Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/YUz42dW5G6cUES1zGsW2VRN_1Oo.roa
File: YUz42dW5G6cUES1zGsW2VRN_1Oo.roa (raw, json)
Hash identifier: 8lWM/oI2DTPEzz7CE3lrDElWdvkv5+J8BTAUunS4BQ8=
Subject key identifier: 61:4C:F8:D9:D5:B9:1B:A7:14:11:2D:73:1A:C5:B6:55:13:7F:D4:EA
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 090770DB
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/YUz42dW5G6cUES1zGsW2VRN_1Oo.roa
Signing time: Tue 29 Mar 2022 18:36:43 +0000
ROA not before: Tue 29 Mar 2022 18:36:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.148.64.0/22 maxlen: 23
2a0b:3c40:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151482587 (0x90770db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 29 18:36:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=614cf8d9d5b91ba714112d731ac5b655137fd4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:ff:13:54:b3:5b:37:64:6b:58:e4:3e:44:
60:43:90:a5:f0:66:92:45:6c:ee:c8:df:81:6b:e2:
dd:96:ee:89:12:3f:4a:7c:5c:88:0c:31:1f:83:31:
04:5c:5c:45:cb:45:48:b6:7e:c5:eb:3a:80:37:be:
94:f1:e9:77:13:12:81:ab:6f:0f:6d:6a:35:f4:c3:
49:fa:44:a8:88:a2:f0:fd:28:81:94:bb:3f:2f:2e:
89:d6:fd:42:44:6e:4a:fe:34:37:4a:44:af:6d:55:
af:80:b8:c0:c5:8d:e9:a2:89:dc:f4:7d:34:ab:46:
a0:ba:8a:72:4c:51:ef:2f:3a:c3:0a:c9:6e:93:7b:
da:6b:b9:65:fc:9f:1d:1a:00:f0:7a:7f:e4:a8:27:
81:fd:2f:98:8b:4a:e0:a1:4c:3f:2d:fe:9b:4f:8e:
f5:72:4e:08:c8:37:f5:02:88:2b:89:44:14:5f:5a:
a6:d1:ab:54:51:14:16:8c:03:a6:1f:b0:1a:44:93:
ce:02:b5:a9:bf:08:80:bd:81:81:88:60:d1:87:00:
25:f8:6f:c1:7f:58:cc:cf:7b:3e:41:94:f7:d2:77:
53:d7:72:98:71:1a:25:a3:2f:10:6a:69:41:33:b6:
10:23:40:7f:7e:72:fb:e0:3b:0c:8e:62:6c:43:f9:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:F8:D9:D5:B9:1B:A7:14:11:2D:73:1A:C5:B6:55:13:7F:D4:EA
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/YUz42dW5G6cUES1zGsW2VRN_1Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.64.0/22
IPv6:
2a0b:3c40:10::/48
Signature Algorithm: sha256WithRSAEncryption
16:a0:f2:a5:4d:7f:32:0f:88:7a:ad:da:87:c4:0b:3e:b3:fe:
2b:3c:f1:59:4e:14:1d:d3:93:32:e0:2d:38:0b:5c:43:e3:5c:
3e:d4:b4:dd:b7:29:9d:10:7b:e9:6c:21:40:06:32:45:a6:34:
b8:6e:53:2a:aa:4d:f4:eb:b5:f4:0b:13:97:bb:e0:bf:87:e7:
e9:da:52:11:8d:26:6b:cc:87:4c:a5:75:c8:1a:8e:9b:35:63:
17:e5:51:fa:3b:fe:fe:7a:4d:89:7c:4a:e6:15:65:63:ca:fa:
c5:22:c6:c8:d5:7a:e9:3a:6e:55:da:eb:d1:35:9c:46:8b:b3:
cd:ae:e0:7f:d0:8e:b2:d8:32:dd:33:c8:7b:17:49:29:ea:36:
80:18:3c:f0:83:34:1d:a7:69:cb:21:6c:ec:d9:33:eb:58:04:
6a:c0:29:26:c3:64:23:7b:66:6e:3a:d8:06:00:23:a3:7d:8a:
00:6c:8c:b0:c0:83:1b:1b:11:79:68:76:cc:96:ab:91:be:f9:
8b:47:a9:a6:0c:78:73:be:0c:50:8a:93:10:ad:4c:f8:c9:8b:
30:ff:95:55:bb:d5:d3:0b:24:90:80:ea:88:54:54:7d:a0:7f:
62:25:f4:f9:a3:28:8b:c7:f3:ab:4f:ad:28:5e:14:61:d8:c9:
bb:93:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org