Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa
File: eJcqL8IjO_aGTaFGP5HXfXluCbI.roa (raw, json)
Hash identifier: han7L/Ctcc6NJmUi3cUEa/aXLJX/X7QxDPxSao17S4I=
Subject key identifier: 78:97:2A:2F:C2:23:3B:F6:86:4D:A1:46:3F:91:D7:7D:79:6E:09:B2
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 080C2A65
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa
Signing time: Sat 01 Jan 2022 04:01:52 +0000
ROA not before: Sat 01 Jan 2022 04:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202837
IP address blocks: 45.92.15.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
45.92.13.0/24 maxlen: 24
45.92.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135015013 (0x80c2a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 1 04:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78972a2fc2233bf6864da1463f91d77d796e09b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:be:c1:0f:84:67:c1:b4:60:a5:be:e6:8d:
d0:35:b2:a3:74:23:d8:4d:dd:69:90:7e:ea:44:e1:
d8:27:5d:45:a0:06:88:a5:5c:29:88:1e:ab:97:fe:
bd:db:96:d3:3d:49:80:16:66:6f:6d:f2:8d:f0:3a:
8e:b3:07:4a:f7:0a:ba:b2:28:b7:7a:ef:fe:0e:f2:
e2:10:29:a2:80:a0:6a:06:c6:8c:55:e6:f1:b0:c2:
71:e0:e0:69:14:30:1e:9d:2f:45:db:c3:8f:ab:e5:
2f:08:27:c3:8b:4f:1b:1e:e0:4b:87:ec:80:bf:b8:
4e:ba:86:70:e0:80:4d:a5:d3:ae:13:87:ff:d0:ca:
40:d8:95:c5:97:10:08:a9:71:d7:e8:d2:45:15:26:
55:ae:1f:6f:50:a5:0d:26:9c:e1:33:b7:da:91:99:
00:48:ec:99:e1:84:56:ec:f7:c6:93:30:a5:5f:c7:
4c:a2:5b:e2:08:a9:2b:d9:6d:c2:97:c2:90:ca:6a:
93:75:f8:79:24:53:80:c6:f1:3a:24:7d:3d:54:33:
30:a9:5b:4b:06:73:c7:ab:f8:d2:07:b1:dd:c4:4f:
80:7e:e3:95:01:1c:77:de:9a:d2:8e:79:54:fb:e1:
83:84:0c:ee:f9:a2:15:1f:90:55:6c:b3:88:af:cf:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:97:2A:2F:C2:23:3B:F6:86:4D:A1:46:3F:91:D7:7D:79:6E:09:B2
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eJcqL8IjO_aGTaFGP5HXfXluCbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:d7:32:15:fe:a4:d7:99:b5:27:37:98:b4:2e:71:37:03:fb:
d2:ff:cd:c7:22:20:ae:9c:e9:87:ac:09:fd:c2:bf:82:9c:b9:
d8:0b:46:e4:8b:e3:24:b4:fe:df:e7:2b:ae:0b:a1:a4:fd:be:
e3:c7:69:8f:ee:f6:84:c1:0a:43:00:90:49:ff:b3:34:18:eb:
26:16:a3:61:16:3c:8c:10:30:3a:1a:e1:13:ad:bf:f1:dc:01:
87:cb:f4:25:1c:ad:df:df:ec:4c:e2:65:4b:f6:bd:9e:18:d1:
72:2c:3e:8d:c2:a6:38:6a:b5:2d:14:05:0e:f2:f1:24:02:cf:
13:41:b0:3f:14:ad:ad:1e:48:b5:03:b3:e2:0f:58:08:c9:33:
31:ce:c2:b9:7b:f4:16:ae:8e:7d:6c:50:23:da:ad:62:4b:67:
3b:c6:36:a5:7c:89:67:38:b1:8c:27:3b:22:45:ae:46:31:08:
fc:f7:da:65:b9:76:88:02:30:e6:6e:5b:8a:5b:01:0f:9e:6c:
ad:ef:08:1e:fc:06:9f:19:87:7c:40:35:57:c1:91:6a:07:ce:
3d:ab:56:10:01:9f:0f:d3:d9:2c:55:98:f5:79:83:8d:e3:fe:
83:01:18:c4:d2:49:bc:f5:f0:40:d6:59:36:7e:7a:65:13:8b:
af:ac:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:29 2023 by rpki-client on console-fra.rpki-client.org