Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/2_yryMLa0rElOSv4tC4NT33ejdY.roa
File: 2_yryMLa0rElOSv4tC4NT33ejdY.roa (raw, json)
Hash identifier: UEa12Ymmu8AcdfYoVv1EUxDbr7mblD8mJBDO9qmiShM=
Subject key identifier: DB:FC:AB:C8:C2:DA:D2:B1:25:39:2B:F8:B4:2E:0D:4F:7D:DE:8D:D6
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 17FC664A
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/2_yryMLa0rElOSv4tC4NT33ejdY.roa
Signing time: Tue 07 Jun 2022 09:02:20 +0000
ROA not before: Tue 07 Jun 2022 09:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 45.84.242.0/23 maxlen: 24
185.104.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402417226 (0x17fc664a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jun 7 09:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbfcabc8c2dad2b125392bf8b42e0d4f7dde8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:89:bf:a9:6b:06:ca:1b:0a:61:11:bb:59:
c0:39:aa:c6:18:33:18:85:a0:d9:29:e9:da:4e:6b:
fa:5e:c6:c6:8c:0c:d0:dc:6d:7f:f8:d2:d1:84:21:
88:0b:62:b9:75:31:f6:0f:1d:8e:0b:d7:27:63:e8:
34:1c:b2:dc:4e:48:2f:f7:07:89:7f:80:4d:6e:85:
3a:5c:90:e2:38:de:86:fc:4a:6c:a2:fb:5f:22:c0:
4d:b3:b2:00:cf:83:1c:02:2b:28:54:a3:63:9a:2e:
e3:1c:bd:5f:86:3a:6a:f7:19:7b:2a:6a:7e:d3:b5:
47:c5:74:3d:12:d0:5f:33:21:1b:94:c6:56:35:14:
a2:c5:c2:32:a7:4a:b5:ad:99:02:65:2a:a4:dc:7e:
db:94:3b:6f:b2:46:72:9b:a1:7d:1f:18:8f:83:0c:
71:e5:4f:92:fe:52:ad:a6:1f:2b:5f:f6:bd:7e:e3:
7f:0e:9b:3b:22:5d:b1:dc:f4:2c:85:86:57:70:7c:
5f:d7:2a:6c:dc:56:a9:c4:9c:ea:ee:a7:b8:3c:05:
2c:9f:f2:16:e4:b3:4e:92:01:eb:f0:d3:86:b5:ba:
a2:54:be:88:53:78:7c:ed:7e:68:02:73:92:72:6f:
5d:72:55:10:30:c3:fc:6d:bf:72:f7:d8:00:21:8a:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:AB:C8:C2:DA:D2:B1:25:39:2B:F8:B4:2E:0D:4F:7D:DE:8D:D6
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/2_yryMLa0rElOSv4tC4NT33ejdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
185.104.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:43:11:a5:9f:8b:03:7d:4f:ba:bd:89:64:d2:f4:13:ef:a3:
25:06:6f:1d:83:c5:37:17:e1:97:a0:fa:2c:bf:d3:96:ee:4e:
3a:84:d8:fb:ed:cc:fb:37:55:06:26:f9:68:e1:8f:d3:fe:26:
f7:3d:7b:d8:84:2a:cf:5a:93:30:41:61:f0:98:73:c1:8e:4c:
41:44:eb:a9:c6:4c:aa:91:72:bc:2e:b9:7b:8f:93:33:4a:99:
12:a2:bb:4c:52:74:b7:41:26:e3:97:f9:2e:08:19:52:ae:05:
3c:c9:2e:92:95:08:61:32:c2:8e:57:da:21:6e:83:c4:1d:77:
3e:47:e2:98:3b:86:dc:fd:38:52:21:39:44:1a:d7:90:11:f4:
c7:4f:b5:c3:30:b8:4e:81:c7:6a:b7:2b:d4:af:0f:1c:e2:a0:
74:fc:b8:3d:0b:4e:d9:1e:39:cf:39:a8:2e:c6:6e:8a:3d:ae:
62:e4:dc:62:72:6b:0f:02:f7:cc:d7:3d:c2:6c:7a:7b:f4:61:
ed:7a:8a:f5:e0:19:28:6b:fd:b2:6f:45:83:15:36:b6:92:57:
89:af:28:3e:34:c8:13:05:61:ac:c8:c9:df:c2:2e:87:d3:f1:
4f:f7:d6:ae:e7:b5:1c:f6:2f:eb:c9:e0:18:b6:0e:04:80:2c:
c1:7f:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org