Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/WXQeiZ_SHYetl4M7K720BYjjn6c.roa
File: WXQeiZ_SHYetl4M7K720BYjjn6c.roa (raw, json)
Hash identifier: ZeQo1EH+kRuO2j5IrfBl0Z2VewLACV9t0K94flta3cs=
Subject key identifier: 59:74:1E:89:9F:D2:1D:87:AD:97:83:3B:2B:BD:B4:05:88:E3:9F:A7
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: E0BDD3
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/WXQeiZ_SHYetl4M7K720BYjjn6c.roa
Signing time: Thu 12 May 2022 09:04:12 +0000
ROA not before: Thu 12 May 2022 09:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.157.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14728659 (0xe0bdd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: May 12 09:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59741e899fd21d87ad97833b2bbdb40588e39fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:9f:74:19:2b:d9:00:04:bd:5d:8b:24:ab:
39:32:19:03:3e:28:a6:49:51:13:a4:40:0f:a6:b0:
fb:6d:bb:58:3a:40:b6:c8:27:8a:5c:93:58:a9:82:
12:95:42:3b:c6:ca:9f:5c:de:b9:f2:80:a1:b3:20:
79:3d:30:69:13:41:bf:b4:a3:fe:ce:07:b8:36:24:
01:3e:4c:0d:4f:4a:86:57:62:ae:05:9a:9a:7b:fb:
db:21:05:0d:ff:9a:67:7e:b3:18:b6:7f:7b:36:9d:
45:b1:56:66:bd:f7:0c:26:3a:31:4f:4b:6c:35:d5:
68:6d:ec:33:23:3c:dc:7b:89:9c:e2:6a:33:29:21:
46:29:2a:4c:5c:be:3c:32:25:35:7c:65:bf:77:50:
05:e7:fa:f0:6c:8b:d2:3c:e4:f9:9a:1c:c8:db:a1:
b2:5e:1e:3a:f5:70:42:3a:30:88:c8:4f:08:dd:cc:
ff:cf:0f:2e:8d:7d:f7:11:0e:b9:33:55:a7:87:ae:
bf:4a:3d:25:11:63:1d:51:22:2e:f2:f9:73:a7:be:
cb:6d:2c:f5:52:6b:8f:38:b7:ea:91:52:b9:1f:57:
cf:2d:45:6f:a4:22:0c:9e:71:c3:e1:29:b6:4e:c2:
1f:38:ad:c7:72:eb:3e:8d:87:45:c4:61:fc:b1:04:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:1E:89:9F:D2:1D:87:AD:97:83:3B:2B:BD:B4:05:88:E3:9F:A7
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/WXQeiZ_SHYetl4M7K720BYjjn6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.138.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bb:a7:cb:33:cc:e8:8f:a6:a0:d8:2c:1e:38:c7:1c:52:03:
60:d7:d4:dc:17:05:93:75:31:aa:bc:a6:21:57:dc:fd:4b:64:
a1:90:ab:d3:aa:36:5b:48:c1:3c:01:d2:db:12:92:6b:5a:35:
c0:75:db:66:2b:a1:81:9d:de:e5:13:29:41:40:a0:1f:1e:7a:
9b:11:7b:f0:7d:0c:4a:86:e7:82:ef:30:e2:54:c7:d5:50:b6:
32:dc:a3:d2:cf:56:45:4b:83:09:85:cf:5e:72:be:3c:69:1a:
f0:65:74:45:a1:c5:08:12:7e:8f:24:a5:9f:7b:30:76:b1:e9:
d0:ef:30:62:7b:ee:64:60:da:60:77:11:0b:b7:59:e3:ad:c5:
d6:f9:c9:d3:57:ca:b9:d5:ed:70:2c:f9:13:cc:ce:06:4f:6e:
20:28:79:07:a4:cc:91:d2:d9:40:ed:75:c3:12:a6:c6:22:6e:
f2:d2:ae:cb:b1:c6:d5:4a:9c:2a:7f:0e:a6:b1:d2:ec:8a:d1:
2d:7b:c0:72:0b:03:a2:cf:b1:f4:0e:f6:8d:14:ba:7b:3f:1c:
53:7c:f7:d7:c2:b3:c9:26:3a:79:69:7d:9f:88:cf:10:88:15:
7e:35:1e:66:c6:64:1d:25:71:1f:70:08:5e:b5:54:2f:d6:17:
f9:54:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org