Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa
File: Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa (raw, json)
Hash identifier: 3N2FzzZLMvKCCWtev3oL6qDcRvyGQZ5rUzGhpWLJetQ=
Subject key identifier: 23:2F:0F:DC:A9:60:14:92:EE:3B:5C:C1:FB:81:FF:08:77:77:FB:8C
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0102DCA0
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa
Signing time: Wed 08 Jun 2022 05:34:02 +0000
ROA not before: Wed 08 Jun 2022 05:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.37.0/24 maxlen: 24
45.155.64.0/23 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16964768 (0x102dca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jun 8 05:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=232f0fdca9601492ee3b5cc1fb81ff087777fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:99:a9:77:7b:43:6d:5f:3c:47:a1:01:60:
27:fc:63:e8:3c:19:6d:04:a6:d3:29:51:67:f2:c3:
6b:a9:c0:70:ba:37:c8:1a:11:e5:0e:d9:c7:09:e5:
a9:32:7a:38:a1:fb:1d:1c:68:46:af:cf:ff:8e:1d:
75:c0:ac:95:2f:6d:45:4f:77:57:7f:02:4c:8d:b1:
c6:fb:cc:be:2f:99:9b:d8:66:0d:92:4a:70:af:5d:
f0:8e:62:c3:95:e7:3a:ac:03:a8:d9:1f:19:d3:46:
97:af:b1:9c:1f:ea:ab:bd:02:99:78:95:e9:f2:b2:
df:c9:36:d8:a9:d1:d9:cb:db:4a:d9:fa:5a:bd:2b:
95:1d:94:e4:de:66:14:9e:9e:e0:75:70:c2:59:a4:
fd:10:8d:26:81:b5:fb:45:38:a4:92:5c:eb:74:2b:
4e:da:21:7b:31:8e:c7:e6:51:81:d5:22:b2:a0:32:
69:6c:8a:85:7c:21:91:36:94:66:ce:56:36:24:43:
c7:fd:bb:91:4a:6a:b5:75:2f:ee:a6:06:38:a0:6d:
2f:44:19:5a:cd:6c:60:89:8d:6f:a8:0d:b6:25:a0:
da:61:b7:b6:21:25:fb:51:f2:38:82:25:ca:48:6f:
20:56:78:ff:d8:09:00:ff:7b:f3:f2:db:e4:bf:7a:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:0F:DC:A9:60:14:92:EE:3B:5C:C1:FB:81:FF:08:77:77:FB:8C
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7a:0b:b8:69:52:53:9b:57:db:59:c9:7b:42:08:86:15:1b:
6e:8c:01:cb:e8:74:17:05:8c:ec:7a:95:b9:29:a7:e1:7c:7c:
b8:49:63:2e:3e:4b:a1:ad:ec:a5:d1:85:76:f9:1f:94:54:4b:
b5:0d:19:bf:a1:cc:36:87:74:ba:59:37:d3:12:36:dc:21:05:
0e:14:c2:17:8a:73:9f:51:d4:ac:4a:2b:18:b6:4a:6f:94:07:
86:76:4e:45:28:21:5d:d8:ab:19:5a:49:27:25:27:3f:6c:18:
a0:4b:a5:78:7f:3e:01:56:e2:7b:22:39:60:7d:93:a1:ad:c7:
e7:92:47:6c:10:92:aa:ee:53:f5:02:44:49:2f:b0:d5:c9:9e:
da:16:60:e9:47:b0:e6:4e:f1:a8:f6:4c:63:a0:57:ec:4c:bf:
e4:8a:f3:ed:80:b6:46:28:af:da:ea:34:91:7d:33:a9:16:45:
28:9e:69:d8:3f:2c:05:9c:1d:44:97:7a:aa:8b:b5:58:b8:4d:
2c:50:f2:2f:bc:28:bb:95:e6:79:c6:fa:e6:92:ff:d2:6c:58:
31:2a:6a:24:6b:a3:ea:48:00:9b:18:35:28:74:fb:3e:f4:cc:
da:b5:9e:c6:a8:71:7b:72:f2:98:41:21:d7:ac:92:9f:8a:da:
4b:69:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-fra.rpki-client.org