Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dwoJjT3bmVsvWbyFO2pUIIOHZYU.roa
File: dwoJjT3bmVsvWbyFO2pUIIOHZYU.roa (raw, json)
Hash identifier: QpZzPWI0Y4mwu862COsW+8tbBkdlxeEShLSa61GzeZY=
Subject key identifier: 77:0A:09:8D:3D:DB:99:5B:2F:59:BC:85:3B:6A:54:20:83:87:65:85
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 018437FF51B2B05BFD8536301B549B238C4B
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dwoJjT3bmVsvWbyFO2pUIIOHZYU.roa
Signing time: Wed 02 Nov 2022 10:59:50 +0000
ROA not before: Wed 02 Nov 2022 10:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12552
IP address blocks: 45.92.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:ff:51:b2:b0:5b:fd:85:36:30:1b:54:9b:23:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Nov 2 10:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770a098d3ddb995b2f59bc853b6a542083876585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:5c:a0:9c:53:a7:01:8f:15:d6:3a:1d:f6:
20:e0:5b:eb:6e:9f:37:a6:9f:d1:17:e1:25:4c:2c:
5a:20:10:7f:af:05:f2:85:08:6b:31:d3:44:6a:06:
a1:9e:26:cc:f6:f8:fc:f2:71:0f:d5:09:8a:69:48:
e2:78:32:9e:8a:8a:f1:d1:da:16:2f:8d:c5:53:39:
37:d4:81:59:e4:55:d9:bb:1e:df:00:ca:39:98:7f:
a8:ec:67:4c:f3:71:65:c5:b2:fd:ae:02:0a:21:cc:
da:91:86:c7:49:9d:56:09:31:5e:d3:81:78:49:a9:
22:0d:a3:33:bf:e5:54:3c:d7:76:eb:30:1a:89:d0:
de:8b:0a:94:75:b4:45:43:9a:ad:43:f8:e4:53:1e:
8b:33:76:bf:f2:24:4f:05:7e:5b:1c:1f:41:c6:29:
7d:9d:df:5a:c9:f7:9e:6f:7d:57:00:ca:57:44:7a:
8f:f4:34:a4:01:23:b5:e2:6a:78:eb:05:a2:36:7a:
67:1f:13:43:b7:bc:60:55:bc:3d:31:15:99:6e:7e:
e1:05:63:09:c2:ad:50:cc:b6:88:17:7b:51:53:bd:
80:ef:b6:55:55:72:36:db:60:76:d7:a1:86:89:61:
e9:ea:87:4a:4c:eb:35:8f:ec:b3:03:48:d7:8a:5b:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:09:8D:3D:DB:99:5B:2F:59:BC:85:3B:6A:54:20:83:87:65:85
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dwoJjT3bmVsvWbyFO2pUIIOHZYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1c:a6:bb:0c:dc:8f:1a:42:30:5c:36:b5:db:f6:f3:6f:8e:
31:80:c1:a8:8e:5f:77:30:bf:4f:5a:6d:ef:88:6c:d5:3c:b0:
01:00:bb:26:ab:5e:b3:e1:c4:8e:de:96:0b:26:fe:d1:01:f3:
c4:48:96:32:71:9d:af:f0:9a:81:98:3d:8a:c7:d5:1b:39:1e:
db:51:95:2d:a5:94:62:65:e8:9f:fb:78:6a:2d:77:8a:0f:f8:
4d:36:af:24:b2:67:f6:54:42:da:1e:ae:e6:36:b6:51:ad:5a:
c6:ae:e6:54:ba:70:1b:cc:ef:55:56:55:ce:58:41:05:ad:89:
9a:20:ef:ca:e0:a0:be:7d:fb:e1:cc:0c:c2:e9:69:18:a5:25:
45:76:98:8b:1d:51:26:9e:63:2f:0a:ed:55:81:96:b5:51:af:
f1:33:ae:6d:16:e2:33:03:1e:50:43:3d:51:70:f5:93:27:6e:
98:83:fa:0d:a9:22:b6:0a:9d:af:a2:f5:a1:d9:66:05:70:3d:
2e:e4:eb:42:79:54:8c:b6:04:0c:99:14:30:d5:ed:5b:a0:f5:
e6:0d:67:74:a8:a4:ba:30:98:7e:36:d4:6b:dc:dd:b4:04:64:
60:1a:fe:75:0c:2e:fe:6c:5a:84:b2:21:73:92:42:76:dc:6a:
d9:e4:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org