Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/SXWBjxxUhyv33OEYabB9K8f81_k.roa
File: SXWBjxxUhyv33OEYabB9K8f81_k.roa (raw, json)
Hash identifier: Bxm9Ijs1g9LQ/omwUrGpdZT3p4dj4oUVr89I1KeupLk=
Subject key identifier: 49:75:81:8F:1C:54:87:2B:F7:DC:E1:18:69:B0:7D:2B:C7:FC:D7:F9
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 093B1968
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/SXWBjxxUhyv33OEYabB9K8f81_k.roa
Signing time: Sun 26 Jun 2022 20:39:42 +0000
ROA not before: Sun 26 Jun 2022 20:39:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.95.205.0/24 maxlen: 24
45.95.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154868072 (0x93b1968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jun 26 20:39:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4975818f1c54872bf7dce11869b07d2bc7fcd7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:a9:bc:4e:3d:ae:78:a2:14:71:7f:25:e5:
50:63:e7:f6:b2:b0:53:5a:38:80:37:c6:bf:44:96:
03:58:eb:9c:c0:f9:2b:d2:6d:95:a6:99:de:d1:d3:
83:95:88:c5:d3:51:31:4c:c9:5b:06:a3:a4:00:0d:
43:62:62:0f:df:9d:7b:c2:d5:b2:4d:a7:a3:8e:1a:
55:d7:35:1f:aa:24:d8:15:ba:9e:3b:69:c5:c5:8c:
7f:44:8c:c6:42:c9:e6:c7:03:04:c5:69:aa:a1:1c:
11:30:52:1f:91:f6:5a:d2:1b:db:59:ac:22:05:52:
20:8e:9e:b8:51:8e:ed:1b:87:0a:fb:18:ce:91:7e:
71:d5:33:6a:64:e2:ec:a9:2e:8b:3c:bb:80:0e:12:
0a:1e:40:52:1b:94:d0:92:ed:99:10:2f:9a:bc:66:
87:8d:53:c7:77:fe:cc:f9:f3:99:0d:2c:de:41:97:
cc:e7:78:e2:e8:1b:25:57:6b:64:02:79:70:b5:c2:
0c:4f:85:43:44:91:d6:3a:20:90:23:2f:99:17:12:
c2:0b:5e:25:ad:78:07:a8:43:85:79:aa:c1:68:32:
69:24:e8:9b:24:83:95:80:be:68:8d:ab:bc:d7:8a:
4c:e3:90:73:7f:9e:40:d2:dd:cb:21:a3:ec:28:3d:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:81:8F:1C:54:87:2B:F7:DC:E1:18:69:B0:7D:2B:C7:FC:D7:F9
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/SXWBjxxUhyv33OEYabB9K8f81_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.205.0-45.95.206.255
Signature Algorithm: sha256WithRSAEncryption
92:a4:5d:8e:e4:65:67:f1:ab:17:06:08:03:b6:df:52:62:06:
22:04:23:b2:3e:ca:14:da:b6:ec:16:8e:00:d0:fa:7b:0e:5d:
3f:95:40:a1:7c:31:af:02:a8:64:ce:4a:52:64:4d:37:4b:d8:
2b:95:7d:fa:f9:ef:7c:2f:59:f8:16:5b:63:ee:4a:ba:e6:16:
04:aa:18:1c:07:c1:9d:47:68:d6:16:3f:b4:a2:65:b4:4e:99:
94:79:85:c0:58:f4:03:a9:4b:df:74:e4:2c:09:b3:76:28:5c:
56:05:0c:d5:13:c3:38:ce:14:e6:b4:99:b4:c8:75:58:9b:a6:
e6:22:42:eb:d0:0e:8b:9d:69:8d:f8:66:55:fa:2c:b1:ee:7e:
63:b2:ef:d3:af:73:4e:24:c4:f5:22:93:ac:5c:2f:a7:f4:e9:
db:7b:b6:21:15:89:83:7b:a6:c8:b2:03:e5:01:f4:0c:a6:b5:
1f:10:2b:ce:da:d5:04:0e:1a:34:e9:57:cf:11:1e:90:cf:c1:
02:bf:ab:52:73:85:64:40:b1:bc:91:db:43:dd:b4:aa:7e:7e:
a6:06:1a:34:e7:77:36:18:a7:5a:db:8d:b4:b2:19:6e:70:83:
16:2b:87:1a:e1:99:29:91:16:cd:f8:4b:53:67:52:5a:7d:7e:
89:45:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org