Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/C35KlFq-T2cq35tPjUKwvSgR9-g.roa
File: C35KlFq-T2cq35tPjUKwvSgR9-g.roa (raw, json)
Hash identifier: 2V5cZZn6sDgJiP/E4n2N4F/tywAGJ0JuewcVdsVL0vM=
Subject key identifier: 0B:7E:4A:94:5A:BE:4F:67:2A:DF:9B:4F:8D:42:B0:BD:28:11:F7:E8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0184D40EC621AD48AE85244DB6D0A526CC15
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/C35KlFq-T2cq35tPjUKwvSgR9-g.roa
Signing time: Fri 02 Dec 2022 18:17:28 +0000
ROA not before: Fri 02 Dec 2022 18:17:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205835
IP address blocks: 45.15.64.0/22 maxlen: 22
178.175.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:0e:c6:21:ad:48:ae:85:24:4d:b6:d0:a5:26:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 2 18:17:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b7e4a945abe4f672adf9b4f8d42b0bd2811f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:cf:b4:7d:16:eb:b5:4d:27:25:69:4e:d0:
52:b5:86:90:7e:a4:a0:5d:2d:f2:7b:af:2f:c7:19:
71:f7:ac:51:2f:a5:41:10:3f:05:f5:5d:54:5c:f4:
18:96:62:bd:27:00:ca:40:ce:c8:4b:87:96:e1:c0:
ce:b0:45:4c:fb:4e:85:e8:2e:f8:5c:d4:30:28:a0:
14:d9:92:89:32:f3:f6:ea:b5:9f:7a:8f:21:a9:fe:
4e:84:a3:19:db:ce:50:cb:30:b0:2e:e9:ad:62:69:
4d:66:fe:62:e1:f4:cc:27:3d:6c:18:e1:b9:22:8e:
8d:1f:75:8a:a2:9b:69:13:d3:89:a8:c5:3c:a5:d1:
1f:19:c3:6e:a8:78:ea:3f:3d:09:2d:12:2d:22:11:
68:67:56:5d:42:01:a4:f1:42:ba:ad:64:f5:77:ba:
8b:97:06:bf:0b:88:07:16:06:00:c8:df:4b:40:f6:
e4:8c:7b:21:fe:21:d8:24:99:3e:9a:00:01:41:c2:
c7:4b:99:56:37:a8:2b:db:08:c1:20:c6:8a:2c:bf:
a0:2b:ba:7d:bf:d4:a4:0f:7c:41:65:b2:e2:ea:f0:
35:78:ac:75:ef:e6:fe:55:13:b9:42:c8:e3:7a:ce:
ca:49:43:63:86:71:de:c0:7e:4b:c8:f2:fe:84:75:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:4A:94:5A:BE:4F:67:2A:DF:9B:4F:8D:42:B0:BD:28:11:F7:E8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/C35KlFq-T2cq35tPjUKwvSgR9-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.64.0/22
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d2:8b:fe:e0:37:3a:75:85:99:63:92:d0:92:ee:64:97:64:
be:73:cd:6e:ce:cc:05:94:7c:ab:a6:63:62:53:d7:9d:9d:33:
cd:e2:a9:db:75:19:0b:fb:42:d7:87:c5:fc:b2:31:1b:5b:51:
cd:00:9d:24:78:15:29:ec:4f:5d:9e:f3:98:a2:88:db:d1:b1:
24:b0:e7:f9:87:71:2b:59:d9:f1:a0:0f:c8:71:89:4e:63:a5:
9d:9f:58:8d:c3:7f:34:ad:bc:a7:16:f6:83:6f:52:39:8c:a5:
ef:c3:ba:c1:ab:49:5b:86:c1:c8:e0:ce:41:6e:05:bd:c1:4c:
a4:69:30:7f:04:ba:9a:90:88:e0:ba:fa:6a:6c:b0:2a:a3:e4:
21:ac:3d:67:41:80:e4:54:9e:d2:8a:83:3a:f7:f6:4a:35:f2:
f5:20:b2:5d:9f:46:ec:b1:9d:17:5c:34:41:93:49:fe:fe:3b:
dd:63:a9:a5:38:1f:fb:1f:a9:78:3b:ad:95:f8:e2:d2:60:2e:
ca:54:0d:f8:ab:f9:24:8e:92:de:ec:f5:90:56:4d:7c:da:aa:
8a:be:89:3e:50:90:3b:8e:f1:66:cc:6f:9a:b2:0b:b4:98:c6:
9b:68:e6:a5:fd:ba:05:03:e0:f4:a4:ea:00:6e:cc:bb:30:7b:
a2:50:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org