Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/0iZ0cYyEi0eKRayp2CT7COLl8Rw.roa
File: 0iZ0cYyEi0eKRayp2CT7COLl8Rw.roa (raw, json)
Hash identifier: ieI0c/zyOfiN7gXk9m9qjeSJ6vLgt0XXtk+l/UH1Bk8=
Subject key identifier: D2:26:74:71:8C:84:8B:47:8A:45:AC:A9:D8:24:FB:08:E2:E5:F1:1C
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 060AE87A
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/0iZ0cYyEi0eKRayp2CT7COLl8Rw.roa
Signing time: Sat 01 Jan 2022 15:06:06 +0000
ROA not before: Sat 01 Jan 2022 15:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208952
IP address blocks: 45.14.33.0/24 maxlen: 24
45.14.32.0/24 maxlen: 24
45.14.35.0/24 maxlen: 24
45.14.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101378170 (0x60ae87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Jan 1 15:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d22674718c848b478a45aca9d824fb08e2e5f11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:2c:d4:2c:48:6b:30:a6:33:f0:82:4a:b9:
68:49:40:1d:ad:45:4b:87:0b:3e:c7:f0:0d:f7:46:
f9:3d:d1:30:89:22:71:95:a0:03:c1:f9:79:64:14:
f5:74:1f:1f:a0:96:6f:ab:e3:c6:44:18:e0:af:94:
99:27:36:fd:3d:ca:d8:5e:61:fa:7b:bc:55:61:df:
5d:df:4a:17:0e:52:48:8e:94:fd:d2:2c:d6:aa:61:
1d:39:3b:47:08:ef:4c:b2:d9:eb:dd:1b:9b:bf:6b:
d3:14:24:af:61:e5:a6:85:aa:83:d0:8c:2f:73:dd:
5a:fc:93:2a:56:9f:38:46:9b:fe:8b:b2:15:17:2d:
51:f2:c8:bd:01:de:55:f1:93:8a:5a:1b:4e:0a:87:
85:59:8c:90:29:be:32:83:ed:bc:38:a5:b0:0e:7e:
5c:d1:4d:a9:cf:d3:7f:50:15:ae:7f:d3:7d:a1:c1:
da:ef:e7:81:19:a4:b4:e1:bb:5f:4e:f5:cf:9d:26:
7e:a3:6a:fb:18:2f:27:73:69:16:65:08:2f:93:6e:
73:ae:09:6f:51:cd:4d:5d:29:68:7f:70:5a:a3:8b:
10:98:c5:a5:0b:86:2f:19:a4:c9:01:43:9e:8c:83:
95:d7:46:7b:8b:0f:2f:b2:a3:f3:b1:ee:cb:80:7c:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:74:71:8C:84:8B:47:8A:45:AC:A9:D8:24:FB:08:E2:E5:F1:1C
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/0iZ0cYyEi0eKRayp2CT7COLl8Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.32.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e0:88:2a:3f:4f:d1:0d:35:a0:46:61:b9:02:e0:f6:ef:18:
61:d5:49:f1:8d:1f:35:08:4a:11:0c:08:0f:5a:f4:c5:ea:e0:
e5:c7:47:53:5f:0f:44:af:47:06:e0:25:2c:50:fa:4d:30:3c:
06:a6:db:21:b6:81:66:90:99:b1:32:ef:79:8f:81:b4:b5:ee:
ea:8b:66:ee:3a:20:01:75:97:2b:7c:09:76:08:ff:2e:e1:5d:
4a:b1:3e:33:c9:37:2e:2b:68:7d:79:e0:f3:2a:8e:f2:14:5c:
f4:95:fc:58:62:04:d6:37:d4:7c:98:b4:12:33:4d:4c:fd:46:
6b:c2:b2:2d:b4:c1:f9:ab:8c:25:0e:8b:4b:2e:f8:ec:d4:a5:
a3:84:47:78:23:23:7f:b3:ff:76:3f:85:01:15:69:81:d0:40:
16:2c:a3:4e:6b:0e:39:f1:d8:e7:85:31:f7:22:84:6b:e1:0b:
34:93:30:31:d3:94:97:62:d4:21:c3:ec:6f:d0:79:02:f3:76:
8d:25:0f:e4:eb:5d:b1:3f:4b:f4:7a:8e:8c:27:9b:f0:ba:a7:
81:bb:8a:0a:80:78:af:ba:01:89:a2:ca:d3:fa:7f:4c:ee:47:
5c:6e:52:28:d2:0f:cf:04:de:7f:d4:a6:ee:3b:18:c2:fd:45:
98:a8:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-ams.rpki-client.org