Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/K3UJcfkAJOgxcOk9KJ-iPm0Ot9s.roa
File: K3UJcfkAJOgxcOk9KJ-iPm0Ot9s.roa (raw, json)
Hash identifier: I2Lu6ddOV3rVURQX13cf51KbjMAUTDz5FVIWDOBQr1w=
Subject key identifier: 2B:75:09:71:F9:00:24:E8:31:70:E9:3D:28:9F:A2:3E:6D:0E:B7:DB
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 01847EF74107901916FAE4ED30D2A4B0102F
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/K3UJcfkAJOgxcOk9KJ-iPm0Ot9s.roa
Signing time: Wed 16 Nov 2022 05:44:03 +0000
ROA not before: Wed 16 Nov 2022 05:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 45.134.248.0/24 maxlen: 24
45.134.250.0/24 maxlen: 24
45.140.68.0/24 maxlen: 24
45.140.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:f7:41:07:90:19:16:fa:e4:ed:30:d2:a4:b0:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Nov 16 05:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b750971f90024e83170e93d289fa23e6d0eb7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:84:86:c9:3f:87:f2:99:97:5f:85:ac:3d:36:
a7:fe:3b:d2:ca:c9:20:33:61:83:96:c4:36:f8:4f:
4c:ad:69:ae:dc:d1:04:89:25:6e:d1:04:fe:f6:2d:
e2:51:ad:96:41:5a:02:2b:ae:7a:5a:a5:f7:74:fb:
b7:48:18:62:51:68:e7:c9:57:6e:9a:7a:0f:70:a8:
f6:6a:a4:36:96:d1:f1:b6:6c:8c:34:e9:c5:34:ed:
57:b2:18:df:b8:78:6a:29:af:09:0d:d1:a0:ed:e2:
d5:15:66:37:88:bc:17:57:d6:2a:5c:a2:9e:56:1a:
68:c5:cc:af:9e:ab:d2:d7:6c:2d:b9:4c:0a:01:4b:
f3:17:2b:4e:60:0e:98:2a:01:73:92:2a:37:a6:5d:
3e:7e:ff:40:51:dc:f3:cf:c3:7c:e0:f2:0c:ff:c3:
f5:85:77:7c:3b:0f:94:d3:d4:d8:c6:1e:e4:e4:1a:
be:0a:bb:85:ad:ed:ca:c2:40:12:85:58:86:ba:b5:
a0:f2:04:a1:a8:0b:e5:e0:ba:a1:e4:c6:25:b7:28:
71:8e:d1:b1:25:3f:da:0a:01:64:5c:9e:06:cd:c7:
6a:7c:49:e6:ba:6c:35:4e:b9:6b:dc:59:18:8a:66:
8e:6d:1b:4a:66:cb:fd:a1:06:e4:2e:fe:fd:8d:84:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:09:71:F9:00:24:E8:31:70:E9:3D:28:9F:A2:3E:6D:0E:B7:DB
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/K3UJcfkAJOgxcOk9KJ-iPm0Ot9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.248.0/24
45.134.250.0/24
45.140.68.0/24
45.140.70.0/24
Signature Algorithm: sha256WithRSAEncryption
60:74:74:fa:d2:f6:eb:a0:90:06:32:cd:6c:10:a9:e7:7e:b6:
ba:94:48:02:2f:4d:a3:32:f6:25:b9:8f:1a:28:a4:6d:a7:5b:
1e:bc:d2:7d:07:30:b7:82:ab:65:54:f9:b2:92:1f:54:f9:2d:
66:22:36:a3:d9:31:ae:e5:39:16:62:51:d5:c7:51:54:24:77:
ec:ad:8c:00:33:7e:42:71:c3:6c:d1:76:0c:8d:aa:d9:8e:15:
59:6a:fc:a3:82:2e:c1:6c:1c:0e:2b:fd:19:a5:99:97:a8:30:
60:96:7f:fa:8b:89:f3:80:15:31:09:6d:d3:87:a0:b3:f4:5a:
f0:ee:33:66:aa:82:e1:b7:36:e6:ef:11:04:30:8c:9b:79:06:
c3:56:6e:6b:cd:71:c5:e8:66:35:ee:f3:74:ae:2b:eb:b2:02:
42:26:91:8b:95:f7:bb:95:e8:fe:25:c8:5b:e1:56:da:06:ba:
7a:a9:c1:1c:87:0e:97:b0:1a:93:78:ab:61:15:ec:6b:01:40:
93:5f:c7:de:50:75:cc:fd:9a:d7:e0:36:0e:2c:1f:17:a5:9a:
f9:fd:71:d5:99:47:bc:22:9c:12:92:eb:55:cd:10:8a:a6:c5:
44:ac:3b:e1:f2:cb:1b:b9:93:0b:92:e3:db:f0:b1:f5:38:12:
94:5f:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-fra.rpki-client.org