Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wthgZ_cxBKjzI5Dk8OCGIb0mtH4.roa
File: wthgZ_cxBKjzI5Dk8OCGIb0mtH4.roa (raw, json)
Hash identifier: p83WQcz2eDcXWHUjTwC+nLiZB9x+fyICWYdSwEDpD1k=
Subject key identifier: C2:D8:60:67:F7:31:04:A8:F3:23:90:E4:F0:E0:86:21:BD:26:B4:7E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 070CAE62
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wthgZ_cxBKjzI5Dk8OCGIb0mtH4.roa
Signing time: Sat 01 Jan 2022 03:54:15 +0000
ROA not before: Sat 01 Jan 2022 03:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212558
IP address blocks: 45.9.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118271586 (0x70cae62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d86067f73104a8f32390e4f0e08621bd26b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:3b:77:1d:5d:0a:b9:96:88:5b:4d:ba:52:
99:33:3a:f5:f1:55:78:9f:0b:4c:0d:ba:3a:38:c1:
ac:26:9b:bf:33:fa:75:6a:b6:0e:2a:71:8c:78:5c:
9c:67:fa:88:b5:3a:15:f9:1f:aa:0f:81:09:a3:19:
e3:50:b7:a3:f1:d2:88:11:29:81:d9:73:41:9d:de:
cf:2a:e5:12:7f:87:cd:f3:04:6e:af:5d:48:19:53:
80:8d:65:c5:18:9e:12:f8:4a:80:65:e8:66:a6:91:
e5:40:1f:db:5b:b9:33:a2:e6:d8:e5:0a:e3:50:de:
e8:35:f0:16:ff:59:ee:3f:a0:94:c0:78:76:c6:48:
64:7a:34:8b:23:8b:57:a6:9f:c7:bb:fa:ea:ef:be:
88:9f:5a:c8:32:0e:12:50:d9:ed:5a:1e:bc:f4:39:
8b:3a:1f:01:84:79:6a:6c:a7:d6:fa:28:61:c5:07:
10:ee:57:11:c5:13:20:b5:d4:33:b4:1c:ec:fe:6a:
84:6f:36:1c:e1:37:81:20:20:7e:69:5e:d8:e3:3f:
e7:e7:6e:3e:48:95:2e:07:65:30:2d:c9:ef:f0:8b:
df:c4:e0:6a:c3:70:af:0b:8b:d5:44:86:b1:ed:c1:
4a:b2:ed:a3:e9:a7:01:a2:6d:11:e0:31:f6:37:9b:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:60:67:F7:31:04:A8:F3:23:90:E4:F0:E0:86:21:BD:26:B4:7E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wthgZ_cxBKjzI5Dk8OCGIb0mtH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.28.0/24
Signature Algorithm: sha256WithRSAEncryption
04:67:c7:46:c0:61:cf:be:cc:c2:09:e6:31:75:f8:7a:71:4d:
2e:57:12:7f:97:b6:c2:fe:3b:ef:ef:c7:a5:66:1d:cb:a6:13:
35:a5:5b:fd:9f:3c:5d:da:78:e9:c2:63:a1:44:bd:b8:1f:95:
ed:09:12:ab:52:de:04:1d:00:4f:04:ae:cb:f0:de:85:d2:f0:
dd:b3:6c:55:db:4a:98:7e:39:5b:d5:1d:d2:be:39:7a:26:f5:
70:b4:86:cc:fe:dd:b2:96:09:2e:9d:1c:67:eb:df:b4:1d:71:
c5:0c:26:84:b2:19:6f:ac:d4:f7:1a:80:a7:44:3c:1c:e4:ba:
75:02:c7:e3:cb:08:fd:60:82:1e:3d:2b:4b:c2:ae:13:47:0d:
fa:34:aa:d0:69:1c:fc:8f:5e:94:66:de:81:fe:2b:e5:44:15:
64:f4:4f:e9:ee:85:03:92:72:a6:77:6c:c0:a1:4d:c3:3c:71:
f7:28:4c:f3:68:23:28:5f:dc:3a:b2:02:29:eb:2a:4c:92:30:
b8:0c:e9:f5:78:3f:04:c7:ab:b1:2b:b3:86:0e:ef:65:b6:09:
33:69:9b:74:c1:42:08:05:14:35:e4:db:c1:78:9f:5a:90:16:
5a:41:99:ea:49:b3:0b:0d:08:e5:4c:6f:19:21:c7:58:02:8f:
4f:af:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org