Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aSESD07OIy4rAxN8hU5Qn0H24mw.roa
File: aSESD07OIy4rAxN8hU5Qn0H24mw.roa (raw, json)
Hash identifier: fcDaXY8PAlyu0RfA3s7cMmTcvUUGkd2SlL5mT1IGjGA=
Subject key identifier: 69:21:12:0F:4E:CE:23:2E:2B:03:13:7C:85:4E:50:9F:41:F6:E2:6C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 153CCE10
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aSESD07OIy4rAxN8hU5Qn0H24mw.roa
Signing time: Sat 04 Jun 2022 10:18:22 +0000
ROA not before: Sat 04 Jun 2022 10:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206085
IP address blocks: 45.89.44.0/22 maxlen: 22
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356306448 (0x153cce10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 4 10:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6921120f4ece232e2b03137c854e509f41f6e26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:bb:91:99:1e:65:10:19:e7:26:93:ec:fc:
ce:6b:e2:6d:04:8e:3a:0b:7c:89:37:21:ce:47:49:
1e:04:fc:3e:46:88:60:d3:99:ff:ce:fb:8f:69:fb:
8b:c2:7b:35:48:6e:ed:94:3e:cf:2f:a7:3d:be:f6:
8d:f7:2c:91:7d:f1:83:12:4e:66:67:fd:07:72:4a:
8b:cb:c5:ec:5d:09:69:f8:66:dc:6a:8b:00:b9:9a:
3b:78:71:2f:55:e5:41:5d:f9:46:e8:56:ce:84:89:
84:8a:18:e9:5c:da:85:dc:b2:94:6e:39:e1:dc:40:
27:8d:2e:2a:ec:20:14:14:9e:4f:fe:53:43:6a:43:
46:dd:64:21:4e:a6:0a:2b:3c:2b:57:2a:89:07:b1:
f6:2c:a4:ee:3c:4e:77:e6:95:cd:88:b9:69:77:bf:
ae:42:12:84:8f:22:cc:57:dd:f3:01:0e:cc:92:14:
91:8b:13:32:a0:2d:24:24:a5:c7:e3:65:ad:c2:04:
6e:bd:bf:87:a5:22:c5:f0:2d:27:86:7f:de:d3:f5:
e2:28:d7:a4:a7:c0:de:d5:7d:61:0b:2e:ca:0b:d9:
d7:1f:11:64:91:d6:07:56:fc:79:ec:aa:49:32:42:
66:91:a7:83:8e:ca:0d:aa:df:f8:f7:b7:12:a4:ba:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:12:0F:4E:CE:23:2E:2B:03:13:7C:85:4E:50:9F:41:F6:E2:6C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aSESD07OIy4rAxN8hU5Qn0H24mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.12.0/22
45.89.44.0/22
45.95.88.0/22
Signature Algorithm: sha256WithRSAEncryption
40:02:34:c7:1d:1e:01:9c:36:00:14:0b:be:a8:47:5b:bd:c0:
03:d6:4d:e8:71:16:9d:7c:d9:f9:a2:a4:1c:87:d2:3e:30:79:
70:5a:32:45:b6:ec:5f:cd:0c:51:9b:ef:68:01:69:81:a2:eb:
c1:58:95:8a:b1:7a:b2:bd:68:77:ff:c0:fe:cc:7b:a5:90:22:
ec:42:21:94:21:05:97:7f:4f:3c:6d:9e:06:8b:ba:b8:80:f0:
3d:c4:a1:95:27:dd:4c:0d:e8:ef:ec:e7:54:71:62:3c:e8:7f:
1b:6f:3d:26:42:2d:1c:e3:44:a5:eb:9c:61:5a:70:74:8c:db:
a2:88:a3:12:22:68:94:89:32:64:fe:ab:39:3f:b4:a6:16:56:
f1:fb:3a:6f:98:b5:82:f1:07:61:b3:58:ea:79:90:c2:82:11:
cd:c6:1b:be:35:59:82:06:33:da:78:7e:ff:12:78:2b:03:e2:
16:c1:8d:42:c8:b4:a5:6b:00:88:44:cd:97:46:d1:03:ec:0b:
45:2f:da:31:e1:57:70:05:3e:07:28:a1:7e:18:87:10:2e:ce:
e9:90:76:8c:01:a0:a9:19:2d:09:50:72:b7:08:d7:f1:c8:ba:
f4:77:71:cb:d7:fe:0f:f0:9b:5f:a6:5b:89:2e:2c:ed:95:63:
8c:49:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org