Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/T-fptiEF01bZ1cH9e5moykt6hoI.roa
File: T-fptiEF01bZ1cH9e5moykt6hoI.roa (raw, json)
Hash identifier: woVfehz73v6fa1H+fuEybltzgi6GTlUAqCqnyxQhxqg=
Subject key identifier: 4F:E7:E9:B6:21:05:D3:56:D9:D5:C1:FD:7B:99:A8:CA:4B:7A:86:82
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 01841CA90A35EFF48E3D6CACD21BCFA1D5A7
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/T-fptiEF01bZ1cH9e5moykt6hoI.roa
Signing time: Fri 28 Oct 2022 03:35:50 +0000
ROA not before: Fri 28 Oct 2022 03:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.85.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1c:a9:0a:35:ef:f4:8e:3d:6c:ac:d2:1b:cf:a1:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Oct 28 03:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe7e9b62105d356d9d5c1fd7b99a8ca4b7a8682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7f:40:07:15:86:9e:3e:cd:92:ab:ed:92:97:
b6:ad:ef:c6:6b:fd:a9:4a:b9:06:81:1e:5d:e2:e8:
a2:61:cc:f9:51:b6:5b:48:44:4a:c4:ee:4b:45:32:
2d:55:08:0a:bd:21:fa:9f:c8:6c:86:86:2f:7c:a0:
ad:84:87:1e:fb:04:62:1e:ed:1a:d3:c1:4d:fe:6c:
de:c4:df:e6:ff:22:78:55:19:e2:32:5f:ca:f2:46:
dd:59:55:53:07:4b:ab:2b:31:87:89:52:1b:ac:47:
eb:85:13:cd:20:24:05:8f:94:02:c4:67:ba:be:84:
c9:d5:4e:a8:31:79:59:9e:85:2b:ba:85:cc:cd:ac:
89:03:a7:ff:98:39:52:f6:ab:5c:f9:41:6b:cc:80:
1b:ce:3f:51:50:4a:d0:84:50:ae:9a:fc:00:d1:c4:
d2:2a:ce:2b:cd:60:b1:e0:95:d4:f7:4c:81:2c:d4:
fa:28:f4:29:2b:7f:f9:dd:c4:bc:11:3f:c5:ff:2e:
55:8d:dc:3f:0b:c5:0e:c1:65:21:87:fc:be:ac:0a:
11:75:f8:b0:e2:8f:b3:bb:a2:d7:80:8b:5a:56:ca:
70:44:75:7c:b9:9d:6a:81:19:5a:5d:f4:91:0f:09:
3e:b8:97:0f:6c:56:c5:1f:3a:86:36:94:26:0b:cd:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:E9:B6:21:05:D3:56:D9:D5:C1:FD:7B:99:A8:CA:4B:7A:86:82
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/T-fptiEF01bZ1cH9e5moykt6hoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
95:6b:f1:74:22:b6:f0:d4:df:ed:72:11:8f:8d:91:1b:78:71:
2f:44:ea:c8:e0:f3:b0:03:b6:d0:2f:e9:02:89:cb:a0:ee:32:
62:7e:32:a1:50:6b:ca:17:00:35:5b:de:b4:8b:92:cd:3f:9f:
aa:c9:55:c6:87:f4:ca:94:f5:c6:bb:c6:54:d3:bf:93:e2:20:
52:59:1a:fd:7d:69:da:80:a0:a2:0c:48:1f:79:e9:2f:6c:60:
b2:58:f8:3e:43:7d:e4:74:15:48:7e:f3:e6:11:8a:15:7d:12:
9c:2f:0d:4b:3e:f8:86:42:52:57:e7:8f:b1:cb:87:6e:15:84:
84:26:14:70:03:e1:fc:f3:61:8c:73:a1:8b:b1:08:b2:f6:78:
e7:06:a8:bd:d1:3a:e5:bc:e1:d5:80:f6:14:0d:cb:01:a0:70:
21:b6:81:b4:3b:70:cd:e6:c6:26:09:fc:74:98:76:a4:b8:ed:
1b:35:38:11:ed:ca:1c:b2:f6:ee:30:39:c6:a9:ad:b9:98:69:
3d:c1:81:ac:c0:99:71:ab:12:62:57:1d:67:4f:f5:63:f7:d3:
e2:51:d6:2d:53:c5:9d:08:64:11:a1:37:3b:d4:43:18:05:c4:
74:ad:9f:1f:ce:90:8f:42:62:1d:18:f3:50:a1:0d:17:18:d9:
89:b3:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:02 2024 by rpki-client on console-fra.rpki-client.org