Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eFuTSTU6ZBEw54F5uUC_M-o--LI.roa
File: eFuTSTU6ZBEw54F5uUC_M-o--LI.roa (raw, json)
Hash identifier: voDkEqPGqNK5l4RzSCuc7J6fHoeNypMISYr8TTYDRhI=
Subject key identifier: 78:5B:93:49:35:3A:64:11:30:E7:81:79:B9:40:BF:33:EA:3E:F8:B2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1A94108F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eFuTSTU6ZBEw54F5uUC_M-o--LI.roa
Signing time: Wed 02 Mar 2022 18:31:00 +0000
ROA not before: Wed 02 Mar 2022 18:31:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.137.88.0/22 maxlen: 24
45.137.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445911183 (0x1a94108f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 2 18:31:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=785b9349353a641130e78179b940bf33ea3ef8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:c5:81:bd:8c:4a:33:1f:67:c1:cb:0c:f2:
17:87:2d:3b:93:97:1e:7d:fe:91:1d:7f:cd:ce:04:
39:04:0b:93:14:5b:1a:01:52:70:87:9d:ef:9a:ef:
f5:93:35:3f:a0:13:12:e2:b6:7c:67:d5:cf:e9:b9:
de:90:6d:be:66:b2:ca:87:bc:b2:4a:09:af:72:81:
84:e9:27:e7:1b:d6:7d:ae:b4:67:6e:a4:82:ea:de:
22:14:50:58:e7:f7:e2:48:b4:df:81:10:ed:69:ee:
f2:c6:e0:43:eb:8c:3c:5b:02:eb:d9:57:e8:9f:b2:
02:c9:aa:8c:a4:9b:c3:8f:43:1a:ce:e7:de:64:45:
0f:b9:ea:1b:dd:04:b1:73:c8:3d:4a:98:04:61:a7:
10:73:68:72:3f:4d:d6:db:28:2a:78:68:cc:41:44:
11:0b:0b:1f:84:22:93:11:03:b1:8b:d8:78:70:6e:
2d:47:4f:e0:d9:fd:8a:71:43:ef:7d:4a:c7:08:bf:
00:76:0e:c7:6a:cf:fa:df:01:32:e0:ff:dd:c4:a3:
6a:35:52:4f:c6:60:c3:56:3f:b1:ac:91:24:6c:d9:
48:5e:c3:63:8e:d7:45:be:71:00:ef:5a:fc:e3:3f:
16:7a:83:52:87:26:1d:36:81:24:af:b1:79:f6:62:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:93:49:35:3A:64:11:30:E7:81:79:B9:40:BF:33:EA:3E:F8:B2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eFuTSTU6ZBEw54F5uUC_M-o--LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.88.0/22
45.137.100.0/22
Signature Algorithm: sha256WithRSAEncryption
41:2b:b5:b5:c4:8b:02:d2:07:eb:eb:37:97:09:73:c9:18:38:
0f:49:6d:4c:02:bf:e8:81:7b:82:e9:43:ee:0c:5e:47:c5:e0:
3d:54:98:f1:f0:bc:69:58:7e:23:ee:ec:39:a4:d8:4b:1a:f4:
b4:49:97:a8:f7:a8:62:23:95:c9:6c:17:06:c8:62:6e:30:7a:
88:ce:b5:e0:f6:be:4b:86:c6:40:03:96:9d:db:49:96:4c:1e:
9a:9e:de:06:94:78:b5:7b:b7:14:48:0a:e1:8c:d4:cf:5b:dc:
ca:9d:0b:bf:0d:cb:cd:9f:50:47:18:bb:37:80:00:ef:6d:81:
ee:5d:03:dc:7e:3b:e2:7e:dd:9e:87:a0:5b:71:b5:e3:1a:e4:
e5:a0:59:59:6e:9b:20:07:35:0a:3c:73:b0:a9:8a:59:fd:9d:
3c:55:77:9b:93:0a:57:19:e4:f5:02:25:bf:b8:e0:4b:ef:6d:
ed:2e:f3:f5:db:11:2c:b2:54:21:3e:e7:27:c5:10:96:d3:8d:
25:f4:5c:d2:a8:15:09:72:3e:dc:65:dd:5d:02:d4:a3:81:27:
ae:d8:4e:2a:9e:e6:7d:ea:f5:7a:d5:44:a5:9f:b3:b4:13:44:
c9:e3:49:fa:62:47:ca:29:b0:b3:22:cf:2b:7f:aa:46:ce:f7:
cf:c5:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org