Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sFojjLU8tjQmMjcpKQt30e0KUoU.roa
File: sFojjLU8tjQmMjcpKQt30e0KUoU.roa (raw, json)
Hash identifier: o/XPY538pCiR1YE3Wg+Wo5/YfOLRTvES6rzVF0Ds/8s=
Subject key identifier: B0:5A:23:8C:B5:3C:B6:34:26:32:37:29:29:0B:77:D1:ED:0A:52:85
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1AACBF6B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sFojjLU8tjQmMjcpKQt30e0KUoU.roa
Signing time: Fri 11 Mar 2022 15:44:14 +0000
ROA not before: Fri 11 Mar 2022 15:44:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 45.139.160.0/23 maxlen: 24
45.92.248.0/22 maxlen: 24
45.83.206.0/24 maxlen: 24
45.95.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447528811 (0x1aacbf6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 11 15:44:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b05a238cb53cb63426323729290b77d1ed0a5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:67:26:c9:10:26:64:65:4e:cc:a8:60:99:
6a:a7:a1:b3:0c:9d:be:47:50:2f:93:2c:7a:a7:ee:
54:32:08:7b:c0:21:53:a5:27:f1:e0:92:f8:e9:e4:
d8:c2:a8:c4:ac:72:26:ba:31:54:0c:12:83:b5:3b:
57:2d:00:ea:ce:94:bf:7e:b3:71:44:f9:36:6b:0b:
bb:88:4f:ea:a0:fb:64:48:de:d8:b0:1c:66:53:6c:
81:6b:08:e7:4d:a0:7b:e0:ea:e4:ca:d2:ec:00:0d:
dd:7b:e4:b5:d2:d5:99:a2:53:58:b7:83:43:47:25:
13:be:b8:21:9c:76:be:38:ae:96:6c:66:f9:ff:5d:
70:7f:22:7b:eb:2e:cb:67:80:a0:94:b5:de:a6:ed:
50:2a:64:0d:95:82:cf:6b:c6:5d:b5:ed:7b:e8:9a:
72:1d:40:fb:db:72:41:b5:1d:c1:82:5f:33:7a:65:
51:75:15:aa:a7:85:f3:32:8b:70:43:7d:ed:60:f9:
c2:f0:69:fa:05:a1:78:ce:85:dd:4f:60:69:41:84:
fe:67:d6:94:49:7c:8e:33:ba:e5:e6:a1:e5:0c:f6:
71:d8:b6:57:fe:47:9d:2b:da:5b:58:9e:ec:43:d7:
0e:74:ec:2c:3b:20:d2:2a:6b:79:0e:73:c5:d7:d2:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:23:8C:B5:3C:B6:34:26:32:37:29:29:0B:77:D1:ED:0A:52:85
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sFojjLU8tjQmMjcpKQt30e0KUoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.206.0/24
45.92.248.0/22
45.95.176.0/22
45.139.160.0/23
Signature Algorithm: sha256WithRSAEncryption
32:d4:90:90:c2:f1:98:f6:14:00:eb:ff:30:cb:1b:b4:de:41:
2d:87:7e:52:be:9b:39:90:d2:30:af:87:e3:5a:e8:bc:5c:0a:
5a:52:e3:8a:b9:c7:70:f9:e3:60:cf:93:d0:47:93:aa:12:08:
0b:6f:7c:22:72:b9:b3:93:0f:10:fb:b0:b0:bc:1a:66:a9:95:
8f:77:d5:a4:0f:f9:33:d2:0e:a6:33:5a:80:1b:73:45:6a:d2:
ab:7b:0c:3d:b8:2c:cf:b1:48:40:e0:c6:74:ce:d1:14:72:87:
a5:cd:32:62:fa:22:97:34:a2:4f:18:20:e0:c9:c7:7f:f3:d0:
05:66:6f:cb:52:c2:6b:45:31:ac:30:81:8b:c8:b5:d1:2a:94:
fe:64:fd:77:ad:24:64:a4:d7:4b:f5:46:29:05:14:21:0e:e5:
d5:4f:45:1b:d1:3a:3e:3f:f9:6f:5f:6b:92:f1:b5:4c:86:9d:
f9:91:7f:d8:57:5b:a5:1b:79:7e:10:49:4a:26:23:40:ad:58:
25:75:25:81:44:46:5b:25:c2:5a:33:d3:1d:0a:4b:9f:59:1e:
77:f1:bc:8b:32:32:8a:07:3e:51:7c:0b:b6:59:9b:c8:93:eb:
2a:b0:71:2f:f3:8d:42:6e:4b:a8:03:50:81:2f:1e:c3:62:08:
9e:f0:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org