Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gDExY3nkY4-eSjsF7FStcaZ6TW0.roa
File: gDExY3nkY4-eSjsF7FStcaZ6TW0.roa (raw, json)
Hash identifier: 0AOnbQ2MYdj5dXGC3qCrm7co6baX3zWD81ckMxFMuo8=
Subject key identifier: 80:31:31:63:79:E4:63:8F:9E:4A:3B:05:EC:54:AD:71:A6:7A:4D:6D
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 08F39AFD
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gDExY3nkY4-eSjsF7FStcaZ6TW0.roa
Signing time: Tue 26 Apr 2022 09:02:24 +0000
ROA not before: Tue 26 Apr 2022 09:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211459
IP address blocks: 45.140.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150182653 (0x8f39afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Apr 26 09:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8031316379e4638f9e4a3b05ec54ad71a67a4d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:3c:68:36:77:4f:b8:88:60:f9:bd:61:92:
30:c1:56:94:f1:13:35:35:84:5f:90:2d:1a:b8:b8:
d1:52:82:b9:e4:e4:aa:6e:6e:1f:76:da:2a:93:95:
40:c7:01:fd:b0:fa:0c:9d:93:1d:0a:6f:f1:83:0b:
4c:52:30:23:31:19:c1:e6:ac:a8:e7:52:8f:52:5c:
62:5e:91:4a:ce:e5:0f:18:47:64:46:97:0d:49:c9:
2b:75:38:d6:bc:01:e7:e6:93:cf:14:b3:2d:dd:25:
be:4e:f9:de:07:1d:20:eb:34:e2:ee:04:9f:91:b1:
f1:2a:55:79:8d:0c:1c:3c:d4:e5:6f:2c:fb:c7:86:
a5:03:dc:0a:4d:70:1b:e5:36:88:98:68:38:18:32:
73:fe:8a:ff:9e:09:39:1c:dc:df:bc:64:2c:2f:ad:
6a:03:02:8b:09:d8:96:22:00:e3:aa:98:2e:8f:0b:
68:64:81:da:1a:02:44:78:cd:45:92:0b:04:32:dc:
dc:37:cf:c2:24:94:e9:51:a3:f3:a4:04:69:d6:cf:
fd:5d:e2:2c:10:58:85:13:0d:7d:f2:06:4e:fb:1f:
dd:59:c1:71:ed:cf:90:82:a9:53:a3:22:a9:ad:35:
29:4c:2a:e0:6d:6d:10:34:25:9a:8b:d2:cd:4d:48:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:31:63:79:E4:63:8F:9E:4A:3B:05:EC:54:AD:71:A6:7A:4D:6D
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gDExY3nkY4-eSjsF7FStcaZ6TW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:9d:e7:b3:9b:74:bc:40:44:d8:c8:03:01:57:bd:c4:5f:
52:78:43:d4:75:85:e6:2c:17:da:ad:e9:9c:f0:a2:32:16:27:
d1:78:ac:4a:9b:39:18:6a:c0:48:3a:e6:36:0d:9d:2a:cf:0b:
ac:46:fb:f5:1f:35:84:ef:cc:72:4b:6b:ba:40:a6:8a:6b:2f:
bf:c8:85:2a:42:8b:36:2c:20:0a:21:47:3b:98:a8:d5:66:cb:
01:c6:cc:92:51:f7:25:d1:73:bd:85:80:7a:89:1f:9f:8d:0d:
f3:f6:43:b1:aa:d6:59:6d:5b:6e:0f:29:fd:f1:51:38:06:36:
95:3c:4b:71:47:e3:b2:e4:9d:ee:3c:e1:b6:17:b3:df:e1:23:
d1:f0:ea:da:59:9f:1e:c2:36:fb:a4:2b:f5:cf:c9:5d:00:ed:
61:f2:8f:2c:4d:96:4a:65:6c:00:10:08:fb:e9:06:4e:0e:04:
95:72:ca:f5:e8:40:89:cd:b4:0d:25:d0:e6:15:6e:a3:a1:14:
e6:c7:65:3a:42:b3:f0:d4:87:76:a8:70:30:fe:5d:b8:fe:cb:
fb:e9:1f:fd:c4:86:77:37:fd:46:2a:f3:8e:2f:13:52:31:b4:
56:f3:43:36:db:c7:69:7b:01:29:5b:d9:0e:04:8a:12:be:3c:
8d:80:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-ams.rpki-client.org