Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/eG57jpdqX8hlC1ThVRcgfDiEr18.roa
File: eG57jpdqX8hlC1ThVRcgfDiEr18.roa (raw, json)
Hash identifier: pMO+GMbQUpjWc78ieLA0DAT36D3tc/hzS7yNYiLOnMc=
Subject key identifier: 78:6E:7B:8E:97:6A:5F:C8:65:0B:54:E1:55:17:20:7C:38:84:AF:5F
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 018369C47D5BB45651055D456EF7C1FEC1AC
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/eG57jpdqX8hlC1ThVRcgfDiEr18.roa
Signing time: Fri 23 Sep 2022 09:53:48 +0000
ROA not before: Fri 23 Sep 2022 09:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44084
IP address blocks: 217.115.16.0/20 maxlen: 24
45.67.124.0/23 maxlen: 24
45.67.124.0/22 maxlen: 24
45.67.126.0/24 maxlen: 24
2a09:6240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:c4:7d:5b:b4:56:51:05:5d:45:6e:f7:c1:fe:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Sep 23 09:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=786e7b8e976a5fc8650b54e15517207c3884af5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:ca:88:c5:e5:7f:05:d6:21:e6:73:c7:d9:
39:2e:7f:b6:e8:18:84:bc:2d:91:3e:66:9e:5d:65:
35:31:b5:26:87:45:c8:c7:b2:e6:14:bd:fe:2f:7d:
ec:ea:d0:0d:ea:09:6f:a1:28:ec:35:cb:69:28:66:
2e:d6:38:ea:58:c7:d3:6e:0d:15:50:55:00:95:c8:
aa:f0:01:cb:91:c1:08:f2:90:91:ae:67:e6:61:82:
94:92:5b:dd:32:c7:8a:b0:58:2f:bc:ea:e0:28:6e:
a0:84:61:6a:59:ac:1d:4f:dd:cd:79:03:7c:3d:e9:
f5:39:59:07:d2:f0:d2:ed:da:30:63:ff:e6:fd:b9:
25:ef:3a:0f:fd:65:ab:f8:3e:97:9d:47:1d:57:f0:
21:01:16:f8:f8:32:e5:d6:31:1c:8d:1a:a1:c7:bb:
33:dd:d5:6d:be:66:18:30:4f:4e:17:b8:a4:43:ae:
65:24:e7:69:26:4c:a7:52:76:e3:27:f5:a1:4e:06:
e0:84:3d:46:cc:31:4f:6b:90:6d:a7:74:5a:e4:0b:
8d:58:91:2c:19:6a:bd:56:c9:f5:f2:64:a9:33:e3:
4a:e1:21:22:5b:57:eb:b5:70:c4:85:ff:95:cc:0f:
bf:8c:d5:85:fa:5e:3a:cc:b1:85:7c:4c:f3:f8:e4:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:7B:8E:97:6A:5F:C8:65:0B:54:E1:55:17:20:7C:38:84:AF:5F
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/eG57jpdqX8hlC1ThVRcgfDiEr18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.124.0/22
217.115.16.0/20
IPv6:
2a09:6240::/29
Signature Algorithm: sha256WithRSAEncryption
3a:f9:95:ef:25:29:cc:c6:7f:7c:8d:00:58:42:1a:1d:cc:77:
7e:99:e3:2e:64:41:d5:8b:73:19:02:48:83:d8:96:a7:ed:73:
9c:94:3a:0f:10:00:87:09:e3:11:99:e2:ca:57:42:c2:81:cf:
d2:55:1a:dc:1b:d3:ac:1f:90:f9:22:f7:7b:67:62:71:3a:10:
ea:f2:83:26:a2:fc:e9:b7:21:cb:c4:f2:ef:ea:ae:8c:3c:ae:
57:fe:fc:07:99:fb:21:6b:c4:63:71:85:85:5a:02:d0:61:c8:
0f:fd:d0:a2:5e:4d:a7:fc:39:46:ed:4b:1e:dc:f7:45:d0:f4:
f8:db:71:9a:90:be:ee:c6:b7:2c:35:b0:40:51:36:8b:80:27:
68:64:99:17:a2:7e:b4:13:42:56:5e:9f:7c:09:1a:3d:b8:8e:
8b:32:bd:24:49:5d:d5:0e:1b:e8:75:a6:64:f8:a9:20:17:28:
6d:74:1c:e9:f8:9e:c0:89:21:dc:dc:bc:37:eb:93:ae:94:88:
26:4f:d4:d7:08:52:70:95:ae:ab:a6:09:0e:22:96:26:53:e4:
ab:1b:ce:0f:6b:cf:8d:fd:8b:66:4e:b2:1e:10:6b:9d:e8:fc:
28:89:11:38:a8:bf:6a:46:a0:84:4f:58:8a:0e:f1:e1:d3:63:
37:88:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:27 2023 by rpki-client on console-fra.rpki-client.org