Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Amo2jFBidaXmzPfJLPib7sslEVU.roa
File: Amo2jFBidaXmzPfJLPib7sslEVU.roa (raw, json)
Hash identifier: 4pMamvIX0x3sDPRc08z5p6DkiUZ4piTItmxy0Mdu8VM=
Subject key identifier: 02:6A:36:8C:50:62:75:A5:E6:CC:F7:C9:2C:F8:9B:EE:CB:25:11:55
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 03188422
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Amo2jFBidaXmzPfJLPib7sslEVU.roa
Signing time: Sat 01 Jan 2022 13:59:19 +0000
ROA not before: Sat 01 Jan 2022 13:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.153.124.0/22 maxlen: 24
91.238.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51938338 (0x3188422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=026a368c506275a5e6ccf7c92cf89beecb251155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:3f:18:73:0a:8a:bb:4e:94:48:87:ce:e1:
2e:5d:15:a2:33:42:b6:24:5b:d2:12:b5:bf:18:a2:
11:7f:29:8d:e7:5b:b7:ca:55:da:58:8d:50:bf:22:
31:2e:3a:97:91:c3:11:c8:d4:1e:36:25:01:83:8c:
80:ab:b3:66:9c:b5:c6:ea:35:46:66:25:d9:a8:15:
b5:39:3e:2a:ed:35:e4:55:6a:5c:67:2d:33:90:b0:
3c:20:a8:b9:2b:aa:de:90:4d:ab:6a:29:4e:36:08:
3e:d4:8a:c6:31:75:f3:45:c8:8d:5c:82:5a:ec:58:
d3:e5:06:09:2b:0e:30:ab:c2:8f:b3:54:32:9f:2d:
79:62:06:b5:9b:82:68:f7:29:67:46:c0:b3:a8:c3:
7f:40:cb:82:24:74:62:79:9d:19:32:60:72:5e:f2:
ed:94:d0:3d:f1:02:20:cb:c6:c8:3a:df:47:16:ff:
fa:e9:f5:e9:e8:0a:33:5c:eb:eb:ec:32:0b:c3:59:
70:af:2a:0e:34:e5:1a:26:54:fa:17:32:92:b8:c5:
fb:12:77:3d:fc:2e:b4:d3:a5:d8:27:51:2b:e7:49:
f0:bd:d7:d1:40:de:91:aa:56:cb:b2:58:f3:0d:bd:
3d:59:4d:0c:0e:93:6b:e8:73:4f:78:3e:b4:3c:6e:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:36:8C:50:62:75:A5:E6:CC:F7:C9:2C:F8:9B:EE:CB:25:11:55
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Amo2jFBidaXmzPfJLPib7sslEVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/22
91.238.213.0/24
Signature Algorithm: sha256WithRSAEncryption
78:24:b7:8f:5e:ff:cd:ae:a8:73:cb:45:95:cc:74:dd:49:b8:
78:90:af:13:75:d5:7c:20:fe:49:fa:77:74:4a:ea:0b:b9:5f:
34:2c:d7:e3:05:37:b0:cc:54:65:60:c3:a3:3a:8f:fe:4d:67:
a2:8f:3f:f1:0e:41:c5:84:7e:ef:e0:2d:96:d6:88:37:5d:fe:
2a:cd:50:f0:ec:87:98:68:a2:01:5d:69:6e:cd:cf:72:d6:5b:
76:5e:09:f2:31:5c:2f:07:81:4d:31:95:bc:21:96:fc:5b:99:
41:04:47:d2:7f:45:35:63:2f:e7:56:68:26:21:8a:23:e4:ea:
50:71:f8:89:c6:50:10:98:fc:b1:a8:28:62:9b:9a:7f:c5:9b:
d5:aa:0d:47:e8:23:1c:eb:4c:93:97:df:68:8c:4f:db:67:49:
45:3c:82:29:ea:79:ef:3d:81:54:3c:2d:36:96:1e:90:63:50:
41:74:bb:74:3c:d8:24:8c:d9:e6:c8:c4:f9:fb:e8:2a:fd:ae:
c6:8a:b5:55:82:2d:8b:ed:10:fd:2f:34:c7:6b:0c:69:b9:7b:
b2:a8:c3:8e:34:f3:52:23:db:57:84:9d:12:5e:88:bc:c1:6f:
82:ac:66:fb:29:6f:c8:0d:60:d6:39:f7:a4:f6:69:57:e4:bf:
16:1d:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org