Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/x1K-sHJ2H2wE4oKpFSBom-VWiII.roa
File: x1K-sHJ2H2wE4oKpFSBom-VWiII.roa (raw, json)
Hash identifier: KSxVMkFTr8xSr0s1TCHFmI3IbNSNaJZDLVs50l/Sblo=
Subject key identifier: C7:52:BE:B0:72:76:1F:6C:04:E2:82:A9:15:20:68:9B:E5:56:88:82
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0183378387863C4665848D5708EE5B1D8C04
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/x1K-sHJ2H2wE4oKpFSBom-VWiII.roa
Signing time: Tue 13 Sep 2022 15:41:50 +0000
ROA not before: Tue 13 Sep 2022 15:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 45.9.152.0/22 maxlen: 24
178.239.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:83:87:86:3c:46:65:84:8d:57:08:ee:5b:1d:8c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 13 15:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c752beb072761f6c04e282a91520689be5568882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:3b:53:94:2b:79:62:c9:74:4b:57:7c:6e:
bc:71:6e:8d:74:6d:aa:83:26:cc:31:1a:68:89:c8:
84:ce:d5:95:d0:39:19:e8:0e:ae:aa:c4:22:1e:b7:
5c:58:ac:9f:23:a2:d5:3b:35:43:28:c8:f4:f1:19:
a2:e9:27:02:62:34:98:2b:7d:ab:d9:69:02:42:21:
38:fd:5c:d2:87:32:71:0c:e7:f1:e6:d9:a0:65:77:
bb:19:5c:b0:7b:01:10:73:47:4b:bd:b4:c6:be:d6:
e9:77:31:24:60:1f:dd:34:6d:52:eb:bf:b1:bd:e7:
32:ac:9c:81:bc:84:42:17:c2:66:4c:ee:61:1c:08:
7c:ab:31:7f:f3:38:a4:e9:8d:f2:d7:b9:aa:f6:82:
46:27:6c:80:46:0e:d1:b3:46:2c:e7:8f:37:2a:ed:
55:27:82:b0:fb:f7:ed:cb:c1:1a:97:8a:f0:40:ea:
98:1b:cb:d6:f0:9f:83:75:07:97:6b:e2:fe:9e:9b:
05:94:47:d5:79:9e:a6:32:b5:b2:1b:44:5a:2a:36:
62:95:10:d8:a7:36:13:0e:36:50:8f:30:fe:87:f2:
4a:b7:b9:79:4f:9c:d5:c6:15:67:32:61:63:d7:4f:
58:09:08:1f:43:44:aa:e9:d9:8b:7d:84:ed:39:c9:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:52:BE:B0:72:76:1F:6C:04:E2:82:A9:15:20:68:9B:E5:56:88:82
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/x1K-sHJ2H2wE4oKpFSBom-VWiII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.152.0/22
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
86:8a:b5:e3:33:08:25:63:c9:cc:3a:c4:8f:a2:84:23:59:ce:
72:73:05:ad:b7:1d:ee:f4:c8:cc:b9:91:d3:02:3d:a1:a1:a3:
ac:ba:2d:b8:cf:36:47:da:8e:74:4d:69:be:71:77:40:d6:97:
f0:bf:c9:f8:e2:45:f4:c3:f6:84:4f:88:ff:29:4d:d2:50:e8:
0c:85:f6:04:2e:e7:97:97:68:70:4c:a6:ad:42:09:d4:84:ff:
44:d9:98:79:76:fd:e5:6a:65:5b:53:96:12:a6:ef:1c:c8:c6:
04:b6:23:73:be:2b:66:88:56:fd:f4:b1:58:1e:5a:ec:c5:f5:
87:ab:c1:be:bf:dd:26:b5:9d:c1:00:aa:3e:45:99:17:9f:81:
99:4b:b8:cd:6d:4c:95:86:00:7a:ba:9e:5b:ac:20:d1:9d:67:
8e:31:a2:2a:1e:76:db:17:85:ab:49:6a:4d:3e:76:01:59:27:
ec:7b:6a:c3:23:b7:6c:df:02:d3:c3:7a:5b:9f:09:07:75:46:
73:84:76:b5:3a:cc:26:89:22:bc:2e:76:66:84:01:77:5b:2d:
ec:02:98:a0:c4:4c:83:2b:05:d6:88:a9:f8:4f:ab:c5:b9:a7:
b4:47:bd:77:42:f0:8a:4d:a7:6a:a4:04:46:84:ea:f3:f5:87:
4f:d2:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org