Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/pFVvDyfeg_AWKDvy26nVcOwsA48.roa
File: pFVvDyfeg_AWKDvy26nVcOwsA48.roa (raw, json)
Hash identifier: vYupfAJ5/nR15IIa80+joFPfG1JnUMlUTcfWiVxjzWQ=
Subject key identifier: A4:55:6F:0F:27:DE:83:F0:16:28:3B:F2:DB:A9:D5:70:EC:2C:03:8F
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 08DB4794
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/pFVvDyfeg_AWKDvy26nVcOwsA48.roa
Signing time: Thu 23 Jun 2022 06:29:32 +0000
ROA not before: Thu 23 Jun 2022 06:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208147
IP address blocks: 45.156.178.0/24 maxlen: 24
45.156.179.0/24 maxlen: 24
45.156.176.0/22 maxlen: 22
45.156.176.0/24 maxlen: 24
45.156.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148588436 (0x8db4794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Jun 23 06:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4556f0f27de83f016283bf2dba9d570ec2c038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:a3:b9:ae:30:90:7b:8f:93:ba:86:43:e7:
14:4c:64:6a:af:3a:95:9d:d3:fb:07:ad:bd:df:b6:
61:dd:bd:66:6d:a6:cb:07:ba:b8:45:c9:88:52:dd:
96:e4:bf:94:b5:03:d5:ed:65:c3:e9:83:68:50:25:
12:17:1d:3a:ef:7b:ee:2a:0a:86:f6:9e:72:af:29:
42:0e:bb:b2:e8:43:bb:ef:86:18:6f:36:0a:e0:64:
92:f1:fe:8e:eb:67:ca:c8:46:7f:1e:1e:d3:2f:6d:
de:b8:90:56:53:5e:c9:7f:59:78:ce:56:87:5c:fd:
1f:ab:a4:26:6d:b9:4c:5b:a9:16:1f:e8:1f:88:b2:
dc:22:48:87:af:c6:15:aa:e6:c2:60:da:c7:ae:86:
a3:4d:d7:5b:60:92:55:e7:da:79:84:05:3e:fe:82:
72:1a:e7:8b:9c:eb:ec:94:7a:0a:ed:09:d0:b5:fc:
87:49:e2:1f:e1:eb:d8:43:86:73:f2:ac:a6:4d:9c:
29:5f:75:5e:60:b5:e8:b5:d3:c8:ba:8d:a8:22:a0:
45:0d:67:1d:4d:c9:ea:52:f0:f8:55:d7:a7:86:44:
76:9a:ac:f6:a5:cb:b0:ce:d7:48:48:a7:0e:9e:97:
b1:a5:5f:b6:41:e6:da:d2:1a:73:5d:3d:7b:43:91:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:6F:0F:27:DE:83:F0:16:28:3B:F2:DB:A9:D5:70:EC:2C:03:8F
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/pFVvDyfeg_AWKDvy26nVcOwsA48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:a1:bf:98:56:7e:f8:6b:a0:fb:0f:51:81:7f:65:78:a5:e5:
fb:f2:b7:f5:03:65:7c:f9:97:a9:b3:54:f7:7a:56:eb:f5:5b:
63:42:16:a4:f2:e2:16:58:1f:81:93:fe:20:a1:e5:91:d9:fa:
01:d4:c2:6a:f3:0a:ba:01:69:62:1c:0c:e9:4f:c5:86:d3:db:
f2:e7:e8:b7:43:73:76:dd:0d:90:dd:4c:22:b9:d4:20:c9:d8:
94:14:32:eb:c5:9f:76:bc:c5:2f:28:1d:c5:af:08:83:b6:07:
2c:22:c3:79:b8:c9:93:a3:3b:8f:16:86:5a:72:94:11:38:94:
dd:b1:1d:6d:0d:dd:99:55:51:e0:b7:f9:27:61:7a:6a:79:a7:
c3:a2:3a:d2:dc:69:74:a8:e8:c3:e5:4b:3c:e1:c0:9a:b2:6a:
c5:e8:57:38:17:8f:a2:ac:6c:93:76:a6:b4:6e:60:d2:dd:20:
12:94:b5:6f:a7:ee:21:47:e3:25:10:58:77:a6:64:90:95:f6:
5e:b3:a1:08:e9:ea:ce:b3:a7:5a:20:23:8e:21:79:a6:2c:40:
14:3f:a3:1f:c2:c2:c7:b2:3f:c0:b5:94:21:13:2d:c1:c8:8d:
30:56:08:5a:e2:9f:a5:d1:ff:83:7a:46:c6:5f:f3:7b:3a:c7:
3f:c6:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:33 2023 by rpki-client on console-fra.rpki-client.org