Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UNwNjaGV7FWTRMWkKe75hBJ3JbA.roa
File: UNwNjaGV7FWTRMWkKe75hBJ3JbA.roa (raw, json)
Hash identifier: 9eX/zSuvNY5Mq2KiCXeWQkqINvMOyTM8ys8SdZ550Yk=
Subject key identifier: 50:DC:0D:8D:A1:95:EC:55:93:44:C5:A4:29:EE:F9:84:12:77:25:B0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1451E432
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UNwNjaGV7FWTRMWkKe75hBJ3JbA.roa
Signing time: Fri 18 Mar 2022 18:06:55 +0000
ROA not before: Fri 18 Mar 2022 18:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202965
IP address blocks: 45.67.117.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340911154 (0x1451e432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 18 18:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50dc0d8da195ec559344c5a429eef984127725b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:00:19:85:f8:f3:12:be:4a:e3:54:18:fe:
53:07:fc:84:57:b6:bf:03:af:ae:e7:32:3c:1b:58:
0f:1e:52:00:32:b1:9f:4f:94:1a:25:19:e4:8d:41:
a9:9d:15:e1:53:de:18:fd:05:11:61:70:82:f9:3a:
0b:94:30:10:84:7e:3e:f0:7c:23:f2:e6:7d:d0:3c:
4f:9c:29:d5:71:c5:09:c4:ba:74:f2:40:f7:84:a3:
4b:d9:49:39:d7:54:fa:59:f6:1c:ab:f7:33:36:e8:
86:08:76:ef:b9:ee:ca:d5:ca:54:ff:8d:4e:65:e9:
29:5c:a8:20:88:3f:af:06:b4:a7:f1:89:64:99:22:
f4:44:a3:78:1b:f6:94:65:92:b1:7b:7a:88:26:b7:
2b:3b:0b:8b:fe:98:28:78:90:9f:67:9d:a6:62:ac:
72:88:ee:95:ac:d3:92:57:41:e5:b4:04:b4:76:f9:
0b:02:75:a6:26:40:e1:bc:ab:69:0b:78:b8:2b:51:
8b:2c:f0:f3:92:13:a4:b4:1f:70:ad:31:eb:17:99:
11:fc:49:8d:8c:6a:6f:73:f0:13:7a:a1:1c:d5:76:
94:f5:57:ec:24:4d:d4:22:26:27:35:80:12:54:7b:
a4:60:d8:d5:b2:17:ea:31:22:5e:9e:33:5f:a4:ec:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:0D:8D:A1:95:EC:55:93:44:C5:A4:29:EE:F9:84:12:77:25:B0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UNwNjaGV7FWTRMWkKe75hBJ3JbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
91.242.72.0/23
Signature Algorithm: sha256WithRSAEncryption
75:4c:ce:c5:90:65:c3:e5:44:7a:9d:c2:8e:75:c8:f2:25:7e:
a0:85:6d:44:aa:b9:f2:d6:57:57:c1:a0:3b:ae:1a:be:82:79:
10:32:4d:93:69:1c:fe:3e:c1:f7:3b:08:1b:80:69:5d:b4:54:
41:54:19:e3:ad:8e:be:bd:c7:fc:f5:d4:b5:3c:c5:57:e7:55:
8f:3a:35:4a:31:8e:a7:09:f0:3f:1a:76:d1:62:09:63:8c:e8:
f0:09:f3:b5:81:14:f8:e4:65:c4:9a:d6:de:5d:71:ff:ec:10:
60:6c:55:dc:47:bf:67:9c:f3:1c:df:0f:1e:f6:cb:58:6a:45:
a4:96:c1:cc:e7:e8:60:02:76:61:a5:24:19:c2:13:9b:67:94:
2b:18:34:48:2e:6a:36:01:c1:f2:ae:17:b2:e2:f0:73:d7:36:
ed:66:0d:e6:ca:86:a3:1b:96:24:3a:d9:ab:7c:00:e0:c0:a5:
6f:b7:b3:5b:18:59:a8:96:78:fd:fd:8e:5c:ca:b9:46:ce:85:
23:41:cb:7b:eb:85:e7:a3:e0:60:b4:a1:35:6a:9a:53:9a:da:
fe:2d:7a:b8:8a:42:a2:16:1d:a5:38:a3:99:77:86:c8:6e:c0:
b5:30:17:29:d5:c3:0e:5a:be:a5:7b:14:0f:b6:19:15:07:46:
67:25:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org