Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mM0Bgxz1oXBtWDKTIR7nbrudcgs.roa
File: mM0Bgxz1oXBtWDKTIR7nbrudcgs.roa (raw, json)
Hash identifier: pgWzDjFqh87HBmYadPGr5fS3RLKoZXTuORZGTLZ9Mzo=
Subject key identifier: 98:CD:01:83:1C:F5:A1:70:6D:58:32:93:21:1E:E7:6E:BB:9D:72:0B
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 015A1A0E
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mM0Bgxz1oXBtWDKTIR7nbrudcgs.roa
Signing time: Sat 01 Jan 2022 02:59:21 +0000
ROA not before: Sat 01 Jan 2022 02:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47969
IP address blocks: 45.95.112.0/24 maxlen: 24
45.158.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22682126 (0x15a1a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 02:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98cd01831cf5a1706d583293211ee76ebb9d720b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:9f:08:28:ba:85:06:20:89:e7:b4:f8:36:
3d:d5:89:9d:9e:db:1c:41:34:b2:90:54:23:72:5e:
cb:90:b7:a5:d7:4a:a3:19:6c:81:66:b7:49:0e:1e:
92:c9:3f:fa:55:35:fa:d6:49:fe:fd:81:a5:47:cf:
23:eb:04:3f:22:b2:1e:3e:4d:4f:2f:12:8d:54:f0:
f6:d1:23:86:e6:23:a9:5e:c9:f8:97:1d:85:77:87:
5a:54:dc:48:96:9e:64:e7:65:1f:eb:ad:10:34:70:
00:a4:69:ec:7b:b4:3b:34:de:ed:1d:29:ae:a4:ca:
00:70:fe:f6:89:67:90:74:63:f2:e6:a7:69:a5:d5:
fb:e6:94:47:69:c0:61:57:f4:64:cf:52:75:63:68:
c9:3a:62:30:3e:b0:77:05:0c:4b:eb:5b:36:25:d6:
78:81:a9:c6:24:1b:6c:5a:2c:74:81:9f:c0:41:57:
aa:e0:99:b1:9a:46:fa:8a:50:96:93:9f:ec:cb:30:
62:bd:a1:e1:e3:03:05:60:a8:07:dc:9b:fc:6c:14:
da:b2:1a:a8:2f:bc:3c:2c:eb:6b:3c:71:e1:52:c8:
f7:6c:14:dd:73:a1:fb:7a:5b:13:a4:5d:3e:b7:fa:
27:ba:71:d6:38:76:5e:4d:9b:dd:74:b3:06:5e:a1:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:01:83:1C:F5:A1:70:6D:58:32:93:21:1E:E7:6E:BB:9D:72:0B
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mM0Bgxz1oXBtWDKTIR7nbrudcgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.112.0/24
45.158.78.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:13:fb:e0:5b:a5:9e:20:c4:95:1e:5a:a2:8b:6a:72:63:fb:
d9:ec:a7:8f:1e:1d:a1:46:64:fa:b4:97:18:cb:43:a7:1d:89:
18:9c:e8:a6:0f:5e:c0:18:5c:9d:19:83:72:60:d0:bf:16:ec:
14:1f:06:85:23:cc:36:50:84:40:2f:b7:32:5a:a4:cf:04:99:
96:2b:43:9c:b4:a1:d5:39:bf:80:bd:30:b5:c4:7b:f6:7e:3a:
51:54:57:0e:62:3c:fb:64:01:15:b7:4c:fd:77:c9:8f:c0:e1:
01:83:3b:43:48:c1:0e:2c:e7:62:3e:38:0f:5f:51:c4:5a:31:
0e:8e:d7:ef:ad:a6:e0:fb:aa:90:5b:0a:01:8a:7c:ed:4c:8b:
5a:93:6d:97:78:f7:c7:ce:55:0d:12:6d:9e:1f:88:09:d2:c9:
12:68:1a:b1:0f:bd:4f:74:01:ce:e4:db:74:20:25:d2:84:c0:
bf:4a:b7:a1:23:fc:8e:98:26:9f:ce:f1:51:da:47:ee:c2:71:
1c:b5:f7:b9:5c:29:50:2d:7a:e5:c7:35:b7:b9:d7:f7:94:ad:
db:c8:e2:ad:7f:ab:0d:2d:e6:12:b3:03:b6:d1:1c:f5:32:7e:
18:d3:69:70:9c:a4:63:e7:de:9e:a5:8d:1a:86:9f:a0:0d:41:
6e:41:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:24 2023 by rpki-client on console-ams.rpki-client.org