Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pJO775yddqQgPBYCJeNvJHH9esE.roa
File: pJO775yddqQgPBYCJeNvJHH9esE.roa (raw, json)
Hash identifier: dTcZdGokaVqTNpQ9eRI07z3+c6OKeCLCF/8nfJPrjG4=
Subject key identifier: A4:93:BB:EF:9C:9D:76:A4:20:3C:16:02:25:E3:6F:24:71:FD:7A:C1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19D02FCE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pJO775yddqQgPBYCJeNvJHH9esE.roa
Signing time: Sat 01 Jan 2022 15:56:38 +0000
ROA not before: Sat 01 Jan 2022 15:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9335
IP address blocks: 45.91.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433074126 (0x19d02fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a493bbef9c9d76a4203c160225e36f2471fd7ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:65:fd:9c:a0:a8:b2:5f:85:fa:6c:38:76:
2d:31:a7:75:ac:32:61:3b:aa:51:46:14:97:fc:f1:
a2:23:5f:79:ae:d2:4c:c3:c9:aa:33:38:96:5a:3a:
35:dc:9c:89:66:77:c9:83:22:28:9a:ba:cf:c1:f1:
3c:3b:b3:3d:9e:85:dc:a0:4a:e2:a2:1f:1a:33:b0:
60:22:99:11:8f:ee:57:8e:c8:f6:8c:b7:64:45:4b:
fb:b7:4e:a1:01:5f:97:69:35:f0:d6:98:95:fe:aa:
91:e1:82:75:09:ea:db:92:89:62:d2:5f:bb:a5:9c:
38:66:72:42:da:12:eb:6c:54:aa:cc:8a:c4:73:ef:
7d:6c:33:70:5b:6b:1e:79:de:fe:1b:3f:6b:8d:f9:
89:6c:3e:c0:35:cb:12:5d:00:f4:66:2e:5d:e3:7e:
28:40:d1:6e:a3:e9:36:fd:0e:59:3b:b9:78:bc:e5:
11:8e:79:29:f9:da:04:e4:a6:c7:1c:03:27:87:a3:
06:b9:74:f7:2e:b0:1b:b5:1d:bc:f9:a5:b8:d0:c6:
f8:0d:38:82:98:2e:6f:1f:4d:9a:0f:f9:1a:3c:64:
16:a3:23:64:d9:e6:98:cd:ef:89:5f:cc:96:da:2b:
f0:ee:6d:18:d0:89:1a:c0:90:cd:e6:52:4b:28:10:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:BB:EF:9C:9D:76:A4:20:3C:16:02:25:E3:6F:24:71:FD:7A:C1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pJO775yddqQgPBYCJeNvJHH9esE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ab:0a:56:9d:09:a9:fc:97:e3:96:5a:78:35:4c:7b:19:26:
9a:cc:e4:93:80:02:74:0c:c2:97:2c:e4:3b:e8:4e:3c:7a:ab:
99:09:86:57:01:bf:00:73:28:4b:bf:2b:2c:7e:41:3f:aa:b2:
cf:d6:59:b9:be:1f:f2:28:d8:2a:ae:3f:43:3a:e7:fd:5f:70:
a6:c0:f2:11:d8:30:3e:4e:f6:56:6d:d3:de:cf:e9:15:d8:d6:
03:5f:bc:cf:78:7b:fe:4d:5e:f3:e4:f9:07:30:d1:06:a3:fc:
2f:01:98:b4:13:12:4d:8d:68:64:f5:69:50:34:15:ba:49:44:
d0:43:25:4f:ba:b0:7a:44:c0:bd:86:0a:c4:0e:18:33:a7:ad:
45:74:ca:38:69:d3:4d:30:bf:20:b5:8c:09:ac:e5:34:e6:e9:
dc:0b:87:74:74:42:b6:02:41:3c:c1:ee:e9:f4:b3:2b:ce:37:
b7:20:45:5e:d4:76:30:4e:b5:39:87:a1:5f:bc:0b:25:fe:f1:
c5:be:5f:f8:33:f8:2c:74:40:bb:6e:d8:98:c8:6d:f9:b1:6f:
36:a8:16:ae:3c:18:e0:00:09:62:43:06:a6:8b:5b:86:33:be:
c0:12:f8:e8:77:4f:54:40:8f:cf:64:19:dd:8d:03:bf:45:9b:
f9:c6:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org