Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/gKUd9zagz-sP11MUrSgdx1gwzLU.roa
File: gKUd9zagz-sP11MUrSgdx1gwzLU.roa (raw, json)
Hash identifier: k6S4D6szt+libBtijTPcBh7nvckFL5eIvoRh3L9NZ8k=
Subject key identifier: 80:A5:1D:F7:36:A0:CF:EB:0F:D7:53:14:AD:28:1D:C7:58:30:CC:B5
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01821040F9DB020B98D81CAC62767DE83AF5
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/gKUd9zagz-sP11MUrSgdx1gwzLU.roa
Signing time: Mon 18 Jul 2022 07:41:09 +0000
ROA not before: Mon 18 Jul 2022 07:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210558
IP address blocks: 45.141.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:40:f9:db:02:0b:98:d8:1c:ac:62:76:7d:e8:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jul 18 07:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80a51df736a0cfeb0fd75314ad281dc75830ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:0f:b9:27:86:d2:5f:e2:e3:a8:fe:9f:62:
d7:98:d8:e9:c9:c9:d9:7e:94:68:64:ff:5c:5f:61:
ef:bc:06:8c:01:24:d0:87:17:d3:40:a0:04:5a:44:
7f:03:5c:4e:91:70:3c:be:36:29:8e:37:2a:ba:19:
10:44:d3:d7:cc:04:ab:b8:43:93:4e:76:1b:f1:4c:
47:b6:13:a0:db:1a:2b:0c:c3:2a:03:68:42:cc:c8:
3e:db:99:50:47:f5:56:8a:b1:1e:dc:f1:98:2e:a6:
e4:4a:63:24:4e:d7:10:c6:14:4c:af:d2:7a:2d:ae:
c2:52:e5:6b:4b:6e:26:bd:4f:e2:89:de:eb:6d:4b:
5d:65:16:39:61:65:cb:ed:f6:5b:71:54:98:a4:60:
98:64:7d:3c:df:7e:ae:6b:24:df:59:79:03:af:b1:
59:7e:1f:b7:31:86:1a:22:25:34:92:e8:8b:6a:99:
10:09:b9:41:49:59:08:11:d0:59:39:05:0e:ac:4c:
7f:66:23:56:05:64:09:1a:6b:bd:a8:40:5a:4b:b3:
4c:b5:49:f2:67:c8:40:51:c2:6f:ec:98:59:b3:5b:
8d:f1:46:35:5b:63:8f:13:86:a0:d2:3f:39:62:e3:
4e:b6:de:92:c6:8e:e3:db:56:24:d1:1b:a1:e8:3f:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:1D:F7:36:A0:CF:EB:0F:D7:53:14:AD:28:1D:C7:58:30:CC:B5
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/gKUd9zagz-sP11MUrSgdx1gwzLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:57:76:b8:72:80:85:4b:4d:28:b0:e1:b9:2c:9a:68:5f:7b:
70:86:f2:28:08:6a:97:e9:f9:3b:a4:ae:09:1e:a8:c5:2f:36:
01:20:c2:a2:1d:33:c7:8b:94:ba:6e:9c:64:df:37:eb:1b:a2:
07:ad:e9:4b:07:73:a9:ad:91:7c:60:2c:7b:9b:9a:58:6e:81:
a8:24:a1:f4:9e:5c:15:38:4e:ea:ba:60:1f:1e:80:7a:3a:43:
23:03:73:d6:7e:58:63:f8:85:ae:8c:37:3d:97:be:88:66:03:
5f:3a:98:04:ee:9d:b2:f0:54:85:81:b7:eb:c2:90:47:f7:4a:
11:36:ed:8e:55:1b:2c:f0:e1:98:94:85:42:c8:ac:43:f0:c8:
b1:c3:fa:e8:ca:5e:b4:99:51:df:41:54:4d:48:3f:30:6c:6a:
fe:32:c7:c1:9e:c5:0a:0d:cf:5c:5a:93:60:4a:9a:3e:1a:e6:
a0:38:bc:ed:53:1a:32:60:b3:54:02:43:f9:ff:06:0f:11:85:
5a:b8:35:47:12:e4:a7:02:46:1f:03:81:75:42:06:ac:7d:9a:
42:7d:1a:5c:48:5f:61:98:ac:3c:a4:82:f2:fd:27:d0:75:90:
bc:88:aa:95:bd:5b:bb:0e:1c:eb:12:5b:65:4c:1c:55:58:15:
b2:47:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:29 2023 by rpki-client on console-ams.rpki-client.org