Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/KRQpRag36P0SNdElXk5fGqri9-k.roa
File: KRQpRag36P0SNdElXk5fGqri9-k.roa (raw, json)
Hash identifier: Px+iCX2hvJkA5VA1Y7lTkSHHdGC91YDfErVbbUrvkSk=
Subject key identifier: 29:14:29:45:A8:37:E8:FD:12:35:D1:25:5E:4E:5F:1A:AA:E2:F7:E9
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 06CB9BC1
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/KRQpRag36P0SNdElXk5fGqri9-k.roa
Signing time: Sat 01 Jan 2022 08:58:21 +0000
ROA not before: Sat 01 Jan 2022 08:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42692
IP address blocks: 45.148.20.0/24 maxlen: 24
45.148.22.0/24 maxlen: 24
45.148.23.0/24 maxlen: 24
2a0f:2a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114006977 (0x6cb9bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jan 1 08:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29142945a837e8fd1235d1255e4e5f1aaae2f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:e7:46:2f:ee:9a:b5:20:6b:4c:13:bb:1d:
6b:6e:27:80:c7:5b:e0:a1:19:3a:86:0a:87:0a:9c:
b6:3e:1f:6b:d5:f7:96:e5:c9:7b:ad:98:3f:28:44:
f9:ca:af:ad:4b:74:91:e8:0a:1e:8f:8c:9b:fd:13:
55:e5:da:d1:25:6f:50:3d:02:00:09:42:01:d1:5e:
f8:ab:7d:34:7e:76:68:7b:b1:fa:78:03:d7:9f:aa:
2b:aa:1e:d1:26:47:0d:a8:31:f4:c6:bc:a6:06:f7:
9b:f7:eb:85:3e:bf:80:4c:5c:57:2d:8f:b4:11:a0:
1e:a6:f1:dd:01:23:97:10:4a:f7:31:c9:77:90:f0:
7a:5d:d2:b5:b6:59:3d:07:ed:b3:0d:3d:5b:56:14:
2a:5e:9a:cb:90:cf:af:fd:f3:ce:e5:45:7b:9a:01:
ef:61:9d:46:92:f9:40:b1:34:b0:90:4a:77:d7:af:
ac:54:58:5e:59:b0:16:58:3b:e1:a1:5f:3a:d0:26:
ee:ba:7f:7e:32:50:f1:e1:cb:28:e7:4e:cc:65:d3:
61:16:c3:5a:1f:58:31:3f:c2:9b:94:9c:bd:ea:01:
a3:99:5e:a0:c8:85:2e:8e:c8:4a:39:5f:b1:13:91:
d1:c8:02:e4:27:d9:68:e6:81:07:a9:0d:62:c3:3e:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:29:45:A8:37:E8:FD:12:35:D1:25:5E:4E:5F:1A:AA:E2:F7:E9
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/KRQpRag36P0SNdElXk5fGqri9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.20.0/24
45.148.22.0/23
IPv6:
2a0f:2a04::/32
Signature Algorithm: sha256WithRSAEncryption
0c:6c:0f:2d:ad:6f:f4:d1:3f:50:6e:78:22:5b:67:83:16:93:
e0:71:bb:79:66:e5:a9:4c:9c:51:3e:9c:e2:a9:d0:67:49:3d:
f5:01:38:40:fc:0d:e8:a0:b6:3c:6d:ea:4d:45:9a:3c:cb:fc:
23:17:d8:dc:2f:8d:f3:cd:55:99:61:10:66:11:c0:ca:a9:e5:
82:4c:e5:18:79:7d:70:82:02:37:1d:30:53:ca:a0:57:5d:c1:
45:94:ed:4d:31:35:fb:d5:67:e5:45:53:a0:8b:39:de:a5:83:
8c:6c:39:fb:a0:9e:e1:3d:4c:87:34:90:ed:54:64:58:0c:13:
0f:f5:8d:b1:d7:23:40:94:30:af:63:50:37:c1:3e:05:55:d0:
79:2d:14:ff:d0:26:d6:7f:27:4f:42:1b:f7:c5:16:43:fa:bc:
9f:ba:70:0e:d8:eb:72:f2:94:28:6a:c7:a5:c9:8a:d5:84:b1:
e1:1d:4c:b7:d9:dc:cf:56:db:4d:8a:e4:d5:4c:df:6f:b2:37:
ea:b6:8d:b8:b9:97:b3:0f:bb:3e:1a:3e:57:7d:65:01:47:17:
95:c0:19:61:79:9f:1c:01:c8:b5:8d:09:f2:e4:fd:fb:3c:a7:
b9:09:02:d9:a9:23:ff:3f:0a:88:ba:90:5b:2d:28:b2:a0:6e:
ee:01:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:46 2024 by rpki-client on console-ams.rpki-client.org