Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa
File: gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa (raw, json)
Hash identifier: qNZFqRjbEj6xu6QOriG1Ah5iNYn1/L4v5Bl8xvGVDQw=
Subject key identifier: 80:3E:83:44:92:51:8B:7B:6A:8C:8A:94:F1:21:88:55:17:7B:60:25
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 05FB6390
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa
Signing time: Sat 01 Jan 2022 14:55:16 +0000
ROA not before: Sat 01 Jan 2022 14:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 45.158.226.0/24 maxlen: 24
45.158.225.0/24 maxlen: 24
45.158.224.0/24 maxlen: 24
45.158.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100361104 (0x5fb6390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jan 1 14:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=803e834492518b7b6a8c8a94f1218855177b6025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:62:33:87:8f:a3:4b:b7:29:4b:c9:eb:4a:
0b:bf:ec:70:d2:b1:d8:65:8f:e5:94:3f:17:96:31:
b1:91:33:7d:b1:92:28:13:93:db:a2:0f:0f:a1:00:
9e:2e:ce:06:59:98:ac:9b:81:7d:cf:d2:62:8a:5c:
10:1d:70:b9:e3:eb:d1:6e:fc:16:a1:a7:5b:84:93:
b7:08:2c:05:8d:a7:72:7b:1e:99:15:0c:0c:6c:d2:
25:07:cf:05:82:79:7b:d9:36:de:e4:60:68:98:a6:
76:84:fc:3a:49:66:96:cf:0c:78:68:4c:0a:74:84:
c7:ad:98:3f:be:ba:46:37:43:1d:44:77:37:0f:31:
1d:fc:e1:07:2c:c4:f4:89:cf:fd:4f:01:1d:03:4d:
e0:7c:48:db:dd:f9:54:cf:91:1d:11:14:cd:00:02:
49:df:e6:f3:e1:f9:7a:13:66:16:ee:e1:e4:8f:ce:
a0:8d:b8:1b:e5:f1:b8:c1:d4:fb:99:ec:40:98:c1:
94:8d:39:34:6d:37:e1:a6:0d:84:a6:a0:30:a6:a6:
9a:6e:6e:df:8b:39:cc:46:3c:92:27:66:35:71:d4:
d3:46:26:f6:38:77:1a:7f:e4:50:a2:3d:c8:d2:ec:
ca:87:54:de:cb:ae:c6:99:91:53:29:7b:57:a7:e4:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:83:44:92:51:8B:7B:6A:8C:8A:94:F1:21:88:55:17:7B:60:25
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/gD6DRJJRi3tqjIqU8SGIVRd7YCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.224.0/22
Signature Algorithm: sha256WithRSAEncryption
90:df:a9:24:2e:46:89:b6:85:8b:79:be:e5:c4:f6:e9:9f:b5:
02:aa:d8:78:26:d1:97:d9:7f:26:93:d8:f8:6c:9e:a0:54:54:
7c:3e:66:04:24:a0:d7:9c:e2:f8:59:8b:5c:7d:7c:e2:19:88:
84:6d:8a:95:ac:ec:e6:56:f8:e3:a0:8a:22:3a:fa:23:08:89:
7d:2c:e9:1d:ac:50:b5:23:5a:13:90:25:b5:0f:fa:2c:df:db:
9e:cd:e1:2f:5c:4b:19:da:b1:b1:69:50:f2:00:f2:5b:4d:f5:
f8:38:d6:65:9c:76:52:4d:ee:45:5f:2c:d5:55:dd:03:9a:1c:
d3:af:02:47:db:b5:1a:24:89:f7:26:80:fb:de:f9:bd:00:35:
6f:28:d4:19:0e:a0:3a:95:72:e3:98:51:a6:b0:f5:0e:29:cc:
a4:09:0f:a9:e4:f5:85:5f:85:c3:9b:9a:41:1e:a6:44:e6:05:
24:46:41:77:11:b0:d3:77:67:25:11:d9:00:71:f5:85:12:ce:
fd:d6:71:58:9a:ba:18:34:d2:2b:d0:1e:22:32:9d:4d:60:f0:
87:5c:e4:16:c5:21:84:8d:f9:94:92:f6:d1:d5:dd:c9:d0:9c:
19:2e:c5:57:10:c4:e9:e7:3a:0d:7d:73:77:4f:3b:44:7e:97:
0e:a4:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org