Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1WbdgxFyjtgV_q8QXFIJTh9GndU.roa
File: 1WbdgxFyjtgV_q8QXFIJTh9GndU.roa (raw, json)
Hash identifier: tBKhgffoJf/Wn2eoa2pxIcjtI2R3bfpRg4zu5CbvgvU=
Subject key identifier: D5:66:DD:83:11:72:8E:D8:15:FE:AF:10:5C:52:09:4E:1F:46:9D:D5
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01838F820D20546E190FC1107B8158918C9E
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1WbdgxFyjtgV_q8QXFIJTh9GndU.roa
Signing time: Fri 30 Sep 2022 17:46:48 +0000
ROA not before: Fri 30 Sep 2022 17:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 45.43.64.0/23 maxlen: 24
45.43.86.0/24 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.154.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
89.33.6.0/23 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:82:0d:20:54:6e:19:0f:c1:10:7b:81:58:91:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Sep 30 17:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d566dd8311728ed815feaf105c52094e1f469dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7e:07:11:b6:b6:a3:50:02:fc:4a:dc:7f:1d:
93:5d:57:41:11:2c:8d:d2:2a:2e:61:5b:54:eb:99:
45:15:3e:17:07:89:dd:13:e2:c5:3d:18:fd:9c:dc:
6d:c0:25:1f:e0:cb:b4:15:44:e5:2f:ad:23:ef:d6:
14:df:df:fb:fc:50:60:d3:a9:6a:df:bc:17:ef:24:
25:74:1f:a6:a1:a1:67:18:17:3a:ea:d9:b9:9a:16:
9b:87:8f:a2:ed:d4:42:ac:b3:31:e0:e9:6d:74:46:
14:16:40:03:1e:b7:08:51:7b:41:26:51:ac:c2:04:
f1:fa:9e:1f:ec:ca:90:1c:55:19:bf:a4:7e:25:07:
ef:fd:b6:90:cc:1b:10:c4:5e:1b:dc:8e:89:99:88:
94:ca:0b:0b:30:23:1e:44:37:36:e7:97:9e:9c:8d:
a5:45:67:af:df:bf:3c:c8:da:e0:5d:07:eb:b0:c1:
2c:9f:60:48:d7:bd:a1:5a:d9:1c:69:7d:da:ce:b3:
22:2b:9d:ab:cb:52:9d:9f:6b:d6:b8:f7:79:27:07:
37:89:31:c9:ec:e3:91:46:f8:f9:9a:98:82:5f:ba:
5e:fe:ed:ee:86:82:10:04:07:a3:ca:f5:99:60:f2:
fc:2c:ba:7b:fb:6a:06:9f:06:64:46:f1:78:ba:76:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:DD:83:11:72:8E:D8:15:FE:AF:10:5C:52:09:4E:1F:46:9D:D5
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1WbdgxFyjtgV_q8QXFIJTh9GndU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.86.0/24
89.33.6.0/23
107.181.152.0-107.181.154.255
198.105.108.0/23
198.105.111.0/24
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
Signature Algorithm: sha256WithRSAEncryption
aa:58:25:ce:cc:e7:61:c9:4a:31:c1:c9:e2:8b:e1:09:c2:ca:
5f:8a:bb:00:93:80:dd:51:73:79:27:25:88:a7:5f:8f:c0:03:
01:32:ba:7b:66:3b:c2:3d:15:66:90:6e:f5:b0:62:b6:12:d0:
f0:18:96:9f:0d:62:aa:ad:10:53:1a:e3:7b:75:22:d6:83:49:
69:3b:64:66:99:1c:bf:22:32:4b:24:5a:58:9c:e0:2f:0d:a6:
2f:10:1f:49:be:27:27:ae:82:60:97:84:37:1d:9a:0c:49:7d:
be:e7:63:a6:b0:47:ac:33:5a:36:3d:04:8d:af:0c:82:54:f3:
45:c5:92:e5:7c:f2:26:8f:ce:63:2c:d7:fd:88:0b:bd:6c:c3:
7b:0d:51:e6:2b:db:40:ad:48:12:0a:a9:da:9c:f6:89:4e:b8:
3e:1a:e9:44:d7:eb:ad:17:b2:7a:8e:4a:a1:e3:54:c1:e4:6c:
d7:f6:85:2b:b9:77:81:6f:00:7e:9c:dd:30:db:7d:b2:25:aa:
fc:bc:db:e8:5d:3e:4f:78:e9:c5:41:62:03:d7:20:69:ac:04:
9c:6e:aa:fa:c8:a8:7b:e0:35:7c:64:c0:19:d3:22:40:93:47:
fc:c6:c8:5b:c8:17:f8:12:61:88:24:42:80:1a:9e:a9:82:87:
c3:a5:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org