Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XiA8CJ6rV7Lc-DmsgLwrbfZ3GXU.roa
File: XiA8CJ6rV7Lc-DmsgLwrbfZ3GXU.roa (raw, json)
Hash identifier: Pva96ychUGnRTZpZwFvI6gWBldinmqOwDgyrv+xgiqA=
Subject key identifier: 5E:20:3C:08:9E:AB:57:B2:DC:F8:39:AC:80:BC:2B:6D:F6:77:19:75
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07F57186
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XiA8CJ6rV7Lc-DmsgLwrbfZ3GXU.roa
Signing time: Sun 20 Mar 2022 08:44:15 +0000
ROA not before: Sun 20 Mar 2022 08:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133525894 (0x7f57186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 20 08:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e203c089eab57b2dcf839ac80bc2b6df6771975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:39:e9:f5:1d:7e:63:52:33:63:0b:26:cd:
d2:69:a5:45:28:7a:d5:13:71:00:82:f8:0c:3e:fc:
ac:84:52:b1:c3:4d:b6:37:ff:b0:2f:cb:4d:d4:4c:
c5:20:a2:08:10:51:71:40:96:b8:1c:43:ed:9e:4f:
9d:ad:1a:f8:b8:5f:34:42:38:2a:f9:15:0e:59:6e:
d3:66:4c:d0:c8:b0:ba:d6:aa:9a:de:a8:80:db:a2:
5a:7d:86:74:56:5a:a4:f9:da:ce:1f:c6:d8:f7:38:
bf:73:09:f0:25:4f:61:05:c4:31:79:14:26:9c:2d:
1d:d1:6a:18:ec:85:cf:4e:a1:a4:c2:17:b0:5b:3f:
b1:8c:50:2a:7c:5b:75:ff:b7:fd:c1:97:18:c0:e2:
a1:76:07:c5:bd:c8:8e:cb:fe:02:6b:98:31:aa:26:
82:05:ca:3e:b7:6e:97:14:af:49:38:df:aa:99:1e:
11:7d:7e:74:bf:55:57:46:69:6e:88:9b:cf:79:18:
ad:5c:4d:95:df:82:69:ad:15:74:34:ff:ac:4b:86:
b8:f9:d8:d1:b0:69:5b:8a:0e:94:70:38:e0:19:21:
60:f6:71:8a:f2:e1:d3:8a:28:61:09:de:43:79:46:
d9:a8:f4:ed:17:4b:4b:ff:ea:76:19:2f:d2:79:96:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:3C:08:9E:AB:57:B2:DC:F8:39:AC:80:BC:2B:6D:F6:77:19:75
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XiA8CJ6rV7Lc-DmsgLwrbfZ3GXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0e:c4:ab:6f:0b:6e:d2:8f:d3:7e:bb:86:06:23:80:e2:1e:
53:d6:5a:9c:03:65:63:85:ef:21:7a:5e:e5:74:b7:60:90:3c:
91:ca:3a:c5:15:f9:56:b4:19:4b:0c:b4:61:e5:eb:83:c3:e2:
94:56:72:08:91:d0:a8:32:e0:f6:6f:b2:ba:0c:79:de:9d:2b:
76:4b:67:21:1a:d8:26:a0:5f:87:c5:fc:d9:ce:75:ba:6c:d0:
0b:ea:49:5f:95:92:c7:bd:76:9c:c4:5f:de:40:d5:1b:c7:cf:
14:3c:da:86:11:c1:69:a1:07:4e:27:6b:c4:99:a6:2b:21:26:
54:8d:b8:6c:0c:be:18:6d:98:4d:14:a2:ff:0a:73:3c:90:2d:
8e:e1:8b:8f:68:ba:44:84:20:d9:5a:99:3b:52:63:e2:64:87:
1b:d1:4b:b3:ba:57:20:73:7d:8f:68:c8:71:69:3b:ca:b2:f1:
2f:81:b1:f2:87:04:19:4b:8d:5a:70:a0:49:75:64:e8:0e:d2:
47:d8:f2:a0:b8:72:15:1b:ac:22:b1:86:4a:01:c1:cf:7a:54:
1b:fa:23:2d:44:04:42:a9:bd:b1:4f:40:5d:bc:6f:78:3b:e4:
e7:6e:9f:44:de:92:39:4e:05:16:04:0e:de:f6:06:8f:42:99:
51:bf:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org