Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q5AUDR4JszVRQEGUfRhhUy8JaR4.roa
File: q5AUDR4JszVRQEGUfRhhUy8JaR4.roa (raw, json)
Hash identifier: TJiJw/uqcM2vjWHc+3Vh8mlXWbm406tt+z7MWjQV3Yo=
Subject key identifier: AB:90:14:0D:1E:09:B3:35:51:40:41:94:7D:18:61:53:2F:09:69:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185391625AC4BE39462824BD747FC2E582B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q5AUDR4JszVRQEGUfRhhUy8JaR4.roa
Signing time: Thu 22 Dec 2022 09:07:10 +0000
ROA not before: Thu 22 Dec 2022 09:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 269466
IP address blocks: 45.84.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:16:25:ac:4b:e3:94:62:82:4b:d7:47:fc:2e:58:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 22 09:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab90140d1e09b335514041947d1861532f09691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:d0:81:25:8a:4b:3b:61:28:ed:f3:4d:00:
8a:15:f8:cd:d3:e7:2f:e1:ee:b6:2b:39:ba:97:ce:
5b:a3:83:2d:2a:a4:f3:6e:20:fb:20:5c:75:18:c7:
cc:d4:eb:21:b1:84:60:e8:80:a3:09:81:f4:10:88:
86:ae:ba:9d:dc:d1:d3:81:50:d3:3a:c4:8a:d1:c1:
2f:5f:8e:bf:e3:e6:7f:19:50:34:9e:d4:2f:5b:68:
75:b3:7d:60:a8:6a:6c:e0:d1:00:2f:b6:04:f4:ab:
a8:36:b3:cc:bf:6b:26:4f:8b:bc:ae:27:d6:81:d6:
b5:bd:d8:00:8a:3e:25:6e:91:6c:4c:f4:ec:e6:d9:
88:60:4d:c9:eb:d0:bc:d4:4d:14:ac:72:11:0e:db:
17:21:1e:f4:5e:b7:8c:1b:b8:74:8e:5b:16:67:2d:
30:00:74:56:56:66:20:2f:17:cb:e4:7c:d1:69:8e:
ce:ec:32:70:4b:50:41:6c:47:6b:db:00:48:eb:ce:
23:d7:fb:a3:77:4e:74:04:36:a8:a6:8a:10:d3:92:
1f:27:d6:a8:44:60:8e:3b:24:2f:46:0e:9e:5f:bf:
35:4f:d5:32:f3:6e:51:eb:31:24:45:dc:d1:ac:64:
78:34:38:ae:a5:87:7f:e2:15:f4:fd:dc:86:de:db:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:14:0D:1E:09:B3:35:51:40:41:94:7D:18:61:53:2F:09:69:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q5AUDR4JszVRQEGUfRhhUy8JaR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:34:72:d4:1f:21:ca:68:65:06:85:b9:8d:6a:21:b5:ac:aa:
61:a0:85:da:e5:30:3d:d6:1e:08:4f:1e:8a:36:9c:ce:12:6a:
33:77:cf:25:0c:07:e5:a5:98:3c:59:67:13:57:47:4d:e0:b0:
25:19:02:bf:68:3e:d8:e5:fd:0f:2c:86:1a:fa:a1:9f:e7:a3:
8e:20:8f:8d:36:c1:18:f8:73:be:9a:18:98:d8:9d:d0:94:c2:
39:c4:a9:18:40:f0:cd:6c:bc:37:ef:bc:68:8d:74:0f:fd:70:
ba:22:41:5b:8f:39:f0:80:d1:ef:82:8c:9f:38:f3:86:4f:06:
36:bf:e1:e8:eb:ce:71:56:72:ae:7e:4a:8e:77:a3:68:a5:96:
a7:7f:ba:d0:b2:99:31:0d:1d:8f:a6:c2:bd:5d:c6:77:9d:ad:
06:b0:15:1e:df:a6:9a:8b:fa:99:b9:ba:f8:5a:14:ee:8b:cf:
1f:02:18:5f:11:dc:42:f6:88:3e:f0:2c:6d:f5:76:b6:30:9e:
89:58:5a:76:79:df:eb:15:57:48:9e:68:52:6f:b0:3d:b7:06:
67:92:05:b7:f1:75:00:8d:37:4b:8f:27:f3:e4:cb:44:ad:7e:
11:2d:50:aa:bf:0e:76:14:a8:2e:8f:10:34:7e:fe:14:a0:16:
4b:d0:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org