Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/PjpU3Wr73hGUzwNUrZUGcFI_HW0.roa
File: PjpU3Wr73hGUzwNUrZUGcFI_HW0.roa (raw, json)
Hash identifier: 4zFmM/JYAsgpexjK/O0t/IJRDudyiPwWF8V2UgP5mNs=
Subject key identifier: 3E:3A:54:DD:6A:FB:DE:11:94:CF:03:54:AD:95:06:70:52:3F:1D:6D
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 01841CA90B4F94F6CD85CF7C06BE2E1D94F7
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/PjpU3Wr73hGUzwNUrZUGcFI_HW0.roa
Signing time: Fri 28 Oct 2022 03:35:51 +0000
ROA not before: Fri 28 Oct 2022 03:35:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
45.131.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1c:a9:0b:4f:94:f6:cd:85:cf:7c:06:be:2e:1d:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Oct 28 03:35:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e3a54dd6afbde1194cf0354ad950670523f1d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:32:31:f3:d9:2e:e5:6a:d6:20:b0:f0:ec:
55:41:ab:77:d5:cd:82:8a:db:a7:eb:0d:47:9a:67:
a6:cc:d8:24:af:64:77:f5:fd:ba:ea:5f:83:cc:d5:
bd:f9:fe:cc:7d:ed:1d:f8:89:d5:83:b3:7b:cd:6a:
d4:47:04:32:b3:f3:17:6c:df:19:7a:4f:c2:c3:c4:
10:88:2d:c3:10:30:fa:b8:7d:ee:17:e6:ed:75:aa:
8e:eb:4c:78:04:eb:29:62:58:58:b7:95:7c:56:19:
e2:b6:01:7d:16:ff:c8:47:99:5f:4f:b8:bc:f2:81:
26:5f:a3:e1:11:88:e7:c9:41:e1:37:4b:d0:ee:ef:
e7:f6:60:15:0b:34:ea:27:02:dd:22:39:2a:66:92:
7d:3f:94:65:d9:d5:db:4b:ee:57:35:c3:b0:f7:a1:
0d:f9:1a:ee:64:ea:4d:1f:15:af:12:d8:e0:32:4e:
d7:4b:73:9f:25:11:75:46:49:9f:87:1c:2a:7b:c2:
c6:ec:7b:e2:09:e2:48:36:cd:4f:7a:ba:ed:94:56:
95:19:78:f9:fb:7b:be:13:ee:37:5f:da:53:02:2f:
96:72:84:4c:bb:29:d5:2c:06:ab:71:a3:11:df:df:
22:af:80:a3:60:af:4a:27:0f:bf:2f:2c:6f:68:54:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:54:DD:6A:FB:DE:11:94:CF:03:54:AD:95:06:70:52:3F:1D:6D
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/PjpU3Wr73hGUzwNUrZUGcFI_HW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f0:b8:95:fc:75:9f:85:6b:36:d7:92:2d:62:af:5e:d1:95:
09:67:98:5e:26:71:cd:80:dc:4e:88:22:92:76:6f:5e:e9:bf:
bb:25:54:28:98:28:93:39:ab:f6:09:f2:4f:72:3e:ee:fb:20:
0c:46:86:76:88:38:ce:2a:98:88:34:86:9b:83:22:96:b8:5d:
c8:c9:e2:c5:6f:9e:6c:11:b8:ec:27:8f:0b:fe:59:c0:93:31:
1c:0e:99:e5:c6:c0:6e:f0:2d:0d:7d:5b:40:d5:34:57:5f:f8:
68:20:07:4a:c5:21:ba:fb:a9:a3:8f:22:4d:ce:2a:b6:8a:05:
26:ab:b9:40:3e:05:33:da:76:c9:37:be:22:d9:0b:69:2b:35:
1e:4f:84:5d:50:75:58:47:8a:90:57:27:39:10:d6:e7:ea:f5:
0c:b7:ff:80:77:11:fe:12:d4:b1:1f:41:c0:ee:6e:9d:8c:26:
e0:19:af:84:b5:92:41:b8:d6:2c:be:da:82:d7:c0:f9:e5:7f:
9d:f6:87:05:74:4a:95:f3:74:76:25:0f:84:1f:b9:75:8c:79:
a6:1a:d0:c6:f5:b9:cd:c4:c2:85:0d:7b:c9:f5:8b:df:dd:49:
d6:8f:03:92:63:ef:4e:8d:3b:f1:cc:f3:64:9d:a2:83:e4:c9:
13:42:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:00 2024 by rpki-client on console-ams.rpki-client.org