Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wRcFGOTGllAYe9SdeLk7dlKhE1Q.roa
File: wRcFGOTGllAYe9SdeLk7dlKhE1Q.roa (raw, json)
Hash identifier: dfs5sGb0yG+j6bG7XD2RmGBYLjiGnPrB5KFfnh9jxYs=
Subject key identifier: C1:17:05:18:E4:C6:96:50:18:7B:D4:9D:78:B9:3B:76:52:A1:13:54
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19FCDC94
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wRcFGOTGllAYe9SdeLk7dlKhE1Q.roa
Signing time: Tue 04 Jan 2022 06:20:02 +0000
ROA not before: Tue 04 Jan 2022 06:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.128.199.0/24 maxlen: 24
45.146.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436001940 (0x19fcdc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 4 06:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1170518e4c69650187bd49d78b93b7652a11354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:75:3f:0e:af:b6:2b:05:3a:29:ff:ae:60:
99:b2:d5:f8:0b:05:31:f0:7a:dc:37:67:9a:9f:1f:
ea:cd:d9:c2:ab:21:ab:0a:67:98:2e:83:da:47:71:
6f:21:ee:7f:48:12:e7:bb:9a:48:0e:ae:ae:3f:e5:
52:81:43:84:2e:74:42:23:67:c6:ff:ea:09:2c:5c:
95:64:18:31:a2:92:8c:81:1e:63:43:17:ac:7a:13:
d4:6c:03:9d:e9:1b:cb:54:20:9e:1e:94:15:29:41:
75:68:e6:9b:5b:3d:ef:30:3d:18:9c:d4:f1:be:d5:
20:2e:b7:10:e1:a6:a0:04:c0:ad:b9:18:3f:f1:9b:
37:d2:6b:08:bd:e0:56:cd:7b:49:bb:33:9c:90:cf:
8c:05:11:4e:ce:ab:10:3a:f6:31:3e:7f:e6:4a:2b:
7e:75:59:6a:0a:85:7f:90:ee:33:4d:b6:6c:c5:d6:
0f:76:21:94:32:10:f2:7f:8c:00:ca:c9:93:f1:24:
61:52:9d:e5:44:b6:95:36:87:7a:67:4e:7f:14:2a:
89:d6:19:83:17:3a:5d:d2:6b:f3:0a:5a:0e:f4:32:
a4:d5:25:80:60:cb:6c:3a:bd:db:0f:3a:99:f6:1b:
2c:4f:41:03:9a:9e:a6:e2:29:ce:5f:86:24:27:d4:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:05:18:E4:C6:96:50:18:7B:D4:9D:78:B9:3B:76:52:A1:13:54
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wRcFGOTGllAYe9SdeLk7dlKhE1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.199.0/24
45.146.55.0/24
Signature Algorithm: sha256WithRSAEncryption
be:46:f8:ef:61:66:06:a3:df:13:92:4a:2c:26:d8:e8:27:c7:
c1:14:8a:8a:4d:91:87:1d:29:ca:38:4e:10:76:01:c5:09:61:
43:08:51:ad:25:4a:42:d8:f0:1c:00:53:b9:aa:37:10:69:c5:
c8:56:ec:10:e1:be:be:a0:39:9e:90:1d:4e:8a:42:4f:3f:ac:
a5:e8:31:56:8c:17:1b:92:d1:38:ef:ae:7a:e9:8f:65:93:34:
f1:d4:e8:c2:40:5d:c6:2f:c7:e5:0a:3d:29:90:18:1b:45:48:
b0:50:be:a0:15:74:06:e6:07:00:9f:81:d4:5e:f5:37:3d:14:
de:a0:76:7a:c3:71:1e:1d:f9:19:ba:3c:44:e9:ef:6a:00:13:
6c:94:51:7a:b9:01:e3:c3:22:b8:4e:87:6b:a1:f3:24:e5:36:
ec:88:a8:78:54:d9:2a:f1:9a:e8:0b:91:c6:71:c9:38:eb:ca:
65:c4:b8:ff:d9:b2:c9:0d:6a:f5:80:af:df:11:93:56:7f:f1:
28:d0:a4:ba:02:d3:7a:f3:7e:f7:de:b9:29:c9:80:06:6d:d4:
66:df:e9:b1:3e:f1:29:d8:ff:06:85:c8:6c:7a:94:ea:7e:1c:
92:99:a4:e7:09:49:9b:83:94:8b:84:23:e5:fa:d4:ea:34:b4:
ab:c0:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org