Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3jVRjAS0VJfvzUrAiIgcUmZ2NDM.roa
File: 3jVRjAS0VJfvzUrAiIgcUmZ2NDM.roa (raw, json)
Hash identifier: Z1qvhL2vADhPmfki6adyHKfULXiDfR5+SRnnZZEnU/w=
Subject key identifier: DE:35:51:8C:04:B4:54:97:EF:CD:4A:C0:88:88:1C:52:66:76:34:33
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 30CB2B
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3jVRjAS0VJfvzUrAiIgcUmZ2NDM.roa
Signing time: Tue 22 Mar 2022 11:36:39 +0000
ROA not before: Tue 22 Mar 2022 11:36:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.155.65.0/24 maxlen: 24
45.155.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197739 (0x30cb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:36:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de35518c04b45497efcd4ac088881c5266763433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:77:6c:63:4b:c6:e6:c7:93:aa:e8:ac:d3:
0c:87:c4:b1:f1:48:ad:96:6b:bb:d7:89:d0:2a:79:
82:8b:80:1e:e4:49:e6:44:7d:a2:1b:46:bf:9e:61:
ac:b0:25:f8:f7:66:03:3d:be:7f:61:af:ef:f7:51:
eb:28:43:37:47:b0:c1:4e:5a:1b:1e:c3:b8:5f:5e:
33:40:da:67:17:83:44:67:d1:7a:29:de:53:12:68:
73:46:96:eb:c1:3c:30:2a:1d:ab:07:7a:6c:53:52:
f2:53:d8:69:90:01:05:7e:05:d5:f9:3b:47:61:28:
16:d7:a5:de:fd:bd:21:9e:7b:7d:9f:3a:0a:34:88:
c7:d5:1d:c1:44:96:df:60:17:fd:4f:88:46:84:2c:
f6:37:6d:f6:b0:32:bf:4a:86:4a:74:79:d3:73:cb:
16:4a:89:bf:de:e4:a1:f9:f5:bd:a9:1b:32:cc:0c:
62:37:1e:a4:19:69:cc:b7:40:42:22:18:67:31:a9:
29:27:62:d4:ad:2f:a6:80:bc:9e:35:2e:62:37:d5:
b9:94:49:78:35:13:8c:73:b9:9e:34:59:b4:21:1d:
d9:85:25:15:d6:78:26:9c:34:bb:8d:95:09:60:47:
ac:91:2f:a9:a4:bf:28:8d:79:c7:b8:2f:c3:15:b2:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:51:8C:04:B4:54:97:EF:CD:4A:C0:88:88:1C:52:66:76:34:33
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3jVRjAS0VJfvzUrAiIgcUmZ2NDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0-45.155.66.255
Signature Algorithm: sha256WithRSAEncryption
74:24:20:f3:54:d2:39:36:ce:17:54:c4:79:a5:0f:59:4f:9f:
50:bc:91:a3:ab:0d:f3:31:2c:8f:ee:24:6b:71:15:aa:79:a8:
eb:5b:8e:0e:a9:79:c0:b2:9a:65:21:29:65:48:7c:00:78:33:
b4:ef:70:ea:52:db:19:58:38:b8:e0:09:94:da:1d:e1:e5:3e:
f7:af:6d:30:2b:fb:d0:d3:9c:75:45:dc:a0:6e:79:d5:eb:d0:
eb:70:9d:84:10:61:a8:81:00:00:22:a3:3a:36:b6:61:5b:91:
c1:a2:68:54:d2:db:0b:c2:3a:27:22:5f:bc:8a:cc:5c:79:f4:
f2:3a:11:67:d8:6c:38:d3:4e:c1:30:cb:9b:26:7d:e6:96:ac:
18:0e:2a:80:d1:52:79:16:da:ae:20:2e:78:93:09:fc:0c:27:
6f:01:de:d4:8c:d8:63:84:15:79:51:db:bb:70:79:7d:67:63:
15:02:36:12:16:ee:45:22:7f:cc:5d:b1:d0:09:c2:13:ff:72:
aa:07:0c:15:08:74:21:dc:88:de:b8:ac:dc:3b:f7:a5:f8:bd:
10:f7:5f:38:f6:39:f0:93:b1:b4:c6:cc:9f:d3:73:a5:dd:47:
14:90:36:22:8e:33:1f:dc:a6:c6:5e:71:29:61:ca:63:a4:6f:
64:be:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org