Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/jIK7ONDoZKrV3zOZRr265o2GwMo.roa
File: jIK7ONDoZKrV3zOZRr265o2GwMo.roa (raw, json)
Hash identifier: XZLS3uPKHBiNnLGJz6cS/Twuq4PUxRmkRMH8q49PPHw=
Subject key identifier: 8C:82:BB:38:D0:E8:64:AA:D5:DF:33:99:46:BD:BA:E6:8D:86:C0:CA
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0880AC36
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/jIK7ONDoZKrV3zOZRr265o2GwMo.roa
Signing time: Sat 01 Jan 2022 05:02:36 +0000
ROA not before: Sat 01 Jan 2022 05:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201877
IP address blocks: 45.13.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142650422 (0x880ac36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jan 1 05:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c82bb38d0e864aad5df339946bdbae68d86c0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:aa:fc:85:95:9a:77:09:6f:7c:4e:f1:e9:
a8:cc:99:11:18:83:4c:09:24:0b:07:19:7f:46:9f:
80:7f:26:89:ee:78:c2:f8:76:d8:58:c2:27:ad:6f:
14:c5:9b:2f:fb:c1:a4:74:05:a4:5c:c1:32:7a:5f:
8f:3b:e0:91:a5:28:67:81:0b:79:4b:8a:eb:8a:e7:
14:f7:67:62:df:76:a7:52:be:0f:cc:2d:ca:1e:3e:
03:a8:ab:fe:3e:49:6d:a5:5e:f9:8f:93:9c:7d:83:
9b:4f:f7:fd:58:ea:17:59:bc:ef:a4:cb:74:bf:43:
00:29:53:aa:68:49:14:c5:95:0e:94:2d:a9:21:cc:
ca:92:66:ec:59:b0:1c:86:31:f3:c7:0c:14:6c:8e:
e1:aa:a7:3a:a8:de:a4:0b:56:10:59:c5:83:26:56:
dd:6d:68:5b:be:07:a0:ff:5c:ba:66:d8:74:f4:f7:
20:5a:30:dd:d0:ee:b1:b0:ef:c5:34:12:34:8d:14:
7b:7e:9f:70:f5:98:58:fb:e1:c9:0c:f0:96:57:39:
b2:8b:2e:79:7d:1b:d8:c0:65:ed:1a:87:bf:c0:c3:
36:30:89:ff:3b:79:85:c8:c9:e4:27:ad:62:9e:8e:
4b:4d:92:bc:8b:8b:55:44:24:95:88:27:ac:77:9f:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:BB:38:D0:E8:64:AA:D5:DF:33:99:46:BD:BA:E6:8D:86:C0:CA
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/jIK7ONDoZKrV3zOZRr265o2GwMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:79:c6:3a:6b:6d:ff:e4:10:01:fc:b2:77:a5:36:4a:7b:30:
cf:c0:cc:19:b7:e6:47:5c:d5:3e:d4:d6:ca:04:91:1a:0b:d9:
62:6b:48:ce:35:f0:99:f8:63:73:1c:6a:3b:b4:7f:98:f0:22:
c1:39:47:78:ee:0e:c2:10:9e:28:46:96:9f:bd:f6:bc:25:6c:
7e:88:db:68:b0:b0:f5:c0:71:5f:4b:7e:16:b3:33:0c:e0:81:
40:94:df:1a:54:d4:d6:37:ec:f8:29:e7:c8:6e:83:c3:b8:d8:
4c:9d:0a:70:2b:e2:ca:4e:b1:5a:1e:90:c7:d3:cb:c6:0e:37:
f3:27:15:36:75:02:52:d6:51:0c:a6:cd:2a:ba:9c:14:e6:58:
e4:8d:12:16:53:91:86:8d:fd:bd:f5:ad:07:c3:96:46:f7:79:
9b:7b:e0:2c:42:17:a2:cc:e4:ee:59:f6:3c:35:47:82:8d:1f:
ec:60:73:ea:e9:ab:89:c1:49:a5:ad:08:97:e3:17:75:ca:e8:
fc:de:b0:e4:76:39:15:d6:d4:14:74:18:36:a6:a8:3e:9d:0e:
3a:f4:13:22:41:e3:b3:16:ec:3d:d2:f5:8d:1b:e2:e5:f7:7c:
f1:e5:2a:45:e6:92:6f:87:6f:11:0a:8c:4d:33:d8:e0:1b:57:
6c:7e:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org