Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SrWFlgC2fvEGx3Ds_eozAQ8hL3U.roa
File: SrWFlgC2fvEGx3Ds_eozAQ8hL3U.roa (raw, json)
Hash identifier: tw3xbET74NlNGnZFaQF1YEGck9CXL/7GM4kkxIKG3JY=
Subject key identifier: 4A:B5:85:96:00:B6:7E:F1:06:C7:70:EC:FD:EA:33:01:0F:21:2F:75
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E92786
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SrWFlgC2fvEGx3Ds_eozAQ8hL3U.roa
Signing time: Sat 01 Jan 2022 15:56:50 +0000
ROA not before: Sat 01 Jan 2022 15:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134512
IP address blocks: 45.94.30.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434710406 (0x19e92786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab5859600b67ef106c770ecfdea33010f212f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:3a:e5:a7:87:7a:a1:e5:8f:d3:61:2c:c6:
d9:17:55:70:17:55:6a:a4:c9:19:2e:12:50:bc:f0:
b0:2c:03:e8:7e:b6:5b:60:8e:b4:30:b6:1f:6f:5d:
8b:ec:b8:a5:ce:1a:5f:e5:ba:fb:0d:33:84:0a:25:
0b:14:42:7a:72:d5:ac:0a:49:59:dc:32:9a:6e:a2:
00:5d:56:64:72:de:7c:5d:41:b0:8e:ed:3b:ba:15:
e8:e8:34:ae:ca:0c:10:02:4d:76:45:ae:1e:08:53:
24:4a:95:58:2b:ca:d0:eb:2f:a7:cf:c0:01:c9:a1:
8a:98:73:ba:7b:7d:e9:5e:d4:4d:83:1a:4d:23:78:
fb:c9:3b:63:cf:46:e3:1c:5a:90:cd:af:d8:9a:2c:
e7:f6:f3:ff:27:98:41:22:72:56:67:f0:bf:43:ce:
4f:3f:ed:d8:70:77:a7:08:a2:bc:f2:17:9c:9f:ba:
b7:ca:02:ff:67:f2:ef:4f:2f:13:4b:82:e9:95:01:
f7:ab:47:1f:37:38:5d:16:ab:b8:4e:8d:ea:26:63:
66:e3:e1:bf:b0:40:46:c9:ce:cc:38:f9:4a:18:b2:
b8:df:4f:8a:cc:28:9f:81:13:11:69:f2:bf:08:65:
7e:49:24:d4:23:7d:0f:7b:de:3e:2d:82:7f:67:35:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B5:85:96:00:B6:7E:F1:06:C7:70:EC:FD:EA:33:01:0F:21:2F:75
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SrWFlgC2fvEGx3Ds_eozAQ8hL3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/24
45.94.30.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fd:0c:b3:16:8c:70:ec:91:1c:a3:c4:fd:20:b2:91:b7:c5:
6f:92:c7:d4:76:05:6d:ae:5c:f3:c7:f9:d8:c3:5c:50:1c:3d:
3d:f5:95:b3:ba:a9:7c:8b:05:7e:ce:45:25:ee:90:d7:9a:7d:
6c:39:c8:a3:e0:ab:e0:d5:ab:d4:39:c7:6a:c4:6e:b3:df:58:
a5:ac:ab:38:2f:84:93:d8:cd:2d:cf:32:0d:37:f2:9a:22:23:
45:e5:3b:5e:24:0d:95:5f:6e:4d:4d:9b:f6:02:7b:05:b9:ae:
8b:11:7e:ae:cb:df:4e:90:51:31:3c:da:d2:e7:63:da:f4:02:
ac:59:78:6f:47:df:02:c3:36:6e:e5:28:d2:37:4d:33:00:7c:
b0:72:6d:05:65:48:6e:fd:d0:7d:87:03:3f:df:d7:0e:1c:c2:
6d:1f:d4:00:ea:ea:b3:9e:cc:30:8f:30:f2:11:7d:36:cb:ff:
ed:5d:7b:67:eb:42:89:92:3e:6d:ea:5a:1c:3f:37:9b:7e:8c:
84:fe:77:6e:a2:8a:39:15:8b:da:05:c1:ec:48:f9:22:09:8f:
01:c5:24:ba:7f:c5:bd:43:b0:4f:8b:f3:0b:ab:84:f7:ed:7b:
87:1d:9f:5c:95:56:dc:d2:bf:41:9d:14:c1:29:5f:11:fd:67:
85:c1:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org