Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/DoT0Ut66u5qCX4-i9rOXFMQ-Tys.roa
File: DoT0Ut66u5qCX4-i9rOXFMQ-Tys.roa (raw, json)
Hash identifier: WY4O+uLwl4QwmJEUio22f60886yrW3Qfpc9MDLuvryU=
Subject key identifier: 0E:84:F4:52:DE:BA:BB:9A:82:5F:8F:A2:F6:B3:97:14:C4:3E:4F:2B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 2578A7
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/DoT0Ut66u5qCX4-i9rOXFMQ-Tys.roa
Signing time: Sat 01 Jan 2022 01:55:58 +0000
ROA not before: Sat 01 Jan 2022 01:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208178
IP address blocks: 45.155.104.0/24 maxlen: 24
45.155.105.0/24 maxlen: 24
45.155.107.0/24 maxlen: 24
45.155.106.0/24 maxlen: 24
2a0f:fb00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455719 (0x2578a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jan 1 01:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e84f452debabb9a825f8fa2f6b39714c43e4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:94:f4:d9:b5:0c:cf:24:cb:f0:b3:b8:c3:
54:ee:09:d9:1d:0f:13:56:a8:da:85:e8:25:4d:1b:
ac:b0:dc:56:7e:9f:d8:8b:09:fe:e7:21:c3:28:81:
4f:13:e6:22:f3:07:23:ef:b0:ed:b0:be:30:2c:7e:
f6:7b:c7:5b:5f:3a:79:7a:bf:7d:c8:91:fe:59:70:
53:b8:79:f4:08:78:1e:51:3b:76:64:dc:1a:db:13:
df:2c:81:bb:f9:3e:c6:3b:aa:6b:43:0f:06:9f:6f:
36:b8:94:1e:0c:ce:00:1b:ea:73:bc:5b:45:91:48:
f5:ad:74:7d:da:11:5d:99:98:08:09:af:3d:9c:3a:
d8:f0:bf:9d:e0:fe:ed:64:6b:0d:74:9a:8d:93:1b:
53:8c:a5:e2:ef:9a:b9:02:6d:ad:0b:fb:4a:65:68:
02:13:20:cd:6c:90:64:9b:f6:1f:f6:75:a6:68:20:
50:ff:98:fa:68:c5:d0:99:82:d5:6b:09:67:6a:ac:
5e:f6:92:2f:e4:09:88:db:51:86:f7:b9:ab:0c:ef:
d4:c4:ab:6f:e1:0a:01:24:a1:2d:ee:f9:3b:c2:26:
04:2e:5a:81:b4:67:bd:f9:74:8a:75:88:01:a6:36:
82:4c:2f:e1:c3:70:81:00:1d:51:db:59:64:d3:09:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:F4:52:DE:BA:BB:9A:82:5F:8F:A2:F6:B3:97:14:C4:3E:4F:2B
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/DoT0Ut66u5qCX4-i9rOXFMQ-Tys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.104.0/22
IPv6:
2a0f:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9e:4c:fa:cf:d7:53:d9:46:c1:f2:84:ff:76:26:8c:97:ac:
90:80:31:0b:dc:76:ab:81:9e:ce:75:5a:93:39:ff:ff:84:63:
94:51:22:29:a9:8e:ab:ad:8d:fc:4d:d0:2c:00:4b:0c:f8:b0:
30:0f:aa:b7:ac:4f:32:a5:1d:6f:fe:eb:59:07:ab:37:1b:4f:
2a:52:6e:b5:11:cc:44:ea:e7:6b:3e:d6:1b:e2:ac:c5:67:ab:
92:f2:c5:94:7a:d3:1c:02:7f:b5:bf:e4:8e:bb:f9:57:94:8e:
6b:c0:d2:1e:53:0e:ee:5f:2e:b3:c3:f7:fb:5e:1d:de:04:a0:
0b:45:98:6e:98:58:84:ea:2c:ce:96:6a:f1:ea:99:22:f2:58:
c1:db:3e:4d:97:c3:33:05:b0:cb:8d:c1:ce:b2:96:db:47:ce:
11:7a:81:98:d0:1b:03:f0:10:12:93:d1:e4:07:1b:c3:3f:04:
08:6e:da:0d:67:f2:c1:4b:16:c0:17:d3:ab:06:27:3b:75:26:
56:26:7d:fa:9c:6a:44:63:54:9a:1a:29:69:98:5e:48:11:a5:
d8:e1:59:0d:84:fe:04:bc:96:86:04:a5:af:c5:2e:c7:d4:52:
84:b7:5b:8e:a3:9f:f0:a8:e1:cb:4e:76:a8:ab:39:62:0b:66:
b0:25:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org