Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ej1bEozXHUq0awVI-GAd-3XbBS4.roa
File: ej1bEozXHUq0awVI-GAd-3XbBS4.roa (raw, json)
Hash identifier: 7qDsZMmjqt43baSBtsEk5Qk6kBTnR2qu7IQOCo/bScg=
Subject key identifier: 7A:3D:5B:12:8C:D7:1D:4A:B4:6B:05:48:F8:60:1D:FB:75:DB:05:2E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018389AF92F703F68C14B4ACBCA30FC2FB65
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ej1bEozXHUq0awVI-GAd-3XbBS4.roa
Signing time: Thu 29 Sep 2022 14:38:48 +0000
ROA not before: Thu 29 Sep 2022 14:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:af:92:f7:03:f6:8c:14:b4:ac:bc:a3:0f:c2:fb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 29 14:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3d5b128cd71d4ab46b0548f8601dfb75db052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:be:a3:93:c9:5d:5f:45:13:8e:2e:11:cf:
3d:80:2a:7f:b6:32:ef:11:96:1b:55:a4:3f:12:f1:
d1:54:51:29:a3:9f:5d:a1:8c:d6:ba:b2:36:a1:8a:
26:4d:1e:57:f0:63:36:5a:14:da:79:35:a7:d3:0c:
46:f0:7d:c7:0a:24:0e:7e:45:d0:9c:b1:d1:a0:24:
f1:7c:fa:7e:62:0e:e8:3d:13:2b:5d:4d:13:26:1b:
08:69:2b:d2:ab:bc:dd:44:c1:ce:45:21:75:d5:63:
98:0e:da:89:f8:e2:30:72:7a:44:fb:66:ef:04:8c:
ac:a8:31:7f:d9:41:01:84:48:9c:88:58:4e:92:4a:
11:e9:be:6a:6d:eb:83:87:93:a7:ab:8d:54:42:70:
05:2d:7d:d0:fe:38:da:51:92:a5:7c:97:84:09:fd:
e9:6e:e8:18:b3:03:9c:0e:17:bd:a9:38:a5:e6:3e:
bd:19:90:27:a1:e5:10:92:ef:42:36:f3:b2:f0:64:
b9:2a:52:99:83:88:0c:ca:b9:31:b6:38:8b:63:be:
e9:6b:3a:ff:11:f1:d8:5b:e2:31:0b:2c:79:2d:f1:
0b:a6:79:3e:ac:0a:57:12:9b:1c:9c:83:de:54:f7:
23:a8:86:22:1b:4b:57:a4:f5:1f:53:ea:81:22:8b:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:5B:12:8C:D7:1D:4A:B4:6B:05:48:F8:60:1D:FB:75:DB:05:2E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ej1bEozXHUq0awVI-GAd-3XbBS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
91:63:ca:84:bf:13:bb:8c:b3:05:34:5e:e6:aa:54:85:8c:76:
da:b8:f5:5c:4a:ed:52:74:e1:8a:f4:7c:f6:84:4f:55:8e:3f:
ef:ee:7c:74:2a:d5:06:3f:99:22:9b:f2:76:56:e1:aa:e3:53:
e4:2a:ef:da:eb:e0:bf:d6:78:0a:95:a1:8a:35:7c:91:c7:d9:
34:4c:4e:89:56:57:53:0d:32:79:d8:02:79:1d:44:45:cb:58:
e8:c1:40:ed:8f:85:d2:9c:e7:b9:5f:83:06:11:a3:95:bd:99:
d0:85:7a:99:ff:cc:43:f2:d0:f0:be:ee:0a:12:4d:ef:7a:6a:
81:6b:ae:b4:79:3b:6e:c1:a9:da:5b:52:12:b4:34:48:4a:b5:
ce:36:3d:64:f6:fe:45:1b:25:5d:dc:b3:36:1c:a0:f0:81:eb:
b6:0b:e8:5f:53:30:18:2e:9e:de:8f:5f:d8:fc:2c:13:af:a1:
4a:bc:37:b6:63:a8:d1:d8:a9:3f:5a:98:e5:db:26:ee:ac:4f:
91:fd:87:6d:68:dd:d4:e4:54:a7:38:b0:cc:03:1f:b6:4d:b0:
10:fe:84:28:38:e9:f5:59:71:4e:d4:94:a7:a0:74:ad:96:05:
75:d3:5a:2d:7a:f8:58:f7:cf:09:ef:a5:9a:1a:33:89:b0:39:
69:18:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org