Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Z8m2TOTR9wFmluTYuMdcmLaCO6E.roa
File: Z8m2TOTR9wFmluTYuMdcmLaCO6E.roa (raw, json)
Hash identifier: MC01NSrMfykUTzz8DSE8Cix2EtzZUX+3XKtaaaudxWE=
Subject key identifier: 67:C9:B6:4C:E4:D1:F7:01:66:96:E4:D8:B8:C7:5C:98:B6:82:3B:A1
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 031AA81E
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Z8m2TOTR9wFmluTYuMdcmLaCO6E.roa
Signing time: Sat 01 Jan 2022 13:59:21 +0000
ROA not before: Sat 01 Jan 2022 13:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139659
IP address blocks: 45.136.12.0/22 maxlen: 24
45.144.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52078622 (0x31aa81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67c9b64ce4d1f7016696e4d8b8c75c98b6823ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:6e:42:24:de:61:4e:30:5b:01:c9:91:4b:
7f:9b:72:ed:16:30:be:d3:e4:60:56:be:fc:6c:d2:
00:a7:f9:f8:93:39:4e:80:19:ff:28:2b:98:a1:5e:
42:01:c6:04:e1:9f:e6:20:3e:c6:8c:20:ca:9a:89:
62:e6:e0:3c:d7:6a:da:d3:1a:17:72:11:a0:a2:b6:
f1:5d:c2:b6:d5:fb:b1:14:a5:23:5a:27:30:c3:93:
06:53:e3:9c:82:bd:1e:d5:70:3b:58:c0:48:dd:c5:
b1:d7:7a:3b:2c:e0:62:79:a4:ef:0f:d6:8e:fd:02:
d6:29:43:ea:80:f5:5f:c1:f4:4e:d9:93:46:08:cc:
5c:ce:55:eb:eb:9a:24:5a:ae:85:3b:76:c5:5f:55:
af:bc:d3:0f:48:89:41:39:6b:e3:d3:4a:b3:75:52:
f8:4d:cb:dc:7c:ab:5d:c4:0d:47:0f:0d:f5:c6:5f:
4d:e2:43:f0:2e:af:9f:4d:a2:24:f6:c9:cb:00:64:
b1:6c:22:73:4a:3c:6e:7b:8d:53:fc:1b:70:56:f9:
11:77:36:d7:66:21:2f:b4:0c:51:3b:32:28:05:13:
00:99:3e:b4:e3:c4:2f:ba:58:66:e6:32:e0:4b:e7:
53:8d:b6:9a:7d:5b:68:3a:92:90:fb:ca:90:27:c7:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C9:B6:4C:E4:D1:F7:01:66:96:E4:D8:B8:C7:5C:98:B6:82:3B:A1
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/Z8m2TOTR9wFmluTYuMdcmLaCO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.12.0/22
45.144.136.0/22
Signature Algorithm: sha256WithRSAEncryption
33:97:11:52:c1:d5:54:c3:5a:c5:80:55:e0:d4:ea:30:3a:f9:
f9:98:85:50:df:b0:98:b4:f0:be:3c:85:ab:18:5b:da:cd:3c:
53:50:5d:02:b5:ca:12:09:f8:f6:85:5f:59:0b:09:49:68:7d:
4f:7f:9a:fb:46:7d:24:dd:d2:65:8d:7b:f1:ab:97:a4:41:87:
78:de:00:40:b4:75:b6:69:f4:08:7c:57:b1:38:d4:c2:cd:07:
d9:5c:39:0d:bb:b7:64:ea:e6:06:fe:00:1c:59:dd:81:96:f1:
ae:16:fd:3c:a2:d3:cc:43:87:63:03:5a:9f:0e:53:8c:1b:dc:
8a:df:f1:a0:0f:f0:ae:45:5d:b8:fb:5b:28:f2:77:f3:ae:1f:
63:5d:7e:19:b0:6d:0d:87:ad:16:b4:ca:ea:81:b5:6f:b1:f8:
d6:71:7f:cd:75:84:88:30:ae:f3:3d:64:7c:b9:a5:08:37:eb:
d4:78:6e:9f:bd:2d:c5:25:7b:25:33:0b:48:2b:b5:98:05:3c:
fc:48:c2:d4:67:34:78:9e:c1:3b:55:88:d8:3c:4f:b5:08:18:
74:76:e8:18:91:d7:22:23:8a:56:18:bc:3f:3f:87:7f:21:1d:
a4:53:bc:d0:3d:f4:db:00:3f:14:fc:08:92:08:31:c4:ed:72:
c7:98:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org