Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/KnoXYsJSgahk2_mnK1yjijjLAhg.roa
File: KnoXYsJSgahk2_mnK1yjijjLAhg.roa (raw, json)
Hash identifier: bLl1FNSlJ+NKE43/Y/uj38Jzi6QVO1mEHCgPyqpQZCY=
Subject key identifier: 2A:7A:17:62:C2:52:81:A8:64:DB:F9:A7:2B:5C:A3:8A:38:CB:02:18
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 0184BFD028BC38EE14AD4897EEA4C73BC887
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/KnoXYsJSgahk2_mnK1yjijjLAhg.roa
Signing time: Mon 28 Nov 2022 19:56:40 +0000
ROA not before: Mon 28 Nov 2022 19:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:d0:28:bc:38:ee:14:ad:48:97:ee:a4:c7:3b:c8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Nov 28 19:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a7a1762c25281a864dbf9a72b5ca38a38cb0218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:41:ba:2f:3b:fe:a7:11:9b:8d:e6:6e:c8:
34:90:45:c4:4a:75:cb:11:67:6f:47:b3:d4:ce:6d:
b9:95:32:21:83:75:18:76:29:40:af:4d:8c:7e:49:
3e:85:4a:74:35:36:a0:67:da:01:29:b3:70:26:5d:
98:53:10:43:af:98:df:39:8d:43:0c:19:ec:77:d8:
4f:d7:a9:c7:32:c0:45:08:54:68:e8:40:31:9a:08:
2b:40:67:68:42:8a:7b:cb:f8:e8:2c:c8:0d:c6:b1:
f8:2d:bc:ae:b0:95:88:ff:0b:c0:7b:c1:06:75:4a:
86:26:3c:7d:6c:b4:02:db:cd:76:f0:18:ca:bc:cc:
95:97:0d:93:46:53:3f:df:21:3c:af:45:76:e6:ed:
02:40:e4:e8:40:7f:48:da:e4:60:49:ee:4c:f9:1d:
d2:35:05:80:9b:7d:0f:e4:b5:2c:15:97:57:ed:f1:
d9:19:cc:9d:ff:15:de:8e:22:68:55:97:02:98:53:
9f:21:cd:b2:c0:3a:3c:d2:42:0a:25:c0:74:47:8e:
e1:59:2b:5b:1b:c2:0c:4d:69:a6:51:5f:1a:27:4b:
db:3b:e4:75:f9:ce:97:5f:08:62:7c:4d:a7:d7:ac:
fd:d8:c9:52:9f:4d:da:5d:17:3d:67:6d:13:2e:2e:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:17:62:C2:52:81:A8:64:DB:F9:A7:2B:5C:A3:8A:38:CB:02:18
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/KnoXYsJSgahk2_mnK1yjijjLAhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7e:4c:ab:09:0d:3c:7b:74:66:44:50:71:d8:45:4c:1f:48:
56:9c:59:37:c1:87:35:63:bc:6d:31:ba:90:91:3b:08:16:f4:
67:24:d9:28:d8:45:d0:9e:8d:c1:bf:aa:61:17:2b:26:fd:cb:
06:be:72:73:e1:f1:e5:71:33:10:fb:49:c0:c7:e1:07:c5:a3:
33:c0:a1:ce:e4:58:c4:07:4a:be:47:88:5e:71:22:b4:db:fe:
c7:17:7f:1d:b6:77:7d:4a:10:53:08:b6:5b:dd:87:47:59:d4:
ca:f2:53:5b:4e:b7:e3:bb:6a:23:d9:d7:9f:29:17:9a:14:1f:
40:c5:3a:92:a2:d0:f3:73:90:98:35:6c:4c:92:1b:9f:78:d6:
62:29:24:e5:45:1e:e2:70:dd:bf:b6:a4:f3:21:c5:5a:e8:e8:
aa:d3:60:d7:e2:bb:72:3b:d9:f1:20:b1:fe:fc:70:b4:95:1b:
d8:f1:8d:a1:82:41:00:ee:f1:17:53:94:3f:d5:2e:e1:90:bc:
a4:e2:97:cc:55:03:82:d4:ee:e1:5a:80:bf:3a:dd:18:c5:d8:
ba:79:37:0f:1d:a0:84:4a:b7:bb:29:3b:82:f9:e1:99:eb:16:
c6:08:b1:42:23:81:06:f6:e9:95:f7:db:12:90:dc:93:3d:c2:
fb:af:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org