Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/DhWQfAaUYoPKKH0FUZdkcJIIy2M.roa
File: DhWQfAaUYoPKKH0FUZdkcJIIy2M.roa (raw, json)
Hash identifier: TNilCpHb71iGhvTRkAlVNlwtCUt0RV7Lk8zjtrMJ0oI=
Subject key identifier: 0E:15:90:7C:06:94:62:83:CA:28:7D:05:51:97:64:70:92:08:CB:63
Certificate issuer: /CN=f14ef4209094762690a4017d4ff9715ecc33b85d
Certificate serial: 014862B0
Authority key identifier: F1:4E:F4:20:90:94:76:26:90:A4:01:7D:4F:F9:71:5E:CC:33:B8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8U70IJCUdiaQpAF9T_lxXswzuF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/DhWQfAaUYoPKKH0FUZdkcJIIy2M.roa
Signing time: Thu 12 May 2022 09:04:09 +0000
ROA not before: Thu 12 May 2022 09:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.86.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21521072 (0x14862b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14ef4209094762690a4017d4ff9715ecc33b85d
Validity
Not Before: May 12 09:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e15907c06946283ca287d05519764709208cb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:ea:01:1b:ec:a1:9a:86:ab:d0:d4:00:95:
32:24:15:55:44:a1:a3:80:de:97:7f:1c:c2:95:a0:
66:8d:9e:ca:1b:4b:31:9c:aa:71:3c:8e:7b:26:12:
11:a8:9d:67:f6:a6:4c:c9:91:bf:06:54:58:f9:b2:
ff:57:dc:c4:cd:27:f9:72:49:6f:93:79:37:9b:5d:
1c:7a:47:a9:fc:7d:aa:ce:b5:77:1b:08:c1:22:d4:
3f:7f:37:05:8f:e9:20:2b:6a:86:8b:52:da:7a:2b:
71:7d:a6:0d:0a:d5:65:ec:64:c3:71:f0:f1:17:64:
43:00:54:5b:f0:35:55:0c:d1:71:a9:20:11:3b:f9:
4d:1c:8a:47:62:db:5c:80:e1:80:5b:d2:4c:57:6f:
f7:0c:ee:9a:9e:66:9d:69:d7:4c:a5:eb:7f:c3:66:
ce:a6:6c:b8:0d:a6:e3:e2:9c:fc:6a:e7:d7:39:83:
dc:5d:4c:f8:df:01:e2:71:d1:95:45:a9:e4:83:cb:
50:b4:78:10:f7:fa:2c:78:48:d4:8c:31:fc:81:26:
2e:a4:15:29:2a:cd:6e:74:4d:58:1f:65:2d:a4:d0:
42:f8:29:06:6a:ee:ea:ff:62:02:b2:43:4c:b4:81:
20:3e:8f:e6:cf:73:67:6a:0f:4c:9c:6d:2d:46:af:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:90:7C:06:94:62:83:CA:28:7D:05:51:97:64:70:92:08:CB:63
X509v3 Authority Key Identifier:
keyid:F1:4E:F4:20:90:94:76:26:90:A4:01:7D:4F:F9:71:5E:CC:33:B8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8U70IJCUdiaQpAF9T_lxXswzuF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/DhWQfAaUYoPKKH0FUZdkcJIIy2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/8U70IJCUdiaQpAF9T_lxXswzuF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.85.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5d:c9:d6:20:d6:c5:df:fa:f0:b4:9c:1a:94:6f:3b:f4:45:
27:04:7d:aa:d1:bf:41:e9:31:c8:d5:8a:25:04:6d:77:5a:65:
66:35:d9:79:f7:3a:44:4c:81:a1:35:8b:89:7a:3a:fc:60:e8:
36:cd:53:1b:ee:6a:c5:86:89:9c:01:5a:af:78:58:12:6e:6d:
90:0c:28:41:d5:19:03:c8:58:21:60:7d:fa:90:ef:1e:83:4e:
8d:13:18:96:83:b9:89:35:a6:4e:cd:09:83:b4:8c:4a:3b:f3:
1b:41:51:97:ef:39:df:a7:0c:30:7e:73:d6:d6:b9:43:e0:fa:
17:c1:65:b4:74:3d:92:36:92:28:51:6c:ea:ae:c3:1d:29:e2:
11:b3:5a:7f:b0:f7:ee:af:f6:08:20:3b:0c:de:04:d1:1b:4c:
47:6d:08:d4:6e:b1:8c:f1:12:cc:7f:b8:24:0d:3a:95:e9:3f:
fd:f7:5c:44:88:68:5f:5a:57:8b:d3:4c:a6:bb:88:78:19:74:
32:9c:8f:28:e1:ba:ce:7f:b5:1b:3e:20:47:ef:52:65:5e:4c:
53:21:47:ec:fe:c0:cf:ea:80:fc:8f:ac:bb:bf:86:9a:f4:55:
1a:3d:a0:66:5b:6f:1e:1d:1c:8d:8d:ad:56:e3:5c:83:bd:69:
ea:e4:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:59 2023 by rpki-client on console-ams.rpki-client.org