Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eSmgs-qRyeQ4KCxlrpOE-yPFBnY.roa
File: eSmgs-qRyeQ4KCxlrpOE-yPFBnY.roa (raw, json)
Hash identifier: jifbf31fmGb34/9+7kcs7dAQ2P23W1PhfBO6SOQ5BZM=
Subject key identifier: 79:29:A0:B3:EA:91:C9:E4:38:28:2C:65:AE:93:84:FB:23:C5:06:76
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01152282
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eSmgs-qRyeQ4KCxlrpOE-yPFBnY.roa
Signing time: Wed 16 Mar 2022 10:38:01 +0000
ROA not before: Wed 16 Mar 2022 10:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21267
IP address blocks: 45.85.244.0/23 maxlen: 24
45.85.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18162306 (0x1152282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Mar 16 10:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7929a0b3ea91c9e438282c65ae9384fb23c50676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:5c:0d:68:a8:22:58:8e:2f:49:0b:7b:0b:
93:39:6c:51:02:2f:f9:bc:9b:4e:30:45:cd:cb:de:
1c:8f:12:11:9a:91:71:67:b3:33:d6:ba:d0:77:18:
06:b6:79:9f:b4:b9:b8:e0:db:9b:7a:f0:44:b0:5a:
e0:49:83:03:3c:08:25:1c:95:dd:ec:93:83:50:52:
7e:e7:a4:f4:7d:89:ec:72:3d:8f:a9:6c:e6:03:6f:
3b:33:29:14:ba:2c:49:91:01:54:21:51:2b:47:e8:
25:52:69:3a:53:11:96:d5:85:7c:88:04:e6:81:16:
bc:5d:a0:d1:e2:e8:42:fa:55:b4:4f:45:ae:3d:df:
bb:6c:f2:6e:11:e7:df:76:c5:1a:26:91:07:bb:9c:
39:90:c3:cd:0a:c4:57:2a:b2:da:dc:4b:b5:5c:28:
8f:87:6f:b0:43:a1:5f:35:4f:98:1b:46:50:8c:a2:
a8:28:e5:03:b0:50:95:ec:a0:af:fa:57:5f:29:e0:
f6:6a:3f:56:39:c9:d3:b1:2a:a8:8d:ce:7d:de:7b:
ce:1e:00:cf:7f:e7:9f:84:09:6b:85:ff:f7:a6:f1:
e3:30:6c:98:73:4f:ab:35:45:11:9c:30:3c:05:74:
83:3e:0f:0f:e1:fe:b6:38:0c:6c:a9:8d:27:35:24:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:A0:B3:EA:91:C9:E4:38:28:2C:65:AE:93:84:FB:23:C5:06:76
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eSmgs-qRyeQ4KCxlrpOE-yPFBnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.244.0-45.85.246.255
Signature Algorithm: sha256WithRSAEncryption
57:cc:63:49:0e:28:46:42:16:81:42:8d:43:53:67:80:ff:3c:
66:f3:f3:b8:ec:a5:bd:c4:52:4b:8c:8e:5a:eb:cc:ef:3f:00:
6b:34:ff:2b:25:c2:f8:a5:2e:cc:e0:86:cd:62:1b:6d:32:d1:
78:98:d6:26:a0:84:e2:57:a6:9e:f4:c2:e1:c2:f9:3a:9b:88:
53:f7:62:79:61:27:3b:b2:31:ab:76:5c:3f:aa:88:a7:b4:42:
a9:24:d1:a7:73:66:8c:9c:1a:f8:dc:db:89:7a:4a:6e:3b:bd:
9e:d9:ae:87:b3:d3:77:17:c4:cd:5c:1f:d0:51:35:bd:43:d3:
d9:a8:dc:1d:55:2f:e2:3b:57:23:76:b4:ea:94:a3:16:75:66:
2b:2f:ca:fa:b8:25:8f:b8:75:a5:12:53:98:16:bc:86:4d:76:
a1:b8:47:d5:cc:04:19:55:0e:5b:1e:f6:54:52:45:50:3e:4b:
cb:f2:1a:11:d5:4a:0d:1d:75:e7:d0:f4:00:c2:f1:5d:48:8b:
76:c0:48:fe:c7:b5:46:be:82:9e:b6:ed:fc:f6:36:a8:30:46:
d9:3b:bc:95:2e:ef:97:66:8c:08:54:f7:2f:01:99:14:71:4a:
50:5c:dc:f7:30:16:1b:c5:f8:9c:72:4a:9e:65:64:f9:99:4a:
67:72:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org