Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/KVbmt1rb4GdX57lqEB629HRoJWM.roa
File: KVbmt1rb4GdX57lqEB629HRoJWM.roa (raw, json)
Hash identifier: tFVnPayFU3C9ZrAt1nYK2hFsITYSDkBaMDdD8Bkpr3I=
Subject key identifier: 29:56:E6:B7:5A:DB:E0:67:57:E7:B9:6A:10:1E:B6:F4:74:68:25:63
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0B2C68AA
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/KVbmt1rb4GdX57lqEB629HRoJWM.roa
Signing time: Sat 19 Feb 2022 20:14:29 +0000
ROA not before: Sat 19 Feb 2022 20:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212433
IP address blocks: 45.143.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187459754 (0xb2c68aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Feb 19 20:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2956e6b75adbe06757e7b96a101eb6f474682563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:70:88:f6:08:09:80:c1:e3:da:7d:9e:74:
03:01:6b:06:4b:36:2e:2c:90:97:1f:bb:e7:6b:d6:
17:06:57:43:4a:fd:44:e1:2c:e1:0d:f7:8e:b0:0a:
15:12:28:e1:27:83:30:ec:59:6b:32:67:08:29:75:
2d:14:d1:f0:eb:a1:15:e8:7a:ef:fc:cd:24:35:66:
ea:fd:34:aa:96:61:e9:1b:a2:33:b1:7b:ea:b5:9c:
df:ab:5e:58:08:ab:28:c5:b5:0b:b0:16:37:8e:32:
69:22:76:b2:87:a4:7e:25:cf:f5:2c:d0:4b:76:b8:
0e:dc:9d:0f:1e:9d:f1:31:54:e2:e1:21:8c:f0:9f:
c5:93:37:8b:8e:22:b4:b6:c9:fd:86:cc:e0:cb:95:
b4:d4:64:cf:b4:df:41:4f:09:bc:9c:87:a9:26:24:
d6:6e:e4:19:bb:7c:07:b7:b2:1f:bc:88:b1:48:6e:
2f:fc:e5:86:42:51:eb:c5:dc:02:97:62:60:4b:d3:
6a:3f:d0:cc:00:32:40:1b:61:c3:a5:13:71:ca:61:
70:ef:8d:92:d9:60:4f:93:f0:b5:78:5b:f4:f5:dd:
af:ae:c0:59:dc:6e:c3:b7:68:d9:fa:f4:66:68:ec:
70:ab:a6:ff:d3:e7:5f:da:35:2c:36:fe:ee:ef:d6:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:E6:B7:5A:DB:E0:67:57:E7:B9:6A:10:1E:B6:F4:74:68:25:63
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/KVbmt1rb4GdX57lqEB629HRoJWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.98.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:a6:3f:fd:07:f1:12:1d:0e:93:5f:c9:00:10:d9:37:f4:
56:39:c0:a3:d6:4a:a0:d6:12:a0:be:50:e9:99:e8:aa:78:ac:
03:ad:a6:76:d9:26:67:f8:2b:28:38:74:c9:c0:c1:2e:8a:9b:
f9:57:30:4d:11:64:31:18:82:26:b0:50:3c:e7:7d:91:85:ce:
79:9e:17:fd:87:8d:43:7b:eb:a8:6d:4f:b9:53:98:13:d5:d6:
90:20:e5:ca:c8:ad:2d:58:d0:07:64:4f:89:76:e1:3c:81:25:
2c:34:7a:41:da:ff:49:42:6c:47:d8:d7:17:90:6a:ca:62:e5:
02:4a:f1:75:ff:11:7f:e8:cc:5b:a6:66:4f:96:8a:ef:bd:4b:
e6:38:53:f8:a6:09:c2:7b:26:66:cf:71:ca:ef:d1:a7:07:cd:
71:77:ce:a0:ee:3b:fc:92:3e:da:d5:a8:5e:68:4c:0b:40:00:
93:2e:d3:c1:c8:e5:f8:db:64:7b:f7:e2:70:be:6b:47:fd:67:
d7:d7:52:5b:ca:93:7d:21:52:d9:16:d9:5f:2d:c4:4a:7a:6c:
d9:2a:40:2a:2e:0b:3e:52:1b:e7:1f:e4:34:43:eb:50:12:19:
b6:aa:38:66:43:4d:04:8c:ac:fd:31:f4:9c:6f:a8:45:5d:44:
5d:0c:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-fra.rpki-client.org