Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/5WHf4heG1PozYtB_U4_CkZdyfeU.roa
File: 5WHf4heG1PozYtB_U4_CkZdyfeU.roa (raw, json)
Hash identifier: 0X5pTLx9oYsV0fQ0lD5Ys5KBiBw6fcw0JdkSf6hTAWE=
Subject key identifier: E5:61:DF:E2:17:86:D4:FA:33:62:D0:7F:53:8F:C2:91:97:72:7D:E5
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 018482A68B30BF16C7BAB7157B43F2A549E9
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/5WHf4heG1PozYtB_U4_CkZdyfeU.roa
Signing time: Wed 16 Nov 2022 22:54:23 +0000
ROA not before: Wed 16 Nov 2022 22:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:82:a6:8b:30:bf:16:c7:ba:b7:15:7b:43:f2:a5:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Nov 16 22:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e561dfe21786d4fa3362d07f538fc29197727de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:6d:bf:d8:78:f1:38:a0:92:9d:ce:a4:98:
f3:55:d0:a8:89:2a:8d:8f:d8:68:72:3d:7d:bd:76:
87:4c:e0:c3:c6:95:bc:e9:62:08:84:43:cb:e1:38:
e4:61:e1:c5:86:d6:24:f3:50:10:5b:ad:bf:fe:2f:
97:09:bb:b3:4c:f9:3c:d4:35:13:e2:56:74:bc:72:
fa:70:6b:2d:5a:b2:15:07:a1:b6:71:78:2b:8e:e8:
80:ae:a8:21:bd:47:7e:db:5d:c2:dc:4d:10:7b:e6:
a5:d3:a1:89:d9:e6:c3:f3:8c:19:01:f1:60:b7:3e:
7f:05:c7:dc:a1:bb:92:1e:f3:aa:d9:c0:db:5f:d3:
e3:ea:f8:1f:70:92:81:58:eb:cd:e5:0f:78:b5:b9:
20:b9:cb:cd:45:82:ad:74:42:48:04:32:42:00:1c:
a4:72:79:85:83:bf:d5:11:7d:bb:5d:54:de:20:44:
27:36:26:ee:9c:74:c6:49:c7:80:95:d7:e9:0e:33:
bd:a1:8e:e3:c1:a7:d4:db:06:2b:b9:3f:d2:59:64:
b2:9c:87:90:a1:2b:52:d8:ad:68:70:2f:c8:01:cb:
97:bd:15:f3:f9:84:33:76:19:b3:39:5f:81:13:31:
ad:6a:65:4c:45:c3:3f:9d:95:0d:a3:5c:c6:05:9b:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:DF:E2:17:86:D4:FA:33:62:D0:7F:53:8F:C2:91:97:72:7D:E5
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/5WHf4heG1PozYtB_U4_CkZdyfeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:aa:3a:8e:2a:cd:28:7a:3e:30:bf:03:5d:f4:0a:47:31:e6:
15:0e:13:fd:6c:dc:9b:ce:89:16:d6:f2:83:b7:72:67:39:73:
e0:87:df:d8:f0:d7:bf:a5:c6:e7:9c:0f:d0:a0:87:00:15:61:
de:03:35:af:e6:e1:93:d3:2f:20:82:05:c2:99:f0:16:25:d6:
ab:e7:58:0f:6f:ae:0c:e7:7c:7c:28:cf:b3:03:59:d5:a5:dd:
97:c6:77:aa:3d:60:c4:26:c1:ed:e5:fe:43:31:cc:b5:ee:b5:
12:35:ca:73:c7:1c:4f:01:9d:4e:40:d1:f1:66:7c:1f:1c:ea:
e3:55:7b:44:ec:60:5f:85:e0:a6:07:f4:b8:9f:5b:8c:e2:4e:
87:85:cc:eb:9c:3d:22:37:9d:83:22:f9:42:f2:22:8a:58:2f:
d4:aa:b0:26:95:53:23:9c:b8:4a:96:a1:56:92:b7:44:36:ab:
c0:ed:55:d5:b4:ac:ed:4d:22:ea:32:b4:7c:10:31:f3:d6:65:
93:96:7e:43:73:a1:68:ca:2e:cb:54:9b:69:69:ce:23:f8:1c:
d0:44:10:68:f4:39:61:c3:7e:64:c1:e9:dc:7f:5c:0e:27:e3:
b5:85:28:56:21:45:f6:fd:9d:13:e3:06:3c:56:53:e0:b3:90:
9c:3a:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-fra.rpki-client.org