Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/sKnWvvlSw7FEwgxEwlhz4L5B0a8.roa
File: sKnWvvlSw7FEwgxEwlhz4L5B0a8.roa (raw, json)
Hash identifier: PWC4n2HOmU3VwUyd65heh5JrQ06Hfd1JECJcxMki3PQ=
Subject key identifier: B0:A9:D6:BE:F9:52:C3:B1:44:C2:0C:44:C2:58:73:E0:BE:41:D1:AF
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 0181FBED2738C06F3E7EE3EE5DC94EB32A2F
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/sKnWvvlSw7FEwgxEwlhz4L5B0a8.roa
Signing time: Thu 14 Jul 2022 08:57:12 +0000
ROA not before: Thu 14 Jul 2022 08:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 45.137.128.0/22 maxlen: 22
45.147.164.0/22 maxlen: 22
192.144.44.0/22 maxlen: 22
193.39.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:ed:27:38:c0:6f:3e:7e:e3:ee:5d:c9:4e:b3:2a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jul 14 08:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0a9d6bef952c3b144c20c44c25873e0be41d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:e3:a0:e2:f4:82:19:6f:a1:0f:cf:87:26:
4c:d0:39:5c:38:c9:54:ab:ae:b7:60:85:f0:37:a1:
bf:28:e8:c1:d5:f2:2b:d0:f3:5c:59:a5:50:6f:1f:
f8:70:ba:c4:95:01:b2:1e:bf:d1:f4:ff:8e:dd:01:
84:67:8c:03:80:a0:aa:f7:4a:40:d9:7a:4d:19:e2:
ac:e4:08:6d:59:09:15:73:99:ab:53:55:91:4d:ca:
01:8e:0b:87:0a:cd:92:ac:de:24:f6:1e:6d:a3:17:
9e:47:37:12:de:e2:bd:cc:30:70:ee:9b:24:21:6f:
89:12:65:ff:67:c5:a5:ad:7e:ba:26:95:a4:de:71:
7e:41:87:59:20:40:6a:7c:f6:28:b1:3b:f8:bd:c9:
9a:a1:d6:93:31:0d:d1:7f:55:d7:d4:fc:27:26:62:
97:24:a6:c4:e2:60:58:1c:27:9a:00:95:79:a3:c9:
2d:b3:de:f7:e6:35:b3:de:ce:9c:26:60:08:b9:17:
eb:a3:79:89:05:bf:31:e5:f6:00:57:5a:f2:f2:70:
34:24:8b:64:e4:a0:67:e0:cd:ea:de:44:90:a4:72:
5d:81:87:c4:e6:4f:dc:a7:6a:35:11:3a:fa:03:e7:
5f:fb:19:34:34:1e:b9:7f:8f:a3:a9:e7:da:94:7f:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:D6:BE:F9:52:C3:B1:44:C2:0C:44:C2:58:73:E0:BE:41:D1:AF
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/sKnWvvlSw7FEwgxEwlhz4L5B0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.128.0/22
45.147.164.0/22
192.144.44.0/22
193.39.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d0:a9:a1:e7:94:4f:29:bf:f8:47:2f:4e:ea:5b:a3:b8:d5:
40:b6:20:1d:60:e4:00:3f:b0:00:1c:28:13:9c:98:13:c5:db:
2c:bc:68:c1:d1:6e:98:ed:41:ce:35:75:a7:e4:f5:7f:9c:fb:
46:5a:73:0f:8f:43:1a:2e:4b:be:24:8c:5c:72:30:de:a6:c0:
25:42:77:7b:35:e4:f0:d3:b8:88:62:88:c5:06:52:a1:7e:4b:
f1:b5:6b:d5:77:c4:a5:85:aa:d8:b9:e3:36:a9:c5:ef:87:47:
42:b6:a2:f4:58:79:d6:c4:bd:bd:d6:c1:91:f2:3c:9e:e3:2d:
dd:20:3c:cb:18:41:53:68:c3:f0:46:da:3f:20:f9:26:73:3f:
8e:7c:ed:97:b5:11:a7:03:cc:7e:d5:1d:d9:07:7f:19:e1:42:
b2:cf:88:7d:e5:e1:88:09:45:9b:3a:12:3a:e8:19:aa:14:4a:
cd:57:33:ae:76:f4:33:4e:bd:5e:dc:f2:95:14:22:99:ad:13:
86:8b:f7:18:9f:70:76:b7:51:0f:31:3a:b5:cd:b2:8c:4f:2a:
f5:f7:c8:66:89:5f:d1:5c:ef:10:a5:b1:0c:6a:47:24:09:11:
99:b1:66:47:b1:45:f1:ed:6b:ae:bd:20:97:34:ac:82:44:6d:
d6:be:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-fra.rpki-client.org