Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/_G6-D-8LvSzjrd55q9Hmznf9iWA.roa
File: _G6-D-8LvSzjrd55q9Hmznf9iWA.roa (raw, json)
Hash identifier: ZJvF0IDEv+Vq2oNY4Y9o47S2GEvAqeEFjki0enPqOuY=
Subject key identifier: FC:6E:BE:0F:EF:0B:BD:2C:E3:AD:DE:79:AB:D1:E6:CE:77:FD:89:60
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 079E52F7
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/_G6-D-8LvSzjrd55q9Hmznf9iWA.roa
Signing time: Sat 01 Jan 2022 02:54:52 +0000
ROA not before: Sat 01 Jan 2022 02:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208366
IP address blocks: 45.142.220.0/22 maxlen: 22
45.142.221.0/24 maxlen: 24
45.142.223.0/24 maxlen: 24
45.142.220.0/24 maxlen: 24
45.142.222.0/24 maxlen: 24
2a0e:dbc0::/48 maxlen: 48
2a0e:dbc0:3::/48 maxlen: 48
2a0e:dbc0:1::/48 maxlen: 48
2a0e:dbc0::/29 maxlen: 29
2a0e:dbc0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127816439 (0x79e52f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jan 1 02:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc6ebe0fef0bbd2ce3adde79abd1e6ce77fd8960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:68:c8:6e:3f:0a:78:6e:70:43:2d:4f:7e:
e5:b3:6c:b7:dc:f7:4d:0d:18:a0:2e:f4:48:1c:15:
29:ab:6d:ba:eb:cb:83:33:dd:6e:b4:39:e4:62:16:
be:c5:3e:c0:5d:45:35:a6:dc:4c:1d:4e:83:69:93:
64:90:37:15:95:90:e9:84:a1:42:e2:90:ad:ba:20:
cb:8a:29:ef:c3:73:6f:0d:d8:5a:22:3c:3d:05:b6:
97:28:d3:5f:53:03:a4:37:5b:34:de:17:a5:72:01:
a7:43:e9:ca:75:fd:58:ee:9a:94:d4:93:5b:d9:85:
08:ef:9a:cb:13:fd:a9:3a:c0:6d:07:e9:52:04:6d:
eb:e9:15:2c:be:96:54:92:48:b5:ed:e8:f9:2b:87:
0b:0e:aa:b8:ee:34:d6:01:03:c7:7b:ab:30:dc:9e:
7a:7d:e9:cf:09:6d:de:0f:66:62:96:92:5b:1a:26:
cb:87:b3:16:89:b4:14:f3:ed:aa:98:49:39:67:01:
bb:9e:1f:90:5d:6d:d8:82:6f:f2:48:59:9d:7c:3e:
a2:4d:64:43:bf:f4:89:b7:f7:f7:f3:e1:37:d3:6d:
76:bb:9c:4b:a6:ac:a5:f5:bd:67:b3:66:ef:89:8b:
42:73:7f:e6:c4:19:29:de:73:fb:c4:64:ad:a3:57:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:BE:0F:EF:0B:BD:2C:E3:AD:DE:79:AB:D1:E6:CE:77:FD:89:60
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/_G6-D-8LvSzjrd55q9Hmznf9iWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.220.0/22
IPv6:
2a0e:dbc0::/29
Signature Algorithm: sha256WithRSAEncryption
87:f7:53:b7:08:66:d8:4e:5f:a2:74:89:a3:0f:9a:9a:e1:f8:
78:a8:b5:a3:1e:b5:ea:07:a7:4b:ff:cb:d1:df:3f:b9:5f:23:
14:a2:ed:9f:2c:00:0e:19:b3:65:ef:9b:c2:ac:02:39:83:28:
8e:e4:2e:4b:e7:c2:0e:f7:26:64:38:81:e8:43:fb:a8:da:7d:
aa:12:b4:24:61:be:60:4b:93:cf:55:60:87:ba:a4:f9:7c:78:
11:f3:04:cb:36:30:82:b3:14:06:65:8c:e6:8c:8d:82:27:25:
59:89:db:63:b2:2d:19:99:31:af:17:24:7a:98:0e:51:af:a6:
6d:1e:43:68:2a:8e:ed:38:d0:d8:d4:74:30:a3:93:44:3c:ca:
8f:0c:31:c8:a1:84:2a:b8:52:e1:e0:bf:e6:85:4a:d7:f5:9b:
bc:0e:37:9c:07:18:42:96:b6:89:f6:2f:a8:d9:b1:e8:b6:03:
38:b6:3f:5c:8f:a1:7d:78:49:29:2c:b4:fe:5e:b7:17:4c:51:
88:ac:08:97:19:2e:09:17:ef:12:91:01:92:60:68:13:05:dd:
58:77:fd:15:88:05:7c:76:da:96:a7:41:0b:94:a7:8a:52:45:
e6:c7:05:6e:19:4b:8d:ad:4b:79:d5:84:4d:f1:2d:8a:72:12:
53:1a:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org