Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/t3Czx6GeRGN5z1e-ykPAd2w1CU0.roa
File: t3Czx6GeRGN5z1e-ykPAd2w1CU0.roa (raw, json)
Hash identifier: ijfp7vN6FB58N2p232/4g1XfAowHGVR2c1jTi/ujaRk=
Subject key identifier: B7:70:B3:C7:A1:9E:44:63:79:CF:57:BE:CA:43:C0:77:6C:35:09:4D
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0182567D38EC84E17F37B6D9FB887437EAEA
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/t3Czx6GeRGN5z1e-ykPAd2w1CU0.roa
Signing time: Sun 31 Jul 2022 23:00:23 +0000
ROA not before: Sun 31 Jul 2022 23:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62425
IP address blocks: 45.133.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:7d:38:ec:84:e1:7f:37:b6:d9:fb:88:74:37:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jul 31 23:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b770b3c7a19e446379cf57beca43c0776c35094d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:ed:66:cf:1e:1c:2d:d6:94:f2:cb:9b:07:
e9:66:a2:de:cd:0e:58:86:c6:93:4e:1a:53:bf:96:
17:ec:17:fe:87:9f:10:bf:00:1f:5c:40:50:a6:41:
db:a2:48:af:9d:89:ee:1e:f1:a0:d6:b4:a4:a2:8e:
62:08:c6:12:7f:2e:36:26:30:66:da:c1:85:c3:d1:
82:c3:38:96:a1:9d:ae:bb:41:db:1b:eb:df:a9:30:
4b:0d:52:f5:09:53:7c:22:2e:94:23:73:8c:e8:20:
b0:b2:c2:05:87:25:7a:b2:89:0e:0c:73:c8:59:b9:
a9:5f:7a:9d:b6:86:49:05:b9:1a:de:b9:ea:a5:4c:
b9:f7:87:9d:d2:f4:66:7d:52:68:c9:57:9e:9d:a7:
f1:da:32:ad:b6:23:ab:e8:fe:01:33:0f:54:a5:94:
29:f0:f6:a4:39:50:22:f1:2b:99:ea:6e:bd:12:ae:
ea:e7:11:7d:cf:51:77:2c:37:74:60:00:b3:9c:90:
9e:42:a8:37:08:0d:77:ee:10:df:1a:67:78:89:a5:
81:f7:75:aa:da:35:86:e1:7f:bf:c2:60:55:8a:c2:
9b:ec:03:08:4f:9b:08:f6:1c:13:35:62:d3:e1:78:
42:2b:20:db:6e:74:4a:08:5f:1f:16:0f:65:c3:21:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:B3:C7:A1:9E:44:63:79:CF:57:BE:CA:43:C0:77:6C:35:09:4D
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/t3Czx6GeRGN5z1e-ykPAd2w1CU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:80:19:d8:32:89:01:1e:bc:f7:e5:c4:03:4d:2e:db:51:fa:
8f:a4:00:28:ee:7d:9c:e8:88:91:dd:ec:f4:c1:22:9f:52:09:
37:14:59:b9:e0:a7:10:cf:69:a6:c6:63:77:b2:24:90:78:71:
cf:76:63:e0:d0:a3:92:9a:d1:3f:10:6d:93:c6:b0:f6:d0:61:
53:e2:42:db:61:98:fb:f5:40:61:8a:6a:09:1e:e1:d6:1a:2d:
4c:f5:54:94:c9:a8:4d:21:21:7c:47:38:34:24:67:f9:62:ef:
6c:f8:4a:86:2f:af:27:c4:4d:0b:66:01:3b:ea:09:68:41:89:
78:48:e1:e2:34:99:ce:61:eb:a7:49:9e:d8:1e:19:ca:10:33:
59:7a:a0:ed:71:0a:de:e3:f0:2e:cf:42:41:96:be:19:85:54:
5d:21:bf:ab:d7:ed:a1:21:82:e3:3b:d2:02:49:3d:1a:63:7c:
15:a5:7e:24:0a:1d:9f:c7:71:cb:c6:a0:c3:54:39:93:bb:f6:
d9:77:99:81:fc:7a:88:0a:20:6b:f1:db:87:7d:62:9d:70:d5:
2c:35:d3:39:a8:5c:57:46:70:7c:7c:e2:4c:f2:ef:b2:d6:7a:
e5:5f:8f:16:59:af:7c:86:bb:18:32:71:3e:40:e3:ae:0f:97:
9b:4b:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-fra.rpki-client.org