Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/6M7j0uxBIP2lPvBvwqv49dmFEE4.roa
File: 6M7j0uxBIP2lPvBvwqv49dmFEE4.roa (raw, json)
Hash identifier: XcGIQX+MWoTQtn0R3JgsDNjATGFgwyE9Tf71QY7Z4Yw=
Subject key identifier: E8:CE:E3:D2:EC:41:20:FD:A5:3E:F0:6F:C2:AB:F8:F5:D9:85:10:4E
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 053FA66F
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/6M7j0uxBIP2lPvBvwqv49dmFEE4.roa
Signing time: Sat 01 Jan 2022 06:55:02 +0000
ROA not before: Sat 01 Jan 2022 06:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35489
IP address blocks: 45.133.100.0/24 maxlen: 24
45.133.101.0/24 maxlen: 24
193.8.4.0/24 maxlen: 24
193.8.4.0/23 maxlen: 23
193.8.5.0/24 maxlen: 24
193.8.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88057455 (0x53fa66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jan 1 06:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8cee3d2ec4120fda53ef06fc2abf8f5d985104e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:52:4d:ac:2b:41:53:e0:bb:07:be:fc:37:
69:66:c0:5a:60:14:30:4c:7b:22:f0:7c:8f:a3:75:
f4:76:43:d0:1a:8b:67:d7:61:94:91:ce:e5:f0:2f:
5d:dd:f0:cb:85:93:b4:de:97:11:7f:90:a9:94:2e:
3a:cf:f2:8f:49:c8:41:75:f5:38:ad:80:df:07:91:
fb:48:63:d2:18:3a:0d:d4:95:20:15:27:4d:e2:d1:
ab:90:de:d3:f3:25:e4:7c:01:3b:34:18:a8:fb:43:
a9:e1:c5:cf:90:72:aa:5a:6f:ab:06:d6:ca:c6:f9:
87:55:c1:02:a0:84:b4:a7:4e:e1:14:94:9f:5a:f7:
9f:57:c1:be:4a:40:8a:98:00:92:e0:88:7f:d7:0d:
8d:2c:a1:96:81:48:65:9e:86:3d:08:46:d4:2b:e8:
58:19:f5:36:d5:f6:3f:b2:19:b3:18:7c:56:f5:cf:
0f:af:3b:f9:f8:4c:9b:b0:3d:4d:9a:b4:3e:ad:c1:
a2:ad:d4:75:41:55:fc:8a:89:9c:ed:b5:2c:a0:1e:
9d:cb:65:ff:af:df:88:79:56:f3:e4:46:e6:a5:99:
ac:d9:37:35:7a:a6:63:b2:ec:13:16:f6:69:44:44:
78:21:c0:8b:cd:51:ef:a0:25:5c:8f:15:32:26:24:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:E3:D2:EC:41:20:FD:A5:3E:F0:6F:C2:AB:F8:F5:D9:85:10:4E
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/6M7j0uxBIP2lPvBvwqv49dmFEE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.100.0/23
193.8.4.0-193.8.6.255
Signature Algorithm: sha256WithRSAEncryption
16:01:4d:13:8b:22:db:7b:17:30:de:7c:76:e3:7e:0b:8e:90:
8c:01:7f:28:3c:19:21:6c:1d:22:22:9f:d3:1c:32:b2:7d:af:
26:31:97:31:53:6c:e2:55:10:15:75:b6:7b:ad:41:7d:8e:34:
ae:19:01:30:32:fe:a9:90:34:09:0b:47:cd:11:a5:5f:0f:60:
9c:23:38:06:70:84:69:da:39:73:e8:66:0c:3f:09:ae:bc:d8:
79:26:1a:2e:ad:81:0b:1f:0f:8b:48:17:d2:5e:9f:30:a1:87:
8e:9b:97:ba:c8:a5:89:32:30:35:15:f1:22:3a:9b:5a:32:90:
91:16:90:a2:b6:b5:f5:4a:f9:c6:2f:1f:00:9c:31:95:b7:b3:
87:b0:c2:82:e5:7a:8e:e7:cc:fe:b8:67:ee:46:21:c1:f6:ca:
ac:10:e5:97:32:3a:df:c3:ba:7a:d1:7a:02:f5:66:b0:51:37:
0c:15:65:a9:2b:7a:c3:e9:6f:32:7e:13:a1:a0:09:56:51:9a:
14:ad:40:46:46:5b:a1:56:c8:cb:bf:ec:af:16:df:68:70:7a:
9f:25:3a:c8:64:82:0a:11:ba:2b:81:9b:78:28:da:bc:b0:6c:
65:f0:9f:69:8e:9c:50:9e:62:6e:4c:e1:09:97:18:a4:68:10:
5b:f1:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org