Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/r9Pe-s-4Ikod2Itvd6vneuwM5lU.roa
File: r9Pe-s-4Ikod2Itvd6vneuwM5lU.roa (raw, json)
Hash identifier: ArPvtL8HAXGQpSmR5LghLf5AXqsWzQBWV2iEspF6oQw=
Subject key identifier: AF:D3:DE:FA:CF:B8:22:4A:1D:D8:8B:6F:77:AB:E7:7A:EC:0C:E6:55
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 078E7443
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/r9Pe-s-4Ikod2Itvd6vneuwM5lU.roa
Signing time: Sat 01 Jan 2022 13:56:48 +0000
ROA not before: Sat 01 Jan 2022 13:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48886
IP address blocks: 45.91.68.0/22 maxlen: 22
194.69.16.0/24 maxlen: 24
194.69.16.0/20 maxlen: 20
194.69.20.0/22 maxlen: 22
194.69.18.0/24 maxlen: 24
194.69.30.0/24 maxlen: 24
194.69.31.0/24 maxlen: 24
194.69.28.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126776387 (0x78e7443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Jan 1 13:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd3defacfb8224a1dd88b6f77abe77aec0ce655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:39:06:6e:ef:c5:c6:f7:02:d5:d4:11:8f:
38:d9:f5:0f:cf:a8:88:42:0d:3a:30:ca:60:5f:1b:
b5:9b:46:2b:da:9a:a1:a7:f7:7d:2a:22:0b:51:12:
c1:6b:9b:4a:7b:cc:75:7a:68:af:e6:42:47:29:59:
b6:df:8a:c9:77:6c:8e:d4:34:e4:78:31:c1:81:b4:
5d:fe:f8:e4:72:da:b8:4e:a6:2a:2a:39:eb:7c:48:
f7:04:f0:b3:2c:87:7d:42:6b:6b:af:41:19:6f:51:
51:d8:3c:51:82:89:e9:c2:87:a4:e0:2d:85:96:8c:
fd:27:c5:ed:83:2b:0f:38:47:63:88:bc:a1:5c:1f:
87:92:d2:b4:d9:72:29:1c:08:e5:0b:6f:f4:36:cb:
3d:5f:04:d5:fd:75:68:7b:0a:72:09:6f:61:b7:3e:
b1:ee:78:ea:9f:59:a8:1f:a8:a5:9f:55:c3:4c:33:
d6:18:f6:f8:32:97:ab:36:b2:45:82:cc:4e:8c:7c:
37:73:d2:3c:92:b5:d1:7f:08:a4:4d:f9:32:e1:1d:
12:aa:33:78:c5:c6:f3:3c:44:c8:6d:cd:b2:54:e2:
13:eb:5f:9d:dc:40:ed:43:41:c1:99:a9:60:0e:00:
d0:f6:a8:88:bf:83:33:ab:45:b3:31:f0:18:46:72:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:DE:FA:CF:B8:22:4A:1D:D8:8B:6F:77:AB:E7:7A:EC:0C:E6:55
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/r9Pe-s-4Ikod2Itvd6vneuwM5lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.68.0/22
194.69.16.0/20
Signature Algorithm: sha256WithRSAEncryption
44:5e:ca:54:22:7a:08:29:d2:3f:97:04:c0:27:90:6c:16:9b:
29:ad:a6:e5:b4:6f:90:8a:fe:1f:92:30:1e:d9:c3:65:6b:49:
45:ea:ec:3e:06:9d:5c:6d:9d:06:eb:ba:cb:1e:b2:d0:f9:9f:
69:6d:65:fa:ea:50:88:d0:99:08:52:0d:82:d1:44:8c:5d:b6:
69:cc:b0:7f:09:2a:fe:b9:ae:d8:2c:19:20:2a:e4:ca:9e:63:
b5:3c:3e:e2:45:38:3a:9e:d0:d3:e8:25:9a:af:01:90:b3:08:
0d:be:c0:fd:20:25:c4:79:f9:62:c0:9a:a9:74:d2:b6:07:f0:
83:ea:ca:aa:7e:11:6d:a5:74:70:bb:ff:6f:36:61:8a:cb:fc:
d8:c4:76:ab:37:86:01:2c:aa:e8:3e:06:d1:16:68:70:bb:7d:
33:38:07:66:13:c4:aa:b8:ee:1a:68:93:fa:98:cd:15:4a:e9:
fa:0a:ec:50:37:ed:e9:77:db:50:a1:90:96:bd:9f:19:68:ce:
88:3f:db:5f:bb:70:83:49:e3:28:7a:0b:7c:24:6d:81:77:e7:
ba:86:c0:1b:72:f1:f1:b1:52:92:64:50:78:48:7e:13:69:e7:
09:ac:8d:14:a6:2a:76:4a:c5:02:4b:f1:24:ed:49:b6:4f:36:
7f:ea:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org