Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QeIkgPjYNagZXN0mWDa_75F7KW0.roa
File: QeIkgPjYNagZXN0mWDa_75F7KW0.roa (raw, json)
Hash identifier: ldTi/g9Vfaur6XhSyjSut3e9CuiXvm4RsqHeH+VzVy0=
Subject key identifier: 41:E2:24:80:F8:D8:35:A8:19:5C:DD:26:58:36:BF:EF:91:7B:29:6D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0944093B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QeIkgPjYNagZXN0mWDa_75F7KW0.roa
Signing time: Sat 01 Jan 2022 06:00:35 +0000
ROA not before: Sat 01 Jan 2022 06:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64249
IP address blocks: 45.10.23.0/24 maxlen: 24
45.91.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155453755 (0x944093b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41e22480f8d835a8195cdd265836bfef917b296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:fe:75:7b:f3:f2:ba:f5:1c:67:67:ea:3f:
51:bb:5a:5d:3e:4b:97:c1:12:30:26:7e:37:12:0f:
73:3b:2c:46:b6:82:9b:dd:3a:4e:7f:1c:b1:80:82:
85:69:54:e7:17:1b:6a:8e:c7:4e:15:35:88:ec:12:
1a:72:10:3e:48:49:e1:61:8e:52:f4:29:2e:0c:c4:
6c:99:33:0a:d5:1e:7f:5d:de:f1:51:80:94:42:33:
27:8f:4b:63:7d:0d:c6:e0:08:ce:4f:ee:f2:08:31:
90:7e:1d:63:64:7d:4b:40:59:fb:0d:d1:60:0a:dd:
fe:ab:29:ac:8e:08:7e:1e:0a:03:94:d0:5d:43:be:
f9:51:0e:85:ae:97:0d:c3:5a:0e:80:be:e7:17:8c:
f0:29:01:8d:f0:d9:ec:39:bf:52:9d:63:10:be:85:
ae:00:6a:e7:4a:3a:46:8d:0d:66:dd:17:7a:a8:c1:
17:82:6d:3f:ec:da:f6:d2:83:7a:c5:9b:66:d9:a1:
82:ff:74:de:f6:54:ca:61:33:74:8c:70:30:dd:e9:
1a:62:74:e1:d3:80:21:43:e0:08:5b:7e:d8:6a:4c:
4e:2c:ab:62:a1:dd:09:ae:e8:77:b2:15:90:9f:18:
8f:f8:49:77:6a:8a:24:d8:ee:25:45:1a:b5:6a:78:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:24:80:F8:D8:35:A8:19:5C:DD:26:58:36:BF:EF:91:7B:29:6D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QeIkgPjYNagZXN0mWDa_75F7KW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.23.0/24
45.91.248.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:40:e6:94:f7:ed:69:1a:11:66:85:0b:d7:fd:d8:82:02:
8d:e2:2d:79:76:7b:bd:1a:1d:55:7f:d1:5c:68:5d:7d:d9:b9:
1d:53:8f:4a:2b:eb:7a:e5:6a:dd:91:90:45:65:15:bd:e7:e5:
cf:ae:da:58:59:40:73:a0:77:0c:ee:82:77:eb:6e:08:58:9f:
e9:64:8a:d5:9f:1b:3d:21:20:ca:c1:3e:cc:98:c7:4a:3e:2a:
40:00:c7:c5:9f:1c:d0:d8:dc:a6:b5:aa:fc:f6:fb:95:e0:f7:
e7:39:6d:8f:bc:80:ee:31:91:c5:b3:e8:27:04:84:f0:fe:29:
e6:09:ba:5a:4b:a2:c0:00:dc:c1:e9:93:19:2c:18:a5:57:9b:
21:b9:0f:8f:b2:28:ec:60:a0:c9:0e:0b:e0:17:e5:af:f0:fb:
3d:59:95:96:ec:fa:92:e7:e7:09:3f:6d:71:60:7a:fd:ff:08:
82:4f:e1:9d:8e:12:0d:73:1d:ce:e0:14:c7:6e:63:f9:f0:8d:
d5:a1:ed:19:4e:6a:cd:ca:32:4f:0d:94:27:b5:de:a9:12:4c:
44:29:aa:59:44:e4:7a:00:26:5d:c6:57:b1:50:42:0e:e1:7e:
82:d1:3a:ae:1d:be:2f:09:14:6e:a6:0d:16:9e:eb:92:77:f4:
ad:6f:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org