Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/efxi7qW8HwZ0UQviIDVM4lWzKug.roa
File: efxi7qW8HwZ0UQviIDVM4lWzKug.roa (raw, json)
Hash identifier: jWsObvqsv1cXFZ+cBOl5ylV949SBctlbvXhsXv2IbxY=
Subject key identifier: 79:FC:62:EE:A5:BC:1F:06:74:51:0B:E2:20:35:4C:E2:55:B3:2A:E8
Certificate issuer: /CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Certificate serial: 0659D3AA
Authority key identifier: A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/efxi7qW8HwZ0UQviIDVM4lWzKug.roa
Signing time: Sat 01 Jan 2022 10:53:56 +0000
ROA not before: Sat 01 Jan 2022 10:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213122
IP address blocks: 45.143.145.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106550186 (0x659d3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Validity
Not Before: Jan 1 10:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79fc62eea5bc1f0674510be220354ce255b32ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:8e:e7:e2:d8:bb:df:17:cf:cd:7e:2e:21:
55:a0:94:b8:5c:fd:54:82:3f:3f:ce:92:e0:03:bd:
27:70:10:1d:d2:8d:37:50:3d:72:b4:92:26:3a:9b:
ec:61:c1:ee:ee:3c:d4:e4:a5:11:52:95:05:7f:6f:
ba:8a:17:65:9c:a4:3b:ef:60:c1:aa:21:cb:00:f5:
d5:c8:34:17:0a:af:8b:81:15:27:ef:23:40:90:1a:
27:c6:56:e6:d8:16:0b:89:d8:26:d1:21:d5:39:6d:
d3:fe:98:e3:e4:b8:04:62:6d:b7:05:7d:42:73:7c:
35:1f:fc:f9:c2:d1:6f:b1:96:63:bc:4b:6e:32:3d:
d3:7d:b8:23:ac:59:c5:91:aa:19:e6:0d:dc:42:e8:
2a:0f:2a:f7:5a:7e:71:fc:c6:76:d4:3f:0c:3b:46:
84:01:c9:20:5e:4e:86:5d:9b:06:5c:66:a1:5e:6a:
c6:b9:ea:a1:46:bb:cb:ed:ec:22:3c:16:25:27:32:
54:39:72:40:c5:94:bf:47:15:f5:3d:59:11:ea:ae:
fd:e9:dd:bc:e1:cf:bd:06:0b:52:bc:aa:b7:7f:d2:
64:d3:2f:92:62:9f:82:0e:6b:89:b3:ea:d6:97:ab:
f1:6b:89:a3:5f:65:18:34:e9:82:05:f8:56:7a:51:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:62:EE:A5:BC:1F:06:74:51:0B:E2:20:35:4C:E2:55:B3:2A:E8
X509v3 Authority Key Identifier:
keyid:A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/efxi7qW8HwZ0UQviIDVM4lWzKug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/pLAC4M0oyhBR4CydIduqOP5N7gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.144.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9c:ec:dd:a0:b4:10:29:37:52:a0:de:9d:c6:19:be:ae:09:
ce:81:9b:76:ae:d6:dc:bf:13:8a:69:0c:ee:60:3a:b9:41:6c:
3b:45:77:5e:01:dc:49:bc:0a:a8:0d:78:ae:4b:c7:5a:ac:51:
0b:56:3c:14:1d:80:e9:56:63:13:09:39:06:94:18:6a:77:f9:
2f:16:4e:84:76:a0:70:84:ee:bb:fc:e7:a8:e7:a6:94:09:9e:
8b:51:05:11:9e:83:80:0a:69:76:c9:5c:75:10:41:23:31:48:
ae:a0:a6:0f:a5:1c:5a:1f:38:82:17:c7:79:b1:1d:02:d6:bf:
67:1b:5b:af:3b:1d:16:35:33:ce:2b:d9:42:7a:a9:dc:dc:10:
89:87:66:39:ab:7f:f4:58:40:3f:c8:6c:e0:cb:27:8f:cc:c4:
41:33:d2:b4:9b:5e:01:7c:49:f4:5b:05:66:54:6f:6f:54:9f:
e8:d5:3f:ba:c4:e4:55:20:56:c9:25:d8:65:b8:32:27:d8:90:
64:be:1e:69:fd:bf:1f:9b:18:47:68:18:2f:af:c2:36:68:e0:
cf:df:6d:ba:a5:bd:28:e0:d6:d3:32:f9:85:0e:e8:ec:a2:ce:
ed:87:2f:44:da:0a:bb:49:61:c3:55:86:83:f4:51:0d:6d:6e:
c8:b2:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-fra.rpki-client.org