Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/yesNTs1cOx7T43WfnQH2_n19OWk.roa
File: yesNTs1cOx7T43WfnQH2_n19OWk.roa (raw, json)
Hash identifier: p7l9hKZdbx5Bdg0qvZlMgWxUFukG34xOTM1u10OStus=
Subject key identifier: C9:EB:0D:4E:CD:5C:3B:1E:D3:E3:75:9F:9D:01:F6:FE:7D:7D:39:69
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 7F1D89
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/yesNTs1cOx7T43WfnQH2_n19OWk.roa
Signing time: Wed 01 Jun 2022 08:14:20 +0000
ROA not before: Wed 01 Jun 2022 08:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208339
IP address blocks: 45.143.204.0/23 maxlen: 23
45.143.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8330633 (0x7f1d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jun 1 08:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9eb0d4ecd5c3b1ed3e3759f9d01f6fe7d7d3969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:02:77:53:cf:7f:da:9a:6c:dd:b2:dd:92:
3f:5e:74:12:0a:0f:e8:91:5e:60:03:3e:a0:a5:ce:
fa:3f:05:1f:50:53:f1:7e:62:93:22:a2:26:80:72:
46:28:aa:83:be:df:79:77:10:88:5d:6d:7e:82:84:
23:46:52:b3:58:a5:18:ee:f7:95:dd:27:01:93:8d:
d9:9f:02:a3:8c:d1:96:2e:cd:53:95:9e:bf:f2:4d:
e6:53:2b:70:29:67:88:24:c6:5b:bc:38:cd:6b:a3:
bf:d9:fd:1b:04:29:50:0d:80:20:b9:49:57:95:e9:
4e:de:ac:62:bd:9c:c7:05:91:07:97:51:1d:8c:0c:
b3:6c:97:7d:48:67:76:4c:52:15:02:05:60:87:53:
db:e3:01:ee:35:20:da:e7:84:02:c1:d2:c3:55:b2:
32:79:a1:20:a3:dd:d1:e1:97:34:70:2a:26:95:59:
50:8b:78:91:fa:03:9f:46:74:3a:af:50:13:03:0d:
bc:44:34:dc:c4:ef:49:1c:d9:41:60:ae:ff:59:3a:
c1:46:8f:7a:e8:e0:da:0a:84:b7:9a:b0:50:50:29:
64:43:7e:4a:89:4e:c6:56:06:2d:27:34:3c:ae:f8:
b8:66:6a:6b:94:2d:78:9f:29:b6:28:83:d3:1e:e3:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:0D:4E:CD:5C:3B:1E:D3:E3:75:9F:9D:01:F6:FE:7D:7D:39:69
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/yesNTs1cOx7T43WfnQH2_n19OWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:d1:e7:c8:41:94:f5:09:48:8c:48:92:2e:af:62:6f:c7:20:
2c:bd:ca:f0:6d:bc:ec:16:5a:34:a0:96:9a:9b:62:d1:26:98:
42:2a:e0:a9:37:80:10:d7:ec:80:a6:28:0a:f2:76:62:bd:09:
8c:6c:8b:2c:b5:86:01:8f:bf:dc:4d:e6:6b:d9:50:5f:d8:79:
cc:7f:e6:0d:bf:c6:46:14:bd:ae:ab:ad:1d:cf:ba:d0:28:c1:
6c:cc:f1:11:91:15:77:29:49:83:22:69:d0:cd:4f:0e:70:18:
ce:a4:62:0e:be:2c:10:90:c9:aa:17:66:aa:61:7e:7a:5c:fa:
47:c5:15:e1:9f:36:d7:c1:80:e5:45:42:fb:c7:2e:12:08:6e:
70:cd:85:0a:51:b5:ff:55:e4:a9:d6:3d:a3:f1:1b:39:ca:93:
4b:70:5c:dc:cc:4e:e1:d6:a2:ac:d3:1f:44:8c:78:dc:3f:65:
21:20:1c:99:d5:37:1d:3e:6d:f6:a0:ac:68:fd:6e:1b:f6:8c:
5a:26:44:11:81:f8:24:bd:70:53:1f:fc:9b:ef:bd:93:4b:fd:
16:c2:64:c5:f6:35:56:42:79:b5:89:c7:cb:d0:1f:73:f8:8c:
75:ad:77:c0:db:4c:7d:88:02:3d:2c:bb:f3:3a:07:ba:e2:9c:
79:85:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org