Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9Ke4zbAzCjDfUTZhbQvMNQlN_nI.roa
File: 9Ke4zbAzCjDfUTZhbQvMNQlN_nI.roa (raw, json)
Hash identifier: QEYStkGn+d+OHnFCC55oVH+HO3QX7YgNEemiXpg5PZY=
Subject key identifier: F4:A7:B8:CD:B0:33:0A:30:DF:51:36:61:6D:0B:CC:35:09:4D:FE:72
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 033D69FD
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9Ke4zbAzCjDfUTZhbQvMNQlN_nI.roa
Signing time: Sat 01 Jan 2022 00:57:57 +0000
ROA not before: Sat 01 Jan 2022 00:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48430
IP address blocks: 45.155.52.0/22 maxlen: 24
45.91.52.0/22 maxlen: 22
45.89.60.0/22 maxlen: 22
45.140.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54356477 (0x33d69fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4a7b8cdb0330a30df5136616d0bcc35094dfe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:07:d5:71:80:81:20:68:1b:9c:be:8f:0f:
b7:af:8c:6d:59:5f:14:a3:16:86:89:c1:1e:9c:bf:
23:18:94:09:97:15:0b:13:7e:5a:d9:83:61:0e:84:
05:fb:73:32:f5:89:9b:2d:69:de:03:6b:18:40:95:
a6:92:5f:72:c1:f9:cb:5f:87:c2:95:28:84:62:72:
d0:31:c7:eb:1d:5e:c7:be:03:2b:7e:59:56:6c:a3:
d3:c2:ef:62:6b:66:d5:ef:fe:d1:ed:d5:a7:81:dd:
b4:2e:f8:6f:83:0a:00:6b:72:ec:14:4f:e7:e0:a5:
72:c7:96:9f:11:08:28:cb:51:5a:b1:0e:76:78:47:
51:fd:ac:75:c6:96:87:c7:d1:00:fc:09:0d:27:dd:
34:86:7d:d9:10:53:1f:1c:a5:69:fa:63:99:19:b6:
1d:1e:2b:02:54:00:0a:a3:df:7d:c2:f9:8b:cd:ce:
91:f8:3d:f2:d0:ad:c7:d7:18:68:dc:7f:f9:e5:e2:
e9:9f:cb:e6:42:b4:9b:76:d9:99:81:05:5c:36:d9:
6a:22:9a:ab:26:56:d4:4c:3e:b2:33:46:09:e4:48:
5b:4c:64:8d:62:eb:cf:e0:57:81:c8:0f:52:1b:be:
ad:7d:69:34:1c:d8:94:b8:55:55:f8:40:53:2e:03:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:B8:CD:B0:33:0A:30:DF:51:36:61:6D:0B:CC:35:09:4D:FE:72
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9Ke4zbAzCjDfUTZhbQvMNQlN_nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.60.0/22
45.91.52.0/22
45.140.166.0/24
45.155.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:4e:62:91:e5:4e:d0:d4:d1:ef:96:e4:f6:c2:bb:8b:ea:74:
e8:6a:bb:7c:3a:75:43:ad:c6:d2:c6:fd:7c:9a:d7:0f:fe:e7:
42:e8:6d:34:64:0a:0c:80:29:63:86:a6:6c:71:a3:c4:ff:0f:
2a:16:42:f7:41:86:36:8c:13:55:52:ee:23:36:3a:46:ce:7f:
15:fa:79:9b:42:38:0b:ed:0f:8c:fd:91:96:1c:33:50:86:e8:
04:9f:f7:a3:82:1d:3a:cb:c8:61:49:01:66:3a:08:8e:77:1f:
88:c8:db:f4:00:f5:50:24:6d:c6:b8:20:58:d4:5a:82:2b:5f:
ca:f9:59:0f:5b:a7:8c:78:e5:e1:c5:06:e2:d2:58:e6:57:9d:
49:b4:41:e3:4f:68:cf:b1:19:f3:67:66:df:e3:31:05:00:81:
fe:6b:07:1c:4a:8e:6f:bb:e3:1c:a2:7b:21:bc:92:9b:67:3e:
23:2b:a0:b2:b2:20:d1:a5:2f:97:39:a4:76:12:c2:c2:90:ef:
ae:8d:fa:37:a4:6f:27:be:bd:18:bb:7d:44:1b:fe:20:72:35:
ed:02:7a:2a:c8:c5:d3:f6:29:03:78:75:d7:eb:d6:29:3d:09:
64:2a:63:07:37:05:e0:6b:ff:3a:60:a5:24:3e:27:dd:97:39:
69:dd:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org