Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/719-inuF8nRRqswhBSW5rZYtla0.roa
File: 719-inuF8nRRqswhBSW5rZYtla0.roa (raw, json)
Hash identifier: iNKZZ2I4xFKpCyLkjjFeRKlJk66dBg3QBlczhXXerIk=
Subject key identifier: EF:5F:7E:8A:7B:85:F2:74:51:AA:CC:21:05:25:B9:AD:96:2D:95:AD
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01834C782B11134C03B3E0EBB12FC7259148
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/719-inuF8nRRqswhBSW5rZYtla0.roa
Signing time: Sat 17 Sep 2022 17:21:27 +0000
ROA not before: Sat 17 Sep 2022 17:21:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.150.174.0/23 maxlen: 23
45.139.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4c:78:2b:11:13:4c:03:b3:e0:eb:b1:2f:c7:25:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 17 17:21:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5f7e8a7b85f27451aacc210525b9ad962d95ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:b8:60:e3:6d:71:14:01:94:0f:19:8a:1b:
76:ce:23:7f:08:bb:77:3d:2a:d4:02:f1:fb:3f:82:
fa:ed:e1:da:13:69:3c:51:6b:ba:eb:b4:36:4c:54:
62:7b:54:02:16:d0:a3:4e:60:78:8f:97:1e:99:c3:
76:a1:af:db:f5:9f:9d:69:0e:e2:bf:29:b7:6d:56:
83:1b:1c:67:87:06:2c:b9:20:8c:c0:9a:42:62:e9:
03:7e:57:1e:63:4a:fe:4b:78:ec:0a:4f:2c:2c:78:
cf:2a:a5:05:a3:80:91:b6:38:ce:ab:eb:48:f1:96:
60:be:7c:89:0e:dc:8b:a2:2f:26:e3:8f:4c:52:6a:
50:98:33:39:8f:da:7d:69:26:97:c2:8c:41:26:c6:
30:e2:8c:92:0c:37:43:d8:27:4d:60:fd:f1:f5:05:
7e:37:24:17:33:05:de:59:9f:db:d0:b5:80:ef:0b:
7f:34:90:17:d6:59:97:9f:e8:4c:45:77:a2:9c:02:
a2:d0:75:ba:06:30:3c:94:73:bf:63:eb:a6:bb:7e:
70:68:f6:b0:c1:11:99:b9:65:da:7f:85:c0:b6:c1:
80:5f:0b:a3:93:fa:d5:04:eb:cb:d5:56:3b:a9:f1:
47:84:52:08:46:06:86:af:a2:ee:f8:05:85:fa:18:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:7E:8A:7B:85:F2:74:51:AA:CC:21:05:25:B9:AD:96:2D:95:AD
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/719-inuF8nRRqswhBSW5rZYtla0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/23
Signature Algorithm: sha256WithRSAEncryption
22:63:99:56:f2:05:eb:37:cc:ec:4c:b0:57:3b:f6:92:ca:e8:
dc:fe:e6:6a:4d:89:c6:b3:d8:4c:98:6e:69:7b:ae:76:60:4f:
18:8e:36:e5:d4:81:ac:53:14:f8:ad:d9:72:35:28:b8:51:a8:
2f:a2:5a:33:10:e3:b6:ea:61:12:95:ce:fb:d3:0e:43:fd:f4:
8c:82:19:31:04:de:cf:8e:6c:24:c2:19:87:49:92:b7:2c:6c:
01:7d:49:ee:33:9c:d0:15:b5:88:c1:3d:f1:92:28:a9:8b:98:
44:c8:bd:b7:0a:df:c0:7e:fd:9f:e6:ce:f8:13:a9:ab:3a:90:
7e:d5:56:fc:13:fd:35:62:16:a7:2b:6b:1a:c3:27:6c:49:7b:
9c:50:50:6e:86:f3:c1:5e:14:9d:fc:81:a1:89:41:b2:10:19:
27:3f:b8:66:9e:48:07:28:75:4c:47:ee:b0:7a:27:53:f6:69:
71:33:35:33:36:16:cf:d5:52:a7:bf:a6:6f:68:9a:fd:41:b8:
ee:97:8a:d7:fe:e8:95:87:ab:b6:19:6b:9d:61:e0:63:1e:42:
1a:98:96:94:ba:35:f1:69:79:3b:17:e7:93:8f:9c:7e:f4:b5:
bf:5e:31:7b:ca:2f:a9:3f:11:7c:1d:fc:c6:71:0d:23:d0:3e:
5f:d6:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org