Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mLvEtmmH6dhKvA6YUhW6y5FZ4gk.roa
File: mLvEtmmH6dhKvA6YUhW6y5FZ4gk.roa (raw, json)
Hash identifier: MidkEighkiu9QcT6a9a7qMXMHYfyczpvugw1eMhcPIc=
Subject key identifier: 98:BB:C4:B6:69:87:E9:D8:4A:BC:0E:98:52:15:BA:CB:91:59:E2:09
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0182E80223CF3A006A807D7796AA7175B549
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mLvEtmmH6dhKvA6YUhW6y5FZ4gk.roa
Signing time: Mon 29 Aug 2022 05:10:30 +0000
ROA not before: Mon 29 Aug 2022 05:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.149.72.0/22 maxlen: 22
45.148.252.0/22 maxlen: 22
2a0e:a580::/29 maxlen: 29
2a0e:bac0::/29 maxlen: 29
2a0e:a3c0::/29 maxlen: 29
2a0f:34c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:02:23:cf:3a:00:6a:80:7d:77:96:aa:71:75:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 29 05:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98bbc4b66987e9d84abc0e985215bacb9159e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:ec:ce:3b:0d:9f:7b:af:7f:40:d6:13:d2:
2f:28:17:d9:59:ab:b7:b4:e3:96:51:22:b2:9b:e3:
fd:db:a5:c4:83:98:94:4b:0f:b3:bc:fa:52:0b:00:
e3:8b:44:e7:13:f7:03:d1:b7:0e:97:48:88:60:2a:
6d:ce:b3:1c:c8:8c:f0:b7:5a:d8:35:46:c3:6f:b8:
7c:d6:f4:0c:5e:7f:fd:dd:06:92:ad:74:14:d4:9a:
61:bd:e7:cd:4e:05:3c:d8:45:d1:25:48:1e:bc:39:
90:16:f6:8e:0a:c4:56:ba:7f:c9:6d:b3:b7:28:f0:
e0:7d:0c:11:a6:e9:3d:b7:81:98:dd:36:a6:11:6a:
bf:3c:e0:d5:01:39:00:c6:a2:6a:a4:4d:5e:70:3a:
b2:00:f7:cd:76:5a:dd:ca:a6:7e:ed:c5:d2:64:b6:
ce:18:8f:c5:2d:48:c3:23:e4:0e:3f:b3:42:a5:51:
aa:60:c6:db:c6:24:48:b6:b8:9b:6a:24:81:e6:53:
35:f0:12:be:e6:57:8d:25:13:79:07:51:bb:ce:ee:
80:8c:ad:56:eb:dd:29:75:85:d9:87:f6:76:6b:4b:
c3:43:eb:a1:a9:21:87:bb:9b:c7:e7:24:17:2b:d3:
1a:2e:32:70:3c:b1:8a:11:07:6f:2c:18:16:34:0b:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:C4:B6:69:87:E9:D8:4A:BC:0E:98:52:15:BA:CB:91:59:E2:09
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mLvEtmmH6dhKvA6YUhW6y5FZ4gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.252.0/22
45.149.72.0/22
IPv6:
2a0e:a3c0::/29
2a0e:a580::/29
2a0e:bac0::/29
2a0f:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:2d:a0:7a:00:11:b2:0d:ea:2d:31:be:53:87:10:06:19:df:
2c:f6:a2:2c:39:5c:50:5f:49:44:86:42:e0:a5:ee:fb:57:0b:
e5:c6:b8:6e:c1:59:04:1f:2a:33:6a:47:a1:d8:10:62:49:d1:
b4:dc:89:18:82:b2:96:3f:4e:d5:b0:40:96:3a:32:11:cc:fb:
5f:d9:f6:49:9a:89:eb:d0:0b:c9:dc:ca:83:61:12:92:50:ff:
45:01:b0:3a:3e:a4:84:25:d7:69:29:cc:99:fa:be:78:01:5b:
f9:6f:d3:24:ef:0b:22:da:d2:77:72:95:96:02:4b:15:6a:93:
23:fc:0e:2c:79:7b:20:af:35:3a:64:9e:dc:33:b6:f5:45:2f:
7d:cb:1c:28:13:b9:e0:99:05:92:bd:30:a8:f7:e2:dc:d7:0d:
a1:10:17:44:0b:75:fe:9a:50:f5:49:29:d6:f6:b6:7a:98:8c:
5a:fb:ec:84:14:04:72:b1:db:8a:97:7f:54:64:9a:97:45:d3:
0d:b6:52:25:08:f3:4a:5b:c2:ed:3d:03:33:95:cc:6a:72:b1:
bc:cc:4b:27:c9:d3:d1:ab:ac:49:01:9f:79:a0:b3:1c:23:ff:
8d:2f:b9:42:06:d2:bc:a7:2a:7f:09:79:46:49:cd:ad:92:97:
9d:7d:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org