Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xVGdmNZrOHp3XNYu7VtELuiqh6g.roa
File: xVGdmNZrOHp3XNYu7VtELuiqh6g.roa (raw, json)
Hash identifier: xN76rWwCFKl44mSHORcv2h42TzeW6vadTo8jttZ8/Sg=
Subject key identifier: C5:51:9D:98:D6:6B:38:7A:77:5C:D6:2E:ED:5B:44:2E:E8:AA:87:A8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0182D09E5D7299BFB1F68919AA27B8562ED6
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xVGdmNZrOHp3XNYu7VtELuiqh6g.roa
Signing time: Wed 24 Aug 2022 16:10:15 +0000
ROA not before: Wed 24 Aug 2022 16:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 45.150.67.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.146.0/24 maxlen: 32
185.234.247.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:9e:5d:72:99:bf:b1:f6:89:19:aa:27:b8:56:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 24 16:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5519d98d66b387a775cd62eed5b442ee8aa87a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:b5:cf:d5:c3:6c:44:31:c5:de:6f:8d:c1:
41:db:c6:48:f8:c9:b4:9d:a8:10:8d:fe:40:cd:47:
5f:c0:fb:69:3a:fa:8f:7b:91:ec:77:fb:7b:a3:bf:
e2:ba:cf:92:58:28:7b:4a:7e:8f:76:0d:5f:e8:a0:
58:07:aa:69:5a:6c:d5:96:eb:32:0a:4c:e1:54:f8:
dd:41:4f:ee:70:04:b0:a5:4d:de:7b:d7:c3:f1:e6:
a0:5c:4d:9d:eb:b2:2f:b9:5a:ac:3e:6e:da:a1:19:
86:ed:51:3f:5d:43:8c:bb:7b:bf:73:92:ba:f2:5c:
38:cb:e9:c9:3f:3e:c8:28:ae:1d:3f:e4:b7:94:3b:
06:d4:f6:bb:04:ff:25:06:73:83:cb:ac:82:49:41:
5a:fa:3e:cd:4f:1b:80:d7:92:f9:c8:19:10:fa:ee:
3a:ca:b9:61:12:70:98:6e:6a:65:a7:48:f2:fe:9d:
5f:be:f4:e6:aa:fa:2c:78:36:9d:04:3a:15:98:95:
be:70:36:13:73:78:8f:31:b3:19:db:28:7a:cb:2b:
48:df:1c:20:dc:6c:47:d3:30:64:c2:8b:17:27:78:
b5:2a:8f:ca:97:d0:c7:6e:b9:f1:30:49:16:58:38:
1b:77:1c:27:00:65:d4:72:b2:21:88:f6:4c:fb:4a:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:9D:98:D6:6B:38:7A:77:5C:D6:2E:ED:5B:44:2E:E8:AA:87:A8
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xVGdmNZrOHp3XNYu7VtELuiqh6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.146.0/23
45.144.29.0/24
45.150.67.0/24
185.234.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:85:63:ed:09:86:f5:a4:89:7b:5e:36:2f:52:14:c5:a8:e6:
dd:23:10:e9:c1:f7:e5:ac:95:14:92:ff:1c:07:5e:7e:55:5c:
d4:6f:a0:82:d6:76:d7:63:7a:ec:dd:2f:bd:8e:bc:66:dc:db:
52:10:27:20:c7:61:64:72:b5:12:97:c7:e9:25:51:63:6a:66:
01:dd:dd:b5:34:11:d4:9d:f1:e8:28:e6:e8:c2:0d:61:fc:28:
86:6d:6b:50:c3:13:71:3c:c0:c0:3a:02:a1:29:89:70:83:fe:
81:8b:89:47:59:c7:7c:0d:19:39:62:05:d8:0c:0d:a4:14:58:
cc:ee:e9:62:f3:57:d0:6c:af:6e:91:80:92:17:ed:fd:b7:fd:
b6:21:53:fc:a4:20:b8:99:11:29:b4:80:0c:84:6a:b9:61:ab:
7b:59:12:bf:a7:8b:d8:99:ca:7d:50:ab:7c:c6:08:66:38:7b:
0e:57:01:37:26:c1:c9:55:bf:26:77:69:67:0e:33:e2:6f:2a:
d2:9f:d9:2b:85:0f:69:92:5d:1c:86:38:17:0e:e7:13:76:03:
44:e4:8c:5c:98:ab:db:9a:83:31:e8:95:16:d5:33:3a:26:40:
42:27:62:2f:b8:a0:94:f1:c8:88:7f:3d:79:f3:8f:8a:6b:dc:
4d:b0:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org