Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DmsBt2pkg6tW2FjigPTOXF3wHag.roa
File: DmsBt2pkg6tW2FjigPTOXF3wHag.roa (raw, json)
Hash identifier: rta682Soucek3wsVqXrdsOzzxNekR7XKJTugaCMuuMk=
Subject key identifier: 0E:6B:01:B7:6A:64:83:AB:56:D8:58:E2:80:F4:CE:5C:5D:F0:1D:A8
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0182C88EC4497C14BED68F378B9EF1B8D5FA
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DmsBt2pkg6tW2FjigPTOXF3wHag.roa
Signing time: Tue 23 Aug 2022 02:36:15 +0000
ROA not before: Tue 23 Aug 2022 02:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 45.153.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c8:8e:c4:49:7c:14:be:d6:8f:37:8b:9e:f1:b8:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Aug 23 02:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e6b01b76a6483ab56d858e280f4ce5c5df01da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:9d:35:6d:4a:b9:5f:64:b5:fb:0f:02:3e:
a8:be:b2:54:1f:43:a3:52:ee:8c:27:fc:6d:71:dd:
2b:11:47:e1:b3:17:52:32:8f:96:f9:7a:67:14:02:
4a:b8:e4:22:bf:42:49:85:8f:0f:15:c1:bd:dd:eb:
da:c8:1a:52:56:0d:6d:9a:2f:1d:f4:8e:43:c6:10:
ef:69:42:8e:d9:5c:e7:98:0a:e9:b2:1a:39:e2:c3:
a8:62:62:ab:bb:48:df:a5:2a:fc:d1:fc:80:c9:72:
b7:12:ee:01:b3:c7:c3:30:67:1f:68:a6:c1:06:91:
01:0f:d0:a2:e5:c1:69:5e:9b:7d:44:68:0d:21:33:
04:7c:a1:eb:f6:35:fb:ba:1b:8f:43:f0:f0:bb:0d:
e7:c8:67:f3:26:cf:32:97:08:05:70:f6:be:cb:9e:
9b:c5:58:f8:1e:15:9e:cc:1c:9e:42:8b:50:e0:9a:
f4:0f:12:b6:c9:94:24:84:b2:a4:0f:28:3d:29:4b:
7b:03:e3:b7:a6:4d:86:27:05:f1:f8:47:94:83:94:
a3:74:76:61:3e:10:59:fd:0d:ae:ce:bc:fd:f1:d4:
f7:69:35:aa:4f:af:96:96:bc:b4:24:ea:c5:15:19:
16:ed:fc:d3:2a:8f:26:3d:39:f1:77:9f:51:ec:40:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:01:B7:6A:64:83:AB:56:D8:58:E2:80:F4:CE:5C:5D:F0:1D:A8
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DmsBt2pkg6tW2FjigPTOXF3wHag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.125.0/24
Signature Algorithm: sha256WithRSAEncryption
73:86:03:80:9a:ed:28:ad:ed:86:1c:e3:18:c9:af:f2:97:f3:
db:3a:bf:c4:b3:6b:e3:37:b0:32:21:1a:ad:35:58:12:98:a6:
74:0e:72:8a:66:e2:ff:42:5e:b7:ca:78:1e:99:98:8b:07:c2:
42:b4:c3:38:56:16:87:ab:88:5e:30:86:dd:b8:dd:b0:9a:f8:
0f:9c:1c:6c:1b:d1:cf:d5:c4:7d:36:e0:a4:4e:6c:a3:fa:6d:
43:39:b9:c2:91:5f:0f:32:9b:b4:b9:04:99:14:29:7d:de:2e:
ee:6d:cc:b5:aa:9d:83:7d:c1:22:f9:95:c9:d3:f4:0c:dc:80:
c9:e7:d6:81:2a:8e:c4:09:45:5a:bb:37:05:46:27:9f:2a:59:
b4:07:d4:a7:6d:37:31:c3:7e:5c:7b:2a:81:b5:f8:9e:de:b7:
af:b0:d5:17:c0:c9:d4:86:35:13:4c:5a:15:67:15:54:e6:ca:
a9:18:dc:52:c3:be:e9:d1:82:e8:72:b7:cb:ca:60:63:99:83:
e5:5a:3b:6e:3c:a6:ee:ad:02:e6:5f:70:66:6b:47:49:28:64:
82:fe:4e:69:14:b1:dd:e0:b4:72:96:99:31:16:b8:0d:6c:bb:
3f:13:22:65:01:f6:f4:50:c1:75:61:54:a4:44:5b:3e:44:8c:
7a:0e:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org