Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rgOLo1UcqV1ATVblYHNDH8Heqwg.roa
File: rgOLo1UcqV1ATVblYHNDH8Heqwg.roa (raw, json)
Hash identifier: 3YD1EUQzI9dTdNfgTCKh9LeHlrmW/iGJjOFvgQCEiPg=
Subject key identifier: AE:03:8B:A3:55:1C:A9:5D:40:4D:56:E5:60:73:43:1F:C1:DE:AB:08
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018322EF7AB19A406A51224CDA67348D8A1E
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rgOLo1UcqV1ATVblYHNDH8Heqwg.roa
Signing time: Fri 09 Sep 2022 15:47:43 +0000
ROA not before: Fri 09 Sep 2022 15:47:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.150.174.0/23 maxlen: 24
45.139.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:ef:7a:b1:9a:40:6a:51:22:4c:da:67:34:8d:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 9 15:47:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae038ba3551ca95d404d56e56073431fc1deab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:a7:42:b2:1d:7d:75:65:0f:9c:1a:90:42:
74:20:99:01:31:c6:41:24:91:87:0f:5e:3c:45:04:
1d:d6:f9:84:6a:2c:ad:9c:11:ff:3a:5c:13:21:a4:
f0:81:bf:bf:b2:0d:59:5c:3f:23:fa:2b:23:1d:aa:
51:7b:3f:34:78:73:8f:7c:25:21:0e:2c:b3:e7:e2:
78:bc:2a:36:f0:33:c7:2c:c9:67:fe:4f:37:88:2e:
85:6a:88:85:ce:3f:90:8d:37:f2:ee:a2:92:98:07:
07:9c:24:db:0f:5d:12:44:28:19:b4:56:f1:9c:bc:
90:91:4c:3d:77:2f:1a:d2:a9:e5:48:fd:fd:03:49:
dd:10:11:4f:b0:ef:25:ed:f5:d0:bc:5e:3e:4e:d4:
44:ce:90:de:ea:2a:de:42:de:5f:51:cf:c9:f1:7c:
6d:ff:ca:50:5e:b8:f8:4a:cc:77:01:78:91:53:ca:
ea:1e:63:a8:cb:89:52:51:3e:b5:f4:3a:f1:83:b3:
8d:0e:9e:c1:16:74:82:b3:89:42:42:92:13:27:d6:
c6:52:4f:61:8b:7a:f3:7d:a4:c6:92:3b:1b:6e:2e:
b7:a2:12:b8:47:17:2e:cc:53:17:57:e0:b5:62:c2:
4b:59:bd:a7:a0:a3:02:ba:67:8a:da:18:31:d9:4b:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:8B:A3:55:1C:A9:5D:40:4D:56:E5:60:73:43:1F:C1:DE:AB:08
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rgOLo1UcqV1ATVblYHNDH8Heqwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:79:a1:3c:6c:77:1e:d2:65:ce:50:2b:85:a7:99:d2:95:fb:
ac:f2:d6:be:f6:f0:aa:24:84:59:4a:f3:1d:83:bc:74:2a:f8:
9c:39:fd:1e:55:a8:64:e9:7f:1f:40:19:fe:d2:0a:1d:f1:af:
84:c0:3c:85:9a:6c:d3:e6:a3:c9:23:00:4a:81:9a:99:2e:dc:
8e:fc:54:04:22:fc:7c:d0:66:e6:9b:31:a7:ff:b2:8a:24:3d:
b1:3a:c1:30:74:9e:2b:10:97:ea:5a:7c:94:05:55:a3:0a:ee:
b1:96:d7:62:00:5d:63:94:45:38:c1:ef:f8:69:ae:26:9e:38:
a4:8c:30:4b:a0:9b:27:a0:e9:2f:48:08:51:52:bd:5c:2d:1f:
0e:e5:4c:ac:58:63:51:af:de:5d:c6:76:9d:9c:1b:a7:e3:71:
ba:9b:d5:8e:d5:03:c7:17:14:d9:b3:ef:c2:d0:b5:d8:ef:41:
19:9b:72:f9:76:b9:9b:57:08:7f:e0:f2:50:a0:c2:9d:a0:db:
9d:79:ea:dc:72:93:ce:ad:81:58:b5:ca:cc:cd:a1:ca:ea:71:
52:f7:d8:68:a2:06:2e:6e:1e:10:e2:a1:73:dd:f8:2b:37:07:
31:ea:55:01:38:62:b9:01:2f:41:0c:37:68:f4:a1:3f:f1:b2:
00:9f:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org