Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/porCU2txJ1os-1eKmGexS3RTQN8.roa
File: porCU2txJ1os-1eKmGexS3RTQN8.roa (raw, json)
Hash identifier: Oy/DGCFvLJb10XqA2hUVAGuWGwSRgTSto2ebZbKSqgI=
Subject key identifier: A6:8A:C2:53:6B:71:27:5A:2C:FB:57:8A:98:67:B1:4B:74:53:40:DF
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E0E159
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/porCU2txJ1os-1eKmGexS3RTQN8.roa
Signing time: Sat 01 Jan 2022 15:56:47 +0000
ROA not before: Sat 01 Jan 2022 15:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56309
IP address blocks: 45.91.133.0/24 maxlen: 24
45.91.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434168153 (0x19e0e159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a68ac2536b71275a2cfb578a9867b14b745340df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:e1:12:89:05:a3:f1:b1:cc:0d:8f:3e:fc:
8f:0b:40:c9:5e:52:25:e0:dc:f6:56:f6:0d:5c:fe:
9d:11:47:17:b3:9c:60:85:de:86:ae:6b:ae:63:e0:
ee:89:ab:65:f9:92:73:43:6b:fe:ec:c0:3b:0d:99:
ab:62:dc:fe:c7:14:4e:59:20:bf:10:94:a4:59:6b:
3c:99:5d:b7:9c:df:4f:2b:c9:78:26:1d:74:11:cb:
6d:86:3c:3b:06:8e:61:41:0c:3f:eb:10:c9:93:9a:
e5:44:47:7a:16:4e:38:7d:2e:ee:63:7d:d5:bd:46:
60:b4:92:f2:1e:53:81:27:09:3e:5c:cb:38:c6:1d:
6a:f3:df:fa:37:95:80:de:3e:8c:1d:a6:1f:c6:93:
f0:80:fc:a4:25:c4:46:b2:31:da:e1:dc:6d:bd:e1:
aa:7f:11:28:67:ca:59:b6:26:5f:8f:ed:15:3d:af:
96:82:22:2d:bb:95:5b:c0:10:ea:56:ab:c4:b9:07:
43:33:3b:79:51:ee:df:3f:7e:8c:87:d6:74:66:ad:
6c:58:3b:29:03:d8:c4:b8:80:0d:91:d8:55:d5:c7:
a0:c0:f1:03:1e:29:f9:de:a4:fe:95:6e:5c:ee:ef:
b9:90:a1:5c:5a:73:c9:ba:fe:99:9f:88:d6:c7:32:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:C2:53:6B:71:27:5A:2C:FB:57:8A:98:67:B1:4B:74:53:40:DF
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/porCU2txJ1os-1eKmGexS3RTQN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.133.0-45.91.135.255
Signature Algorithm: sha256WithRSAEncryption
80:8e:e6:a4:a1:10:ed:84:bd:d8:13:59:fc:63:b9:3c:0f:3d:
f2:f1:e1:4f:1f:b8:0c:05:58:5c:60:08:3f:d9:01:e1:2f:56:
ab:19:58:27:39:7f:37:e6:68:16:c0:7a:e3:33:e3:f0:44:b0:
b5:e9:bf:c0:37:5a:88:08:a1:63:83:16:30:12:a0:9f:6a:d1:
44:e2:2b:33:42:ac:55:05:e9:58:4d:52:89:9a:9e:b1:2a:b8:
06:a4:eb:0d:ce:7e:fb:b3:c7:90:3f:59:25:a8:4d:10:f2:50:
5a:6b:60:2e:60:54:0f:89:2c:b2:51:59:c6:40:6b:5b:66:8b:
d4:e1:c2:be:ec:61:85:61:7f:e8:d3:dd:c9:aa:cc:d6:3c:5b:
2b:2b:ae:2f:55:5a:6e:95:93:4f:80:c7:79:e1:a6:db:67:95:
84:b0:b1:f9:1f:7a:6e:7d:99:7c:7d:25:92:d2:01:e7:2a:eb:
8c:14:bb:1e:ac:32:02:35:4b:77:78:7e:44:2d:28:d8:27:af:
af:0f:0a:70:3e:02:cc:90:f8:45:86:eb:88:e1:69:88:f0:95:
7f:7a:8a:66:7e:a3:e2:e4:fb:92:ec:fd:8a:d6:69:67:a6:82:
ca:24:3e:43:fe:5e:5e:f8:57:c0:0b:bb:59:48:01:50:76:2b:
55:5d:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org