Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/g-JGz5E1CGnRSpi-aHiUcKypp9A.roa
File: g-JGz5E1CGnRSpi-aHiUcKypp9A.roa (raw, json)
Hash identifier: exf81Y54rqOnkpPIwYzbb53QZ/KkNrRJkOVZJp34ywc=
Subject key identifier: 83:E2:46:CF:91:35:08:69:D1:4A:98:BE:68:78:94:70:AC:A9:A7:D0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 04929984
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/g-JGz5E1CGnRSpi-aHiUcKypp9A.roa
Signing time: Wed 25 May 2022 16:55:37 +0000
ROA not before: Wed 25 May 2022 16:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61390
IP address blocks: 45.14.244.0/22 maxlen: 24
45.144.232.0/22 maxlen: 24
45.130.70.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76716420 (0x4929984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: May 25 16:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e246cf91350869d14a98be68789470aca9a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:22:6b:45:3f:9d:59:d6:4f:26:5a:61:25:
d2:46:8f:f1:01:59:c0:51:ef:64:61:6f:20:c3:38:
e4:e2:ce:31:4c:67:6b:e9:15:36:c7:f9:65:07:47:
b0:99:cc:5e:4a:da:f9:a6:ef:8f:20:e8:07:73:43:
67:a1:cf:f6:00:78:7a:a3:0c:ef:30:41:18:81:18:
1c:a5:e7:b7:6e:8f:5b:c6:97:68:d8:34:b5:f8:fc:
9b:b1:9f:b0:5c:6e:09:80:06:b6:3c:f2:11:ee:fb:
08:f3:63:8f:b4:68:ba:32:91:84:d0:a9:82:51:a8:
4f:1e:4d:41:01:ad:cc:23:45:fa:08:87:33:2d:46:
06:58:46:89:7e:cf:bf:d0:cf:12:96:d4:9b:ca:48:
f2:e0:44:d3:7e:59:1c:86:49:30:a5:60:d8:bd:95:
7b:03:67:cc:16:86:55:ac:0f:c3:91:5c:0a:d4:34:
0f:f3:25:40:b6:63:38:e6:45:2d:4f:b5:39:54:98:
b4:8f:44:7f:24:c0:e5:c5:d3:99:e5:93:0c:21:cb:
f8:fb:55:e3:0e:62:83:84:6d:1e:4f:75:74:92:81:
be:11:0b:99:82:32:6a:6d:14:b3:0c:e5:d2:f2:03:
88:ce:fa:46:4b:3c:c5:99:4c:bc:c2:d1:2f:9f:bc:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:46:CF:91:35:08:69:D1:4A:98:BE:68:78:94:70:AC:A9:A7:D0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/g-JGz5E1CGnRSpi-aHiUcKypp9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/22
45.130.70.0/23
45.144.232.0/22
Signature Algorithm: sha256WithRSAEncryption
57:65:71:41:3a:93:09:e6:44:2d:e3:06:c6:b9:f5:be:74:15:
de:25:12:3e:0a:00:5f:71:74:ca:f2:90:2a:8c:9d:8e:14:ed:
58:d2:60:12:3a:95:a2:f8:85:f1:62:0c:a6:15:b7:4b:78:db:
14:4d:80:0d:68:ab:13:70:d5:e4:9b:07:6d:1a:28:af:9b:e2:
43:e4:5b:1e:eb:30:95:86:e3:07:f3:a1:c9:af:88:2c:a5:54:
bc:da:0e:d4:4f:cc:99:0a:b4:b7:aa:e1:1e:3a:5a:fd:b5:d4:
0f:37:4d:47:ce:62:d9:b2:1d:96:b0:ad:7d:02:3c:7d:19:91:
84:22:e3:f7:b1:80:ad:61:a9:32:44:ad:61:79:3b:ee:b6:14:
19:c0:68:21:d2:ae:1d:d4:b7:15:99:e8:99:c9:d8:95:3c:78:
7e:b7:51:2d:e7:0e:cf:70:25:e2:c3:77:60:01:8a:69:56:16:
47:86:73:61:cd:78:71:dd:77:c3:98:03:54:70:a9:d4:98:fc:
52:b8:0a:fd:b5:72:cc:39:79:d9:41:5b:ae:d0:ff:1d:6d:c7:
c8:51:a1:51:03:6f:56:9a:64:26:ae:25:ee:fa:31:a2:21:ee:
2f:ae:0b:ba:0d:1b:cd:63:eb:21:4d:71:89:4f:5f:00:1e:5d:
13:64:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org