Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/aDr5LLgWfD0hkHvOMFUESL8JHUY.roa
File: aDr5LLgWfD0hkHvOMFUESL8JHUY.roa (raw, json)
Hash identifier: BH1NKza8abA0vqvUrFGjge4jeO8G+Rx+GmQoSU2bPug=
Subject key identifier: 68:3A:F9:2C:B8:16:7C:3D:21:90:7B:CE:30:55:04:48:BF:09:1D:46
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01847EF7416AAE13D243E0025590E4898D55
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/aDr5LLgWfD0hkHvOMFUESL8JHUY.roa
Signing time: Wed 16 Nov 2022 05:44:03 +0000
ROA not before: Wed 16 Nov 2022 05:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 45.129.88.0/24 maxlen: 24
45.129.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:f7:41:6a:ae:13:d2:43:e0:02:55:90:e4:89:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Nov 16 05:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=683af92cb8167c3d21907bce30550448bf091d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:8a:fd:ae:d5:7d:c3:8f:e3:0e:bc:16:1f:
d7:31:64:cb:1e:d5:79:b1:f3:04:dc:88:42:f5:d2:
e5:6e:0d:d1:59:11:5e:76:74:9b:8f:df:de:86:b8:
9f:73:3d:4f:9d:3b:b5:dd:70:66:fb:a5:99:3d:0b:
42:ac:ca:fc:bd:22:07:59:9e:fa:90:0e:87:24:99:
72:53:bb:5d:e2:26:6b:43:91:c0:6e:bf:bc:78:63:
b3:ae:b4:99:8f:2d:87:c9:de:e6:08:e2:cf:6d:99:
8d:b2:f8:48:da:01:ab:f1:ee:ef:f0:ea:37:b6:7d:
90:d6:d5:43:10:cd:49:5e:52:f4:db:35:06:5f:d4:
0f:66:ed:5c:2c:c7:1d:d5:f5:66:e4:ad:c2:62:40:
28:d2:9f:f5:bd:e6:ff:c4:29:8a:dc:7f:7a:cb:13:
fc:a8:3f:72:2a:cb:68:f6:57:88:51:47:35:b4:a9:
4d:5a:d5:05:81:dc:96:b6:d5:1c:61:9e:1b:44:e2:
f1:2c:e4:02:0e:0a:fa:aa:d0:fb:cb:60:01:40:ad:
aa:64:0f:bf:57:64:67:df:38:73:e2:f2:ac:2b:3e:
3e:04:48:f8:24:67:f2:08:62:eb:2e:bb:f7:e6:fd:
fe:c8:f8:70:f3:10:e8:78:ae:46:f1:53:82:9f:33:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3A:F9:2C:B8:16:7C:3D:21:90:7B:CE:30:55:04:48:BF:09:1D:46
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/aDr5LLgWfD0hkHvOMFUESL8JHUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/24
45.129.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1d:d8:77:c3:b5:95:f3:87:c9:da:c7:c3:2e:b1:45:9a:fd:
41:3a:51:83:43:4e:06:43:02:74:1c:a4:e7:1d:c6:67:10:fb:
bc:0a:e4:04:5b:f0:f9:d7:2c:78:cb:e0:51:20:ba:92:41:94:
4a:60:47:11:7f:19:67:ca:97:8d:f8:af:c1:f6:de:ee:45:46:
d6:84:59:45:93:30:5f:9e:4e:09:4b:0f:5b:b3:5f:45:3e:95:
a8:6f:21:88:d7:d2:72:eb:a4:f5:91:57:eb:f6:ac:19:19:ec:
d4:a9:dc:40:11:50:b3:3e:78:7b:6b:8d:92:4a:c1:bd:13:88:
c7:e5:72:65:fe:4b:84:78:3f:4a:3f:cf:28:de:cc:a3:e9:5a:
7c:e5:0b:66:ab:9e:e2:32:d3:a4:60:3b:02:ba:2e:b5:5f:33:
04:9c:3b:3b:cb:10:61:21:a8:cb:fc:71:7d:5d:94:cc:4f:0d:
70:33:30:a1:c1:90:a6:95:02:49:dd:ae:01:3b:87:53:17:ee:
5a:4d:8d:9c:fd:73:4b:3d:2b:ab:93:f3:ee:45:bb:77:27:eb:
1a:ac:b9:a5:1a:0e:3c:d3:dd:b5:7e:8f:12:bc:99:b5:92:bc:
95:3f:d7:4a:82:b5:a8:ba:31:94:45:73:0c:29:0e:69:84:bd:
6e:89:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:29 2023 by rpki-client on console-ams.rpki-client.org