Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/_7Ptyci8eBsA1r6sUcmdSMP7CtE.roa
File: _7Ptyci8eBsA1r6sUcmdSMP7CtE.roa (raw, json)
Hash identifier: jTdp+/5RUHIo1u08fMhPA+6Ct55xwobH3LrBFeuVztM=
Subject key identifier: FF:B3:ED:C9:C8:BC:78:1B:00:D6:BE:AC:51:C9:9D:48:C3:FB:0A:D1
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0743EAE0
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/_7Ptyci8eBsA1r6sUcmdSMP7CtE.roa
Signing time: Sat 01 Jan 2022 09:00:23 +0000
ROA not before: Sat 01 Jan 2022 09:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.88.30.0/24 maxlen: 24
45.88.31.0/24 maxlen: 24
45.88.28.0/24 maxlen: 24
45.88.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121891552 (0x743eae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Jan 1 09:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffb3edc9c8bc781b00d6beac51c99d48c3fb0ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:9d:24:fb:ed:68:39:d5:e9:5c:b7:75:aa:
fe:b1:51:d6:50:40:ab:ae:4a:d6:fe:85:68:49:ec:
b9:26:d0:14:ab:87:6d:34:29:76:64:28:3b:b6:5e:
71:a7:76:4e:ae:72:5f:d1:4a:46:c0:95:17:31:b6:
c7:ba:a3:53:b2:e8:a3:15:6e:65:6f:16:11:f0:b0:
c8:fa:8d:23:43:67:21:5f:42:d8:54:10:da:61:10:
55:26:7e:b2:8b:d9:25:da:89:69:2a:14:c1:29:a7:
b5:2e:56:48:2e:27:c8:5d:bd:98:b7:da:dc:19:61:
e4:46:77:18:68:f1:5a:28:c5:be:57:a5:f6:fb:d8:
0a:70:69:24:a4:ac:4b:ed:52:7a:17:31:a9:2a:04:
f2:a6:3b:a1:c4:67:6b:06:50:89:74:2c:ee:bf:9c:
73:af:84:70:ad:7c:b8:4c:a5:12:34:d3:f1:b6:a4:
de:bd:ef:72:32:61:28:e8:b6:04:7e:b2:e9:e4:b1:
80:f7:b4:17:2c:e9:5a:8b:b3:fb:70:d5:a5:5f:52:
8b:e9:03:15:bc:98:e5:48:1e:bb:3e:41:da:4d:78:
53:28:be:6f:4b:55:09:30:e6:d0:65:bc:c1:3a:93:
2c:7b:41:15:90:2f:6a:d0:22:b8:41:10:a5:43:e4:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:ED:C9:C8:BC:78:1B:00:D6:BE:AC:51:C9:9D:48:C3:FB:0A:D1
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/_7Ptyci8eBsA1r6sUcmdSMP7CtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:a7:05:05:90:27:9e:20:6a:ec:84:62:c8:da:64:2a:c0:49:
d0:69:4d:c2:41:72:76:42:77:a4:d8:83:0a:26:8f:a1:1f:aa:
b0:82:a7:b5:fa:6e:ee:b0:1c:47:7e:67:b0:1d:5d:ec:6d:7e:
ea:ce:b8:b4:12:8b:0f:f8:a9:0a:0e:d9:ac:06:3b:13:c7:b6:
53:0a:3c:07:72:66:d3:e6:5f:7b:a6:95:52:c3:c7:ef:3b:0e:
61:13:02:b2:89:d3:46:b9:f4:da:9d:3b:ac:d8:dd:c2:98:2f:
d1:5e:f9:e5:3b:80:b2:6c:84:42:dc:c3:79:6a:ec:35:b7:13:
d6:b8:21:73:10:fb:cc:d9:1d:4c:31:5b:e6:6b:2a:86:83:fc:
ab:5a:84:61:e3:ed:af:96:de:a9:d1:cc:36:37:e3:e0:a7:6f:
75:34:20:53:59:fd:0d:9e:d3:e8:76:7c:52:b4:10:14:05:34:
ce:c0:bb:a5:15:9f:68:75:36:3d:65:93:e2:f7:84:4d:10:0b:
e0:31:55:0f:a2:bb:cc:95:e0:5f:49:68:74:02:df:11:64:49:
10:ae:7a:9c:24:fb:85:35:4c:4f:9d:b9:11:3e:e7:29:fc:68:
b4:fb:3e:e0:1c:ba:4b:d5:bf:fe:3d:45:6c:7e:d3:fd:a5:1e:
74:5a:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:26 2024 by rpki-client on console-fra.rpki-client.org