Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LY3LdDIHElOU75dkLci28RqEPRk.roa
File: LY3LdDIHElOU75dkLci28RqEPRk.roa (raw, json)
Hash identifier: Z83pwLEHkN1b6yr5hitNwi73tTB49+4AR1Ebl3zVUj0=
Subject key identifier: 2D:8D:CB:74:32:07:12:53:94:EF:97:64:2D:C8:B6:F1:1A:84:3D:19
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 031C3D82
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LY3LdDIHElOU75dkLci28RqEPRk.roa
Signing time: Sat 01 Jan 2022 13:59:21 +0000
ROA not before: Sat 01 Jan 2022 13:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 45.153.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52182402 (0x31c3d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d8dcb743207125394ef97642dc8b6f11a843d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:64:3a:e1:75:fc:01:22:16:4c:57:e4:a0:
39:34:26:1b:7b:16:0b:82:00:5d:8e:0b:31:99:47:
84:3c:2f:12:23:d2:e1:4f:ac:65:9a:52:d9:12:6b:
86:ac:1c:bb:c0:c2:75:3c:2f:96:be:d4:73:b4:dc:
d7:1d:c5:d4:70:fd:76:63:74:1c:ec:a8:8a:39:a8:
d8:02:e1:49:a9:ab:c1:8d:0f:9d:48:5d:3b:1b:29:
92:01:64:4f:8c:20:a4:d5:38:84:22:8b:86:e9:62:
24:a5:db:49:6b:b3:12:ac:9e:29:b7:ec:19:60:36:
c6:ab:07:00:0d:6d:bb:cf:be:ad:af:69:f7:5e:b5:
16:ea:ec:2d:fb:4a:dc:b3:b4:57:55:50:8e:38:91:
7d:e8:7f:47:08:3c:fd:ae:8d:69:43:33:8c:4c:14:
67:b7:7c:75:3d:c0:a7:9f:8b:28:65:66:a6:4d:1d:
eb:9b:56:4f:4e:56:c6:1d:b8:a9:08:2a:5e:b9:da:
93:eb:1c:fd:d8:23:33:3d:a9:87:2e:84:40:fa:b6:
4a:be:15:05:06:72:dd:f0:97:1c:e8:3e:68:2d:98:
87:41:7c:4f:11:17:7b:f2:c0:eb:cc:be:7b:f1:28:
65:c8:f3:dd:75:dd:eb:bb:e8:c4:7a:13:95:4c:8c:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8D:CB:74:32:07:12:53:94:EF:97:64:2D:C8:B6:F1:1A:84:3D:19
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LY3LdDIHElOU75dkLci28RqEPRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:39:fe:13:e5:04:cd:41:7a:dc:14:6b:7e:b8:11:e9:d3:a0:
7f:c7:cf:40:64:be:83:98:6a:38:23:eb:b4:ff:6a:3f:1a:74:
19:30:eb:86:d7:96:7a:6d:12:92:26:4b:6a:7b:6e:6f:29:c8:
00:c7:10:1f:6b:b8:83:59:84:da:0e:37:2b:74:e6:cf:e6:77:
ad:3e:80:d1:a6:2b:dd:75:e5:29:9a:d6:0a:24:e4:01:5d:81:
92:29:5e:00:de:0f:42:cf:55:0f:e1:54:5a:d6:c5:62:42:69:
3f:bb:62:06:bf:ea:87:a4:3c:5d:bf:54:0b:ca:14:79:ac:ac:
d2:d5:7d:9b:7e:a2:f2:0a:62:96:af:fc:31:dc:80:a4:81:f1:
a7:27:6f:78:3d:c7:2a:3e:07:9e:90:48:2f:9c:6f:51:89:0f:
60:54:82:89:4c:85:6d:57:88:67:3e:0a:cc:0e:a3:9b:2f:03:
2e:51:ca:e9:a1:4c:04:20:1d:73:63:15:7a:b4:21:6f:56:e5:
a0:3a:53:ef:74:11:69:fe:07:13:1e:74:1a:2b:3d:5f:15:5c:
56:74:57:b4:d5:73:24:12:1d:71:a3:8a:2d:64:81:a4:5b:d9:
38:e6:94:e5:92:78:b4:02:44:4a:23:05:a7:6f:b0:15:97:08:
d1:77:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org