Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/9S-7ll97bD8TzAge2YtIDd1BUXE.roa
File: 9S-7ll97bD8TzAge2YtIDd1BUXE.roa (raw, json)
Hash identifier: g8GwlVyYoMvyzw+tanN/Kn4KoEUWhsEAYO0gZh+fW1E=
Subject key identifier: F5:2F:BB:96:5F:7B:6C:3F:13:CC:08:1E:D9:8B:48:0D:DD:41:51:71
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 03AF7D0E
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/9S-7ll97bD8TzAge2YtIDd1BUXE.roa
Signing time: Mon 02 May 2022 09:27:22 +0000
ROA not before: Mon 02 May 2022 09:27:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
45.131.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61832462 (0x3af7d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: May 2 09:27:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f52fbb965f7b6c3f13cc081ed98b480ddd415171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:c0:98:a1:65:0e:b4:a0:61:d6:5c:d3:9d:
7a:e9:b4:36:f5:f3:24:0a:f3:d3:bd:4f:c4:95:fe:
98:06:f0:32:df:63:e2:4e:c7:45:24:b0:d2:ce:bd:
15:23:ae:3c:2a:88:87:40:ae:72:1a:02:52:7f:83:
0f:e9:a8:eb:d8:ba:e4:ff:65:0d:07:49:eb:57:5b:
a4:69:5c:fb:54:2c:f8:0a:17:64:c4:30:da:0b:8e:
86:d7:42:83:f8:ac:72:3c:42:f2:7b:8c:3a:ee:d0:
38:08:3e:c3:ad:1f:e1:2b:7f:55:16:b6:21:63:5a:
e3:12:2c:b5:5a:f1:8e:49:7e:c9:05:cf:0b:31:a1:
dc:da:ee:7c:7f:e2:fa:f1:5e:de:76:d8:7a:72:ba:
0f:c0:04:a5:8c:f5:82:22:b8:2b:f8:3c:d1:86:72:
b4:e2:51:72:d9:6c:17:8d:8a:fa:07:07:63:a2:39:
82:6d:8d:4e:5a:bd:78:5d:c1:13:d4:4e:16:c9:a7:
e9:96:fd:9e:88:3f:e1:93:71:ac:77:66:e9:47:28:
d6:a0:26:b6:2b:e3:e4:0f:e2:09:a1:2c:ed:cb:5a:
87:8c:96:e1:62:91:64:63:3e:e7:ae:7b:2d:f7:1a:
61:3d:2e:bf:7e:9e:8f:aa:34:a5:0e:2b:bc:ff:70:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:BB:96:5F:7B:6C:3F:13:CC:08:1E:D9:8B:48:0D:DD:41:51:71
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/9S-7ll97bD8TzAge2YtIDd1BUXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e8:68:fc:9b:f7:84:01:2d:b3:57:50:52:f5:0f:ae:37:ff:
d8:82:1f:4f:ed:0c:64:47:74:b0:19:2f:36:de:89:fa:d0:5a:
a3:1f:87:a0:12:9d:c9:87:99:8f:70:33:fc:e7:6f:17:28:ef:
5e:c8:d4:fc:a7:20:f6:a5:a2:77:ad:66:65:50:44:17:34:28:
78:8a:66:b7:7d:bd:53:d7:5c:43:8a:03:b5:53:7e:02:1f:e8:
2c:8b:93:3e:83:ce:1b:0d:55:65:9d:af:ec:d4:c2:55:dd:27:
db:32:e1:93:71:dd:39:6e:98:29:6f:d8:01:3b:cd:cc:a2:96:
3c:16:b3:40:05:33:fa:72:4b:f2:bc:bd:c1:63:2b:f7:2c:d8:
c2:0f:fe:ff:9d:74:24:1f:f1:5b:5e:b1:e8:54:c6:28:53:d1:
17:88:fa:9b:bf:8d:cc:31:81:55:cf:3a:25:e9:c5:31:56:53:
7b:51:7d:8f:ef:4b:b7:46:55:cf:18:45:ee:16:ea:4a:af:9a:
c4:db:5e:5c:a8:ca:18:19:c1:f3:1f:be:04:80:1d:87:52:8e:
de:bb:65:3e:40:d8:a6:a7:be:0b:66:7b:b8:9d:87:45:86:63:
c2:7c:7c:a5:80:c2:98:aa:17:ec:8e:ef:ec:58:4a:e2:c6:75:
f5:98:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:02 2024 by rpki-client on console-fra.rpki-client.org