Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/89V8Ct6sf513ac2IBSrD3ynDqRs.roa
File: 89V8Ct6sf513ac2IBSrD3ynDqRs.roa (raw, json)
Hash identifier: nhw/ALSEGfuqizwFRQH0xg6zp1+8hUrRKDIyQO+/H6w=
Subject key identifier: F3:D5:7C:0A:DE:AC:7F:9D:77:69:CD:88:05:2A:C3:DF:29:C3:A9:1B
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 01842EFB45A1F5AF434718A78837E1126C85
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/89V8Ct6sf513ac2IBSrD3ynDqRs.roa
Signing time: Mon 31 Oct 2022 16:58:49 +0000
ROA not before: Mon 31 Oct 2022 16:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 45.67.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:fb:45:a1:f5:af:43:47:18:a7:88:37:e1:12:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Oct 31 16:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3d57c0adeac7f9d7769cd88052ac3df29c3a91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:c0:6a:36:e8:96:98:4e:f7:07:e0:e0:94:
4b:62:30:c5:d7:91:c7:b1:ac:97:9d:bf:74:f9:33:
4f:c8:34:a4:1b:49:6c:65:6b:c4:94:57:21:3f:c0:
85:f5:c3:3c:0b:b5:b6:e2:24:c2:7f:20:4d:fa:2f:
8e:70:2c:04:c9:5a:ba:cc:92:61:7c:e9:04:34:4c:
69:86:7c:e2:ab:32:76:0f:2d:9c:bc:87:c4:2d:46:
b9:4e:be:d8:26:e4:34:22:ae:16:57:1f:f0:5c:06:
6b:0b:99:ce:81:61:ca:58:ef:86:6b:6a:84:3c:31:
c0:92:3f:ca:97:e6:62:3d:7e:cd:d9:0a:cd:dc:38:
88:43:99:f4:21:89:29:60:f9:6a:d9:49:47:77:f4:
05:f2:2b:a2:73:95:45:b7:6d:2b:1b:96:be:32:22:
43:3a:29:f5:3b:e3:a4:de:40:88:6c:ad:c7:6d:f4:
a7:29:2d:51:cc:80:8f:a4:90:2f:90:84:8c:7f:9c:
7b:4d:b9:96:43:9c:f4:21:26:45:92:27:da:a6:84:
84:a8:32:cd:f2:c5:86:c5:eb:48:47:85:d3:6f:12:
ec:91:35:55:67:6e:3e:91:35:2b:51:fc:00:d8:5a:
26:12:4a:11:45:69:f2:af:51:98:1d:08:58:d8:b1:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:7C:0A:DE:AC:7F:9D:77:69:CD:88:05:2A:C3:DF:29:C3:A9:1B
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/89V8Ct6sf513ac2IBSrD3ynDqRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.13.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8a:35:a6:16:67:da:f2:90:4e:c3:6b:b0:73:51:ec:4b:06:
0b:74:19:64:5d:77:9a:b0:b5:3e:cd:47:94:d1:9a:53:2a:d2:
c1:23:e2:39:b9:86:0a:a6:20:cc:5c:de:7d:94:34:b6:28:63:
72:0c:27:0d:01:5e:5b:81:17:c3:95:5e:ac:18:98:31:e4:db:
dd:e8:fd:eb:d9:db:12:29:73:bd:7e:d9:b8:11:08:56:7c:a0:
a9:b0:e7:3d:62:f5:9f:72:ed:ef:4d:e4:35:08:d4:5f:d0:27:
bd:de:62:09:2c:37:70:8e:1a:04:30:4a:a1:5b:6f:49:f8:06:
65:50:79:b9:8a:59:a2:fc:fc:3e:c0:76:0c:9f:10:51:0e:1e:
23:b6:12:0d:32:e4:22:c2:ad:21:1f:d7:19:d1:68:a7:d0:2a:
ae:55:fa:c7:f0:b7:c2:0f:b9:66:85:d5:fa:9a:47:f7:c9:d8:
05:5f:d3:0e:1e:e7:90:32:19:a8:19:d6:a4:6b:82:c3:fb:e6:
59:65:9e:ec:5a:03:d5:5a:c6:9f:b1:7a:32:a7:18:1a:dc:6e:
2e:a2:43:91:ee:56:15:75:76:5b:f1:26:64:c4:b3:61:f3:89:
6c:4b:c3:e3:8f:48:00:87:2c:be:ef:22:32:ee:5b:6c:db:45:
b3:2b:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org