Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a38LwJ9gTWS3hGfGlrdMeKLXEBI.roa
File: a38LwJ9gTWS3hGfGlrdMeKLXEBI.roa (raw, json)
Hash identifier: HPNWADB9+X9y9R3By4dfyKI47AAOB+KbLwqnWgQNAu0=
Subject key identifier: 6B:7F:0B:C0:9F:60:4D:64:B7:84:67:C6:96:B7:4C:78:A2:D7:10:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184C24176E41391D2BD9E44B9DCC9B549B2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a38LwJ9gTWS3hGfGlrdMeKLXEBI.roa
Signing time: Tue 29 Nov 2022 07:19:40 +0000
ROA not before: Tue 29 Nov 2022 07:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:41:76:e4:13:91:d2:bd:9e:44:b9:dc:c9:b5:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 07:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b7f0bc09f604d64b78467c696b74c78a2d71012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:e5:1e:f4:05:c0:7d:05:3b:61:f6:2e:83:
53:c6:b6:b5:ae:1c:81:04:e4:13:87:29:27:f4:15:
96:cc:f4:3b:1a:4e:b9:5f:7c:b1:ca:6e:af:52:ef:
2f:c0:22:b9:2f:27:18:26:0f:44:63:27:9e:39:a0:
16:40:10:73:d1:95:71:9a:dd:50:a3:c6:de:b0:3a:
08:bd:d7:e4:ed:9b:5c:ba:36:b7:1b:1d:b4:37:3b:
dc:16:c7:b0:e6:65:be:78:13:bf:2f:86:97:c6:61:
81:d7:ac:23:27:0c:7c:f9:06:af:41:19:ce:b8:08:
36:28:56:05:f6:61:92:72:8f:6a:01:6e:e5:04:71:
77:2d:6c:9f:7b:c8:6b:6c:1c:c7:7d:0d:6d:a2:5a:
f6:0f:c4:81:16:6c:37:3d:37:93:77:38:1a:3f:06:
b4:6a:b1:d6:f4:82:bf:26:c0:8f:4e:5d:b8:ab:a9:
07:8f:ef:77:2f:b5:5c:4c:83:35:1b:76:a0:4b:c3:
2c:b5:fb:bc:f5:b5:51:72:62:f4:6d:07:a1:a8:99:
3a:72:fe:c9:9a:78:e1:d8:43:38:e7:71:70:ff:73:
18:fd:63:76:d9:a4:fe:c4:da:90:d7:a4:7f:85:31:
9c:ea:3e:1a:77:7f:bc:8f:11:37:b9:93:6f:7c:7a:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:0B:C0:9F:60:4D:64:B7:84:67:C6:96:B7:4C:78:A2:D7:10:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a38LwJ9gTWS3hGfGlrdMeKLXEBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8c:09:8b:af:59:d0:63:b6:35:4d:92:c8:c9:62:05:ad:a2:
f3:d8:6c:49:8d:f9:e3:89:35:c8:5e:8d:f1:32:82:b7:76:77:
dd:73:13:bd:dd:03:f9:13:e7:25:2c:7a:bf:4f:70:0e:c8:d9:
af:08:cc:60:52:c1:88:78:40:3e:f6:3c:02:71:83:c3:ef:f0:
2f:09:73:f8:9e:b9:bd:92:bd:29:dc:7a:1d:28:f6:e6:dc:90:
50:bf:32:3b:79:cb:fd:d1:3f:fa:51:2b:16:3f:44:d8:c6:6a:
97:86:cb:4b:d7:a3:53:9d:0d:f6:91:2f:c2:2e:32:f2:83:a3:
e7:22:10:12:9a:80:c0:dd:80:3f:04:97:7b:02:54:bd:ae:1d:
00:68:34:b7:69:38:26:b2:18:60:e2:f1:1b:17:b6:9f:5d:83:
33:b8:31:b1:02:60:81:ca:43:a7:2c:bd:a0:b6:75:a2:65:2b:
c2:89:38:da:5c:06:a1:98:95:0c:02:90:87:08:95:31:17:c1:
ac:e5:34:b8:18:83:52:8c:30:e9:4a:e9:c2:02:7e:da:69:88:
f6:0a:62:dd:51:a6:3e:06:1f:3f:f3:ea:31:47:da:22:cf:d1:
bd:a0:9a:06:2d:f0:ac:82:0d:eb:1c:3b:cd:f6:b8:1c:67:9f:
ef:2c:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org