Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/pjRwHtPKfQlK_lDI9xSQwSqsM-I.roa
File: pjRwHtPKfQlK_lDI9xSQwSqsM-I.roa (raw, json)
Hash identifier: +hHeT97InLegQtXh7VSz/tF2FaELRqgNCIZtgzncecM=
Subject key identifier: A6:34:70:1E:D3:CA:7D:09:4A:FE:50:C8:F7:14:90:C1:2A:AC:33:E2
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 015180E1
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/pjRwHtPKfQlK_lDI9xSQwSqsM-I.roa
Signing time: Sat 01 Jan 2022 04:58:49 +0000
ROA not before: Sat 01 Jan 2022 04:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208645
IP address blocks: 45.91.244.0/22 maxlen: 22
185.91.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22118625 (0x15180e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jan 1 04:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a634701ed3ca7d094afe50c8f71490c12aac33e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:50:dd:09:b4:d3:08:ae:d6:87:05:29:12:
a7:e4:63:5c:74:f8:2d:ca:2e:b9:07:b9:48:8b:fb:
82:dc:7c:8e:7c:09:98:2b:77:7a:c0:87:9f:3a:2b:
bd:50:4c:31:a8:7e:0c:da:6e:62:52:b8:f4:82:31:
79:35:4e:cf:09:ba:60:f0:2a:a2:64:ec:0b:f8:f2:
16:18:03:83:81:45:49:4c:d8:7a:6c:9e:f5:67:b0:
6b:c0:ac:4e:83:a0:df:79:4a:40:fc:75:0b:66:a4:
c1:ab:05:c8:ea:54:b4:e8:ad:4d:06:2f:5f:d2:ad:
d6:ec:22:21:45:1b:fc:c2:70:d6:b3:be:fc:57:b4:
39:a7:b4:e7:8a:65:4b:11:c7:7c:7a:19:50:91:24:
90:96:2d:98:34:f4:f7:6f:69:af:e9:7e:40:82:1b:
a5:66:62:bc:df:29:f6:4c:b8:eb:d7:02:c9:f4:88:
a7:ec:bd:e9:d7:3d:76:c6:94:82:88:7f:93:91:35:
a1:58:cd:b5:8c:d7:be:01:7d:29:1d:fc:e6:07:1e:
51:e5:88:9b:57:e4:e6:be:94:68:ba:7d:f6:cf:8f:
33:ee:07:a5:20:66:db:c7:ed:41:1e:5a:ef:b2:f0:
22:6e:90:29:13:43:d9:c2:e4:86:0d:e1:87:ed:3e:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:70:1E:D3:CA:7D:09:4A:FE:50:C8:F7:14:90:C1:2A:AC:33:E2
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/pjRwHtPKfQlK_lDI9xSQwSqsM-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.244.0/22
185.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
76:52:2e:3f:5b:46:8c:a4:ac:ee:b1:5f:46:cb:4c:87:38:4b:
91:82:fe:4f:e5:a5:8c:20:cd:b9:2c:27:1b:0f:3a:55:b8:af:
0a:3f:d5:95:a2:05:61:90:61:b9:57:7c:06:64:64:6b:e7:6b:
02:cd:df:2f:d4:52:98:f8:99:4d:bc:00:78:ed:e8:51:51:d7:
e4:0b:5c:c7:d1:93:f1:7a:30:7a:33:ce:f0:b7:e6:14:cc:2d:
e4:e0:08:79:31:18:37:dd:2b:bb:ab:65:a8:d1:ca:31:3e:44:
cb:93:be:a7:8b:71:2a:3d:90:bd:de:56:7c:88:2d:65:e7:34:
0e:a0:50:3b:30:12:bc:0a:42:6e:dc:1c:e1:97:6f:2d:dc:55:
18:bc:db:b9:35:cf:ce:69:32:c7:8c:30:0c:be:eb:40:f6:4d:
f9:09:cb:6d:a8:16:3e:bf:80:4f:20:90:0d:3e:19:ee:fa:2a:
a8:51:2a:d4:d2:ba:24:f2:8c:9c:94:17:e2:c7:12:ee:98:49:
ee:95:cb:79:fc:94:e3:f9:27:40:b0:34:59:d0:6d:ff:5c:38:
55:88:c7:0d:be:69:8a:bd:0f:df:60:30:65:14:cc:1e:42:59:
57:7a:7b:6c:16:45:d5:f8:1d:f3:4c:97:c2:0b:1a:b2:d2:a2:
85:cb:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org