Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/s-wOTvtIfAEZ4A2YAA5rfkCLEo0.roa
File: s-wOTvtIfAEZ4A2YAA5rfkCLEo0.roa (raw, json)
Hash identifier: KPw2PZHznO1RefzLVF40HfjZeRGY22cP0SWAju3ofD8=
Subject key identifier: B3:EC:0E:4E:FB:48:7C:01:19:E0:0D:98:00:0E:6B:7E:40:8B:12:8D
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 08CA5DCB
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/s-wOTvtIfAEZ4A2YAA5rfkCLEo0.roa
Signing time: Tue 18 Jan 2022 09:54:19 +0000
ROA not before: Tue 18 Jan 2022 09:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208866
IP address blocks: 45.82.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147480011 (0x8ca5dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 18 09:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3ec0e4efb487c0119e00d98000e6b7e408b128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:68:1c:94:22:c1:a9:46:f4:90:d0:c0:99:
a2:49:f9:df:89:62:10:92:3d:38:5e:f0:a8:55:d5:
a6:38:72:2f:4d:45:cb:da:56:fa:9e:bc:18:8b:53:
fc:d4:90:25:9e:fe:68:1e:0e:24:b6:bd:33:87:f8:
d1:16:54:3b:06:ff:27:06:5c:7e:b5:8a:46:4a:11:
19:17:44:d3:c5:3f:f4:91:7c:43:55:a7:e5:d6:14:
09:03:a1:d8:4a:c7:7f:df:15:d5:42:0a:49:42:a6:
fb:ee:1b:14:14:55:a3:02:ca:05:4f:05:20:ea:3f:
42:ae:24:09:82:74:81:79:f3:9d:20:0a:08:51:11:
82:af:3b:99:33:0f:b5:d1:f1:0c:70:0e:b4:b3:7c:
2e:90:f7:7c:88:99:cd:0b:80:88:27:e3:bf:42:c2:
93:5a:3d:9b:7a:f2:7c:d7:81:d5:07:bc:09:17:a9:
75:f0:61:49:c9:6b:e2:4a:c4:72:34:d4:41:d5:90:
95:ea:71:c9:ee:76:29:70:29:0d:24:19:1d:5c:1f:
83:31:90:d3:f1:b6:c3:7a:20:15:2c:02:83:47:d9:
42:66:d2:c4:6a:67:f2:cb:6a:e8:5a:6f:d9:df:a0:
45:ec:1e:d7:98:d8:a9:5f:6e:8b:38:27:32:85:d0:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:0E:4E:FB:48:7C:01:19:E0:0D:98:00:0E:6B:7E:40:8B:12:8D
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/s-wOTvtIfAEZ4A2YAA5rfkCLEo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.62.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f7:c3:b2:0f:1d:fb:8d:2e:81:62:a3:9e:41:67:47:e2:81:
90:cc:08:77:6b:e9:dc:22:ab:80:f6:fe:a2:3f:d0:5d:24:06:
5a:00:24:7a:8b:9f:4c:b6:82:69:9d:82:36:81:fe:db:22:82:
0e:ee:1c:b0:63:fb:98:04:45:c2:a3:b0:9f:ee:1a:44:cd:53:
b5:1e:37:f5:a3:91:66:b1:91:31:e7:7d:5e:82:3e:66:6c:8a:
d8:d6:8e:26:e8:0a:16:be:22:e3:d5:8d:99:33:75:33:e1:f0:
8a:6a:44:02:ce:7a:5e:50:73:64:09:b7:50:f9:a3:66:0a:22:
da:ef:dc:77:89:87:ab:1c:eb:d1:aa:56:91:1e:40:98:46:f6:
45:ef:ba:a2:45:0a:3c:32:9b:39:cf:98:5a:f8:b3:08:8a:34:
f6:dd:e3:13:65:31:db:b6:f5:04:39:f7:41:19:65:b9:c1:1a:
87:89:38:9e:f0:2f:7e:c1:68:fa:4c:80:73:99:b5:7d:4b:47:
87:e7:86:ce:71:67:44:fb:98:bc:29:94:fa:ff:a4:48:6d:d4:
4a:25:dd:01:d8:db:a7:7c:83:c3:b0:8d:f6:aa:e4:1d:bf:ac:
f0:ad:a6:31:10:b6:38:61:d6:85:74:d4:60:e6:16:87:c3:5b:
9d:7e:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org