Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yo6tUgZoeJ4k43Vi4Y9N_Ablq58.roa
File: yo6tUgZoeJ4k43Vi4Y9N_Ablq58.roa (raw, json)
Hash identifier: 1/BXcW7u9aQog3QmgGIvG0ZOQlnXkantXZMmDB2R4uw=
Subject key identifier: CA:8E:AD:52:06:68:78:9E:24:E3:75:62:E1:8F:4D:FC:06:E5:AB:9F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01841DF0CB503C57A1006B1320AD71694422
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yo6tUgZoeJ4k43Vi4Y9N_Ablq58.roa
Signing time: Fri 28 Oct 2022 09:33:50 +0000
ROA not before: Fri 28 Oct 2022 09:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.13.191.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:f0:cb:50:3c:57:a1:00:6b:13:20:ad:71:69:44:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 28 09:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca8ead520668789e24e37562e18f4dfc06e5ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:0a:76:11:ce:4d:3d:c1:1c:46:21:ae:26:
99:e7:2d:f1:b7:c5:0e:a2:f2:dc:cb:ba:a2:c9:11:
fa:87:4a:b5:fb:ba:8d:d5:84:24:44:25:18:6c:23:
8e:c1:47:4c:26:d0:89:79:4d:40:1a:f7:d2:2f:d8:
67:3e:c8:bf:78:58:b4:46:0c:c6:d5:05:b5:99:41:
f3:22:a7:f9:40:57:16:8e:90:e5:89:cd:77:5f:44:
08:f6:66:eb:d2:70:1b:40:49:d3:2e:a3:82:24:c5:
8f:a8:c7:27:07:de:7b:40:0c:85:2d:b5:71:f6:c7:
49:03:1a:5e:8a:b4:cf:4f:58:38:84:f0:b1:2e:25:
91:20:82:f4:62:d0:87:79:b4:73:12:01:3e:48:a0:
63:08:29:c6:8d:b8:ca:1c:c0:da:04:34:69:76:c6:
a9:b2:91:d4:e2:32:33:8a:39:0a:f5:fa:4d:fc:3c:
bf:50:d6:10:8c:9b:c0:09:09:8f:a3:7d:da:68:d8:
7e:5a:6d:c3:a7:71:1f:ed:63:b8:05:07:31:40:0e:
fe:d2:e6:9d:fd:1e:cd:45:37:72:c3:69:ad:a8:cb:
67:6c:ae:12:d0:cd:8a:8b:9e:9c:d5:91:f2:61:ea:
b6:87:4d:d1:9b:fd:13:66:b5:76:bc:fd:32:56:de:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:AD:52:06:68:78:9E:24:E3:75:62:E1:8F:4D:FC:06:E5:AB:9F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yo6tUgZoeJ4k43Vi4Y9N_Ablq58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.191.0/24
45.151.0.0-45.151.2.255
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5a:df:ca:5c:5e:5e:c8:6f:14:2a:56:40:37:3d:92:bf:7e:
f6:ad:80:96:cb:70:fd:04:cb:58:6b:2e:f6:69:8c:96:39:cf:
3f:c0:7c:fe:91:fb:e0:b9:13:54:be:93:93:be:79:c6:39:a2:
61:68:8e:17:8f:b6:59:91:74:8a:61:2e:f7:8d:5f:9f:54:f1:
07:94:82:9e:8c:0a:15:88:73:6d:5b:29:41:a4:8e:f5:45:07:
ab:b3:ad:8f:8d:59:e7:cf:03:4c:b6:32:71:b9:3a:bf:10:eb:
bf:cd:d7:47:fd:cc:fd:0c:af:82:bd:13:1e:86:48:35:5b:16:
b2:4b:49:f5:11:e0:a0:03:e6:ab:80:ca:cb:80:47:8e:25:1f:
40:89:9c:2e:a3:78:e4:1b:82:c0:43:ff:cd:a8:9c:55:d8:6f:
10:7a:1e:da:47:76:f8:28:47:2f:69:85:97:6a:85:13:1c:6e:
b5:67:a7:35:1c:71:21:78:8b:bb:0c:97:ba:2f:23:2c:f1:bf:
86:9a:92:98:03:35:4c:12:19:ff:23:da:38:29:a5:f7:47:2d:
2b:7e:ec:db:5a:ef:4f:b4:99:57:25:9c:ab:43:ba:2e:65:42:
48:17:46:37:1c:54:e7:7a:04:7f:c0:11:d6:be:b5:e0:57:58:
be:c5:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org