c:ce:40:80:d4:56:64:f3:5c:cb:ac:74:
85:43:f9:e9:1d:f5:14:ce:e3:5c:b5:b0:cb:2a:f1:05:72:a4:
59:30:25:29:36:72:ff:c9:88:f5:c5:ec:dc:fe:e1:08:b3:64:
18:87:d2:87:a5:e1:1a:b1:c3:06:de:ff:f1:98:c4:f7:5f:cf:
9b:f3:43:98:80:75:7f:78:29:0d:18:1d:79:9a:15:c2:68:1d:
49:34:76:79:b7:3c:b2:c7:95:db:fc:fa:46:2a:a4:ec:3d:7f:
f3:3d:6d:48:ba:b9:85:7b:40:8d:aa:4b:7a:65:84:dd:94:02:
88:ea:b1:54:f2:0c:b7:0a:d3:09:e6:d8:f7:51:b7:ee:3c:c1:
1e:3c:0c:0d:03:d1:26:3a:a5:36:46:31:3e:fd:2d:2b:24:62:
f2:40:aa:87:e6:2f:7a:a6:2a:e8:b8:28:51:a3:11:46:a5:67:
13:cb:24:f2:bd:b2:9a:db:7d:07:29:b0:22:36:40:7f:f3:36:
eb:8a:d4:e2:c3:58:b9:6a:30:35:ab:3d:eb:7a:f5:d1:5b:81:
45:43:41:b7:05:f4:db:69:64:07:95:2e:05:92:0f:46:72:73:
05:05:43:37:38:e7:7b:2f:77:8d:9f:ac:df:05:68:10:31:41:
6a:4a:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org