Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XrMOP0m1VEe6ZfpRdEzz0mc6bCQ.roa
File: XrMOP0m1VEe6ZfpRdEzz0mc6bCQ.roa (raw, json)
Hash identifier: t0ndIsbJb9RGe7glUSUcgyGCtwxgUxoW0JAAKldPn7E=
Subject key identifier: 5E:B3:0E:3F:49:B5:54:47:BA:65:FA:51:74:4C:F3:D2:67:3A:6C:24
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 155017B2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XrMOP0m1VEe6ZfpRdEzz0mc6bCQ.roa
Signing time: Tue 07 Jun 2022 15:49:26 +0000
ROA not before: Tue 07 Jun 2022 15:49:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204872
IP address blocks: 45.150.180.0/22 maxlen: 22
195.216.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357570482 (0x155017b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 7 15:49:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb30e3f49b55447ba65fa51744cf3d2673a6c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:ce:41:fd:51:2f:08:bb:64:56:f6:d4:33:
a0:c2:48:9c:96:1d:c7:07:a6:d6:df:5d:50:1b:20:
59:b2:e6:59:29:d8:12:91:7e:c8:78:9d:cc:a1:e7:
d4:d5:a3:cf:46:24:52:d7:2d:c4:6e:94:d7:15:35:
fc:db:13:ae:82:71:45:5f:fa:54:96:50:4b:ce:c3:
f2:e8:26:d3:45:03:b5:23:d0:62:17:a9:0e:7c:53:
70:4a:f4:61:c9:5a:c1:b3:bf:12:8b:4f:ea:90:92:
8d:23:0f:1c:ab:ad:ca:30:ba:c7:0b:03:a7:1e:a5:
b0:b5:19:83:1b:f3:45:92:ec:0b:e9:b9:e0:08:63:
dd:8f:98:a2:31:11:4b:41:bb:f6:63:cd:e0:eb:9b:
e0:ac:49:c6:68:a7:d6:90:17:4b:8c:a4:02:44:62:
83:14:06:a0:4e:dd:ea:c9:3d:c1:dd:48:29:5d:de:
8e:c4:d3:fc:4c:8c:cc:89:51:7a:27:43:10:7e:d2:
2d:a3:c6:80:e8:4b:35:f1:97:1e:3c:69:58:f3:de:
ec:be:21:f9:d1:58:b5:c7:1d:88:f1:71:bb:7a:8e:
e8:df:79:8b:d8:6b:81:d6:26:bd:45:9d:a7:5c:08:
57:cc:9e:58:a7:ed:89:5a:aa:e6:19:31:2f:cd:69:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B3:0E:3F:49:B5:54:47:BA:65:FA:51:74:4C:F3:D2:67:3A:6C:24
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XrMOP0m1VEe6ZfpRdEzz0mc6bCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.180.0/22
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ec:39:33:85:23:43:b5:2e:2b:4f:f7:4e:b3:78:cf:db:2f:
88:df:85:9f:69:ec:c2:75:89:60:b8:24:8c:0a:2e:34:ba:71:
cf:2e:5a:f3:78:55:90:51:d8:2f:e9:24:8e:50:c8:d8:88:23:
64:fe:31:9e:41:62:e2:54:30:bd:f1:c3:97:eb:73:bb:82:e0:
a7:07:11:e3:ba:43:63:19:9a:5b:f8:98:72:75:1b:a6:e0:bc:
94:c7:58:16:ba:f2:8b:f0:c6:b7:cd:51:19:2a:3b:41:9e:31:
e0:89:d7:fc:f1:3a:9b:0b:0e:f3:65:f0:1a:7c:28:82:57:9f:
97:33:c1:78:8b:2c:ac:79:18:d5:7a:87:9c:41:97:eb:84:88:
b3:39:3d:c2:ed:87:4e:e8:2b:44:d4:21:dc:db:88:d1:7c:0a:
6c:2d:d8:27:5c:66:09:62:14:7e:22:06:c2:ce:25:d5:ff:3c:
de:0a:8e:e8:1a:27:08:fe:a7:28:53:2f:3b:2a:24:8c:66:f9:
0b:41:23:aa:9c:c6:85:80:68:6f:07:1e:04:08:33:20:c3:cf:
25:0c:85:ce:07:86:03:10:ec:03:05:42:6e:0e:0c:54:17:3b:
ec:16:64:09:8a:d3:e8:a0:a2:ab:4f:e7:75:05:17:b2:77:3f:
f1:5c:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org