Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/naHEGzVvZ9_H-MTfGpsy5NWX3es.roa
File: naHEGzVvZ9_H-MTfGpsy5NWX3es.roa (raw, json)
Hash identifier: 58Pk+b5TR7/h1anmYcSh9jyyWAgdOCWH23kkzxDcwCY=
Subject key identifier: 9D:A1:C4:1B:35:6F:67:DF:C7:F8:C4:DF:1A:9B:32:E4:D5:97:DD:EB
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1A838133
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/naHEGzVvZ9_H-MTfGpsy5NWX3es.roa
Signing time: Thu 24 Feb 2022 06:27:56 +0000
ROA not before: Thu 24 Feb 2022 06:27:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45929
IP address blocks: 45.92.4.0/22 maxlen: 22
45.149.192.0/22 maxlen: 22
45.92.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444825907 (0x1a838133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 24 06:27:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9da1c41b356f67dfc7f8c4df1a9b32e4d597ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:7c:da:81:f1:e7:ad:4a:cc:99:50:76:4f:
9d:96:85:2c:49:ae:a8:2e:3f:98:51:cf:10:f9:2c:
48:94:0a:72:49:25:a4:b5:c5:c7:55:08:b8:ac:ad:
0a:d5:cf:b3:0f:61:74:98:b5:a7:d9:3d:4f:46:83:
cc:62:7b:27:eb:ad:1e:d6:8c:15:e9:45:d5:a7:1f:
e1:f9:a2:c0:80:54:85:9e:d4:c0:b3:f0:09:a3:82:
16:01:5a:f0:95:01:15:9a:d4:c2:54:7a:e3:60:57:
46:04:79:d1:3f:3b:52:16:8f:60:a7:c9:a7:1b:c3:
c1:bc:75:c9:4c:15:b0:d0:9e:2b:59:26:1e:6f:ed:
37:ba:86:ac:7c:59:6c:5c:58:06:7e:3c:44:3c:06:
16:ae:b9:51:57:10:e8:ba:43:c1:18:5e:d5:d6:36:
ab:4b:ca:91:e2:05:00:67:6d:5b:f1:e4:94:c6:6f:
92:cf:c9:25:75:d7:0d:59:98:5d:2d:0d:99:07:1a:
fc:51:a5:6b:f1:77:35:93:e3:94:16:d3:64:7c:73:
cc:03:e4:bb:e6:d5:94:4b:25:2d:76:fc:f4:f8:9d:
e4:02:aa:ab:2c:c2:e4:0c:9a:be:6d:02:ed:15:e1:
7b:44:f5:e4:43:b5:0b:ee:39:16:30:55:5e:7e:72:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:C4:1B:35:6F:67:DF:C7:F8:C4:DF:1A:9B:32:E4:D5:97:DD:EB
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/naHEGzVvZ9_H-MTfGpsy5NWX3es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.4.0/22
45.92.88.0/22
45.149.192.0/22
Signature Algorithm: sha256WithRSAEncryption
82:7e:93:99:28:9f:30:70:58:21:e0:ce:79:f2:3c:d6:b3:18:
f3:60:db:a1:45:e1:50:1c:75:49:3d:69:f5:64:cc:85:85:c2:
9e:af:cc:08:ab:10:fb:f6:61:0f:7c:76:4a:1f:72:f0:8a:55:
98:f4:55:f7:bc:54:67:ce:c5:1d:ae:8f:70:09:2d:c5:a3:8b:
20:6f:2f:aa:f5:9b:38:18:e4:f4:d2:8c:52:b2:7e:3d:d0:4f:
55:e6:b6:d1:88:06:b6:08:37:ec:e0:4b:70:a7:56:f5:46:fe:
9c:f7:e6:ed:d1:24:8c:ac:11:4c:ce:9b:7e:f0:73:21:ca:e9:
a0:a1:8c:40:ca:6c:e6:2d:02:5c:d3:16:f5:e8:1a:26:82:50:
52:ff:d3:94:c6:a3:d4:7d:20:db:04:4a:19:38:89:6e:a9:b8:
21:03:c2:fe:83:de:35:19:72:83:6c:a9:c7:cf:a2:dc:87:e0:
64:6d:50:74:27:b7:33:07:7a:fb:35:0a:e1:b6:de:0a:0b:52:
48:29:b7:f4:e2:ad:b9:fe:88:72:98:a2:4a:4f:94:75:e4:ff:
56:9d:f8:6d:be:02:9a:43:27:06:8a:a1:05:b4:e0:5a:87:41:
15:9c:b2:00:b9:61:8b:0a:96:46:28:01:5f:1b:cf:81:cf:f7:
b4:4e:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org