Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOeQvtVEsvlxdcxprauyjgPoH4U.roa
File: DOeQvtVEsvlxdcxprauyjgPoH4U.roa (raw, json)
Hash identifier: dZ/B9SrWKer1WmuzkEjMOs5oMhkF9kFI3eXrtH9Qy4w=
Subject key identifier: 0C:E7:90:BE:D5:44:B2:F9:71:75:CC:69:AD:AB:B2:8E:03:E8:1F:85
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01853182AFB78C09C1A92659837AB52D2A6F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOeQvtVEsvlxdcxprauyjgPoH4U.roa
Signing time: Tue 20 Dec 2022 21:48:46 +0000
ROA not before: Tue 20 Dec 2022 21:48:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:82:af:b7:8c:09:c1:a9:26:59:83:7a:b5:2d:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 20 21:48:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ce790bed544b2f97175cc69adabb28e03e81f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:7d:66:08:ca:0b:0d:a6:8d:5b:1d:e3:98:
83:dc:7a:f9:06:43:2d:30:71:ce:e3:f5:af:e4:4c:
40:e1:bd:30:a5:50:b7:60:5d:bd:57:32:be:4a:75:
1b:de:06:fa:01:4c:46:a9:1d:d5:8b:79:51:ed:29:
67:c6:c8:de:70:8a:ad:68:4a:32:2b:60:57:2a:6b:
83:7a:9c:f9:ee:d6:eb:7b:3c:8a:29:41:32:85:fb:
73:37:37:c1:7d:1d:2f:31:3c:a0:96:c5:1a:d5:da:
eb:69:d0:50:82:2c:0d:47:50:32:99:28:81:14:14:
97:da:d0:0d:f8:54:79:af:8b:6d:d4:a4:b3:85:5d:
05:8b:00:d4:c7:a6:a2:68:15:78:a4:9c:7c:c8:a8:
cb:c5:ab:d6:4c:d5:c9:fa:da:f5:48:86:23:e0:b9:
8d:85:5c:82:59:53:1a:56:ee:1b:80:25:bd:66:02:
20:92:65:fb:63:6e:3f:e7:cf:22:c2:58:05:f4:df:
86:a8:41:aa:e8:c3:cc:a9:fe:93:db:95:6e:86:a1:
58:3c:7d:0c:b0:63:54:8a:44:15:da:7e:0c:a5:23:
86:80:c1:5e:5b:a1:be:cf:d2:07:b5:62:ed:9b:ed:
c6:72:1b:28:27:fb:7a:8b:34:10:da:27:a7:e5:e2:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:90:BE:D5:44:B2:F9:71:75:CC:69:AD:AB:B2:8E:03:E8:1F:85
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOeQvtVEsvlxdcxprauyjgPoH4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ce:cf:d0:63:10:26:3e:bc:68:71:f8:e6:e8:2e:da:d5:00:
3b:4e:95:e8:9c:1c:2c:c7:bc:f3:1d:2c:52:06:9d:2d:1f:cf:
e2:46:33:d3:cb:e8:05:80:d0:4f:ef:8f:a5:9b:bb:cc:7a:58:
f6:7e:97:6b:e2:2b:3c:cf:c5:87:57:b4:80:6a:7a:f0:fe:81:
a7:cc:20:7f:ae:c0:34:b5:56:92:a8:db:7d:5a:b6:f9:ef:94:
91:18:8a:d7:e0:d3:84:2b:2c:31:a1:c2:1c:28:39:f8:9b:3a:
cb:d2:cd:00:ab:21:0a:31:35:53:9d:f5:8e:95:89:0f:99:b3:
b2:00:45:3f:e0:c8:0c:da:35:67:c5:65:b0:eb:11:7e:23:77:
76:e9:4f:92:fc:42:6b:66:da:87:08:99:95:e7:ef:4e:dd:cd:
c5:b0:7b:b6:5f:6a:64:e1:9f:a0:6f:0b:39:e2:51:7d:71:27:
a7:b8:83:5c:e3:34:ab:63:3b:ae:93:29:b5:0f:36:7c:34:24:
4f:14:08:22:df:6b:ac:da:08:b0:d0:01:78:91:d9:97:bb:37:
b1:5c:fc:50:18:e8:73:be:8f:4e:0f:ae:a9:53:88:c9:1d:5c:
1d:24:2e:fd:27:d2:35:38:6c:1d:fb:ef:8f:3b:08:2e:2f:11:
ec:48:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org