Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/milUj0vMsFMUW5BRlJs7eZEC1g8.roa
File: milUj0vMsFMUW5BRlJs7eZEC1g8.roa (raw, json)
Hash identifier: BiwT2yyVtYjhDH7p6JPevpLVDZQr4GhOsdw3faA/I5Q=
Subject key identifier: 9A:29:54:8F:4B:CC:B0:53:14:5B:90:51:94:9B:3B:79:91:02:D6:0F
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 033F03A5
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/milUj0vMsFMUW5BRlJs7eZEC1g8.roa
Signing time: Sat 01 Jan 2022 00:57:58 +0000
ROA not before: Sat 01 Jan 2022 00:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54461349 (0x33f03a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a29548f4bccb053145b9051949b3b799102d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:31:7e:8b:09:df:21:b9:95:22:56:76:45:
05:a4:d8:cb:0a:d9:38:83:4f:71:f0:64:b2:08:3e:
36:f4:6e:a3:58:66:0f:87:62:01:87:ce:fa:ff:a6:
0b:cc:ab:8a:34:c9:e2:47:66:4f:0f:a8:b0:39:0a:
3a:e7:75:19:16:47:c3:49:92:6b:94:cb:f7:ac:31:
1b:1e:4a:1c:7a:5b:45:c6:0d:e4:de:12:3f:dd:27:
4a:c4:64:53:41:eb:2b:a9:b2:c5:25:2b:2b:c7:bb:
a3:50:c6:b1:34:be:5d:47:08:27:37:24:57:7e:4d:
44:0d:ee:4f:bd:95:20:ed:eb:41:bd:cd:d9:23:f0:
82:73:9c:2f:2c:3a:fb:3f:76:73:fe:f6:93:5c:32:
50:27:e7:cc:ac:e3:eb:9f:bc:e3:0c:8e:c5:1a:a5:
fd:95:ee:fd:fe:5d:f5:13:c2:81:56:b8:97:1a:60:
8f:d7:0b:85:58:66:4f:63:37:1c:81:46:5d:4c:9e:
f7:47:7b:c6:8c:69:6c:b3:be:59:63:8b:cb:0f:22:
b1:3f:36:45:47:2c:18:b0:ca:f2:61:09:dd:66:c1:
56:d3:b5:ce:a9:35:67:84:46:48:be:d0:d3:91:c6:
fc:26:e7:70:3b:49:8e:42:14:17:89:92:98:ce:8c:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:54:8F:4B:CC:B0:53:14:5B:90:51:94:9B:3B:79:91:02:D6:0F
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/milUj0vMsFMUW5BRlJs7eZEC1g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.66.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b1:c0:72:6c:4d:81:f4:b8:82:15:6e:71:50:2b:46:c3:57:
cf:a6:a7:bb:0f:c7:1b:6e:5f:66:32:64:46:dd:1c:7e:ad:b0:
96:9c:d2:61:5f:c4:55:e0:cd:57:04:59:3f:f6:8f:a0:58:cf:
75:70:64:6f:3d:0d:4e:6b:31:da:53:0e:9e:0e:3e:6c:41:e0:
a8:00:3b:1b:82:4e:50:99:cf:b9:9c:9a:d8:46:ba:c3:ea:2c:
26:bd:eb:03:31:48:ac:f5:05:6c:6f:12:37:9c:da:d3:c4:26:
8d:c4:4f:07:4c:3f:09:88:0b:f1:10:0a:f6:d2:ab:72:e0:f5:
5d:78:27:50:ae:f6:06:72:98:ff:9d:e4:aa:a7:ff:27:08:e5:
ec:d9:49:ae:0a:6e:d1:6d:ad:20:4b:3e:8a:93:5c:8f:14:22:
b1:97:5d:44:63:8a:01:26:c9:c7:95:6a:fd:89:3e:24:14:23:
c6:55:1d:46:67:04:90:6e:d0:27:c1:3e:c0:63:05:f6:54:1e:
6b:4e:78:db:47:0d:96:72:8e:c1:03:de:bd:70:52:87:76:f9:
2d:a8:f8:b8:1c:44:b1:a3:d8:d0:1b:47:74:36:46:0d:38:01:
b4:ee:b4:f4:11:8d:cd:e0:66:c4:95:8b:6c:0e:93:c3:d2:42:
e4:22:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org