Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/t5ahNZYGgoSsCNk0197BzrfYeOE.roa
File: t5ahNZYGgoSsCNk0197BzrfYeOE.roa (raw, json)
Hash identifier: bH106i1jLfJ0aaINUjTpaRn8fpeFuD5nnaMO0haFPEI=
Subject key identifier: B7:96:A1:35:96:06:82:84:AC:08:D9:34:D7:DE:C1:CE:B7:D8:78:E1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F33CBC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/t5ahNZYGgoSsCNk0197BzrfYeOE.roa
Signing time: Sat 01 Jan 2022 16:00:04 +0000
ROA not before: Sat 01 Jan 2022 16:00:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 45.90.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150158524 (0x8f33cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b796a13596068284ac08d934d7dec1ceb7d878e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:ca:83:44:16:fc:1e:12:12:47:b3:e3:c1:
7a:8c:cb:f9:1e:a4:be:09:0a:90:2d:e4:15:31:84:
8e:ee:7b:05:9c:55:c1:40:eb:f1:6e:21:98:f5:89:
8b:9e:dd:65:d8:6c:8c:c0:1e:72:b7:0c:e7:da:25:
48:6a:81:4f:7e:fa:8a:2a:69:33:d5:04:1a:31:12:
ce:f9:fd:08:ee:3d:ed:1e:d0:8a:48:29:d5:2d:f4:
39:cf:55:00:c7:1c:91:14:85:6e:9b:56:2f:f0:ae:
91:ad:ef:86:26:58:f3:18:53:3d:4e:2d:0c:80:4a:
37:80:1f:8d:a6:c1:de:ce:a6:1c:32:a4:89:1e:dc:
8c:31:e1:86:71:86:b8:cf:f2:a3:ac:c4:2f:1c:04:
e5:a7:f4:dc:13:d1:06:9f:68:34:97:fc:17:0b:d3:
1b:eb:53:27:d9:d0:ec:12:38:0e:0e:99:74:99:6e:
4f:69:a8:bd:7d:2f:b7:f8:d1:2f:cc:af:41:c0:99:
9b:da:ba:3a:d6:16:0e:48:dd:48:c0:d8:60:2d:fa:
82:ba:10:50:5e:9d:20:46:73:97:ac:92:04:a9:3c:
19:38:78:0a:0d:6c:88:20:c7:8a:2b:c2:1b:30:f4:
cc:27:aa:31:c5:90:99:01:e6:a5:5e:39:00:a4:7b:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:A1:35:96:06:82:84:AC:08:D9:34:D7:DE:C1:CE:B7:D8:78:E1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/t5ahNZYGgoSsCNk0197BzrfYeOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.146.0/24
Signature Algorithm: sha256WithRSAEncryption
22:74:b7:51:be:53:5c:c9:fd:4e:ca:5b:05:b5:35:d2:58:bf:
06:0c:47:1f:5b:8c:2e:b6:92:53:fa:de:c9:1d:7e:ac:68:a0:
1d:02:fe:cc:89:5a:c3:5e:ea:10:ca:ae:4d:dd:16:d7:78:cb:
9c:06:4f:25:0e:76:aa:61:f8:97:a0:da:d8:19:b4:f6:42:d2:
ef:88:d7:67:34:bf:78:3a:76:ce:0d:38:f3:93:36:8d:be:42:
58:d5:cd:f4:6b:1d:4c:c9:f3:7b:43:2e:ec:72:fa:21:07:8f:
76:20:92:e2:45:ed:a8:8d:18:6f:3a:ac:7e:94:0a:2e:e0:7e:
6c:9a:cb:af:83:bd:9f:22:af:99:66:3e:99:97:1a:f5:c8:02:
c7:c2:16:e4:a4:a6:56:87:e4:8d:a2:36:2d:be:1a:79:e5:53:
e8:19:cf:76:54:0b:e8:30:98:e2:76:35:90:04:29:26:b0:5a:
1d:c0:29:b2:07:c0:c2:7f:60:36:f6:3f:4f:be:93:e8:13:e0:
82:44:63:74:54:cc:cf:45:30:a5:16:46:33:6d:26:29:26:d4:
a2:6b:5e:95:61:36:7e:7f:53:6d:f3:5e:c2:d5:37:f8:99:49:
b4:a0:95:16:f4:fc:4e:da:f4:44:7b:12:a8:f7:0a:67:bb:73:
d2:da:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org