Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8frwfrR3rrMvRJI9du3CVbL_vf4.roa
File: 8frwfrR3rrMvRJI9du3CVbL_vf4.roa (raw, json)
Hash identifier: HkkDpI00b7X46E91hgW17fCZSZMp6IumgTdAcqcPkHs=
Subject key identifier: F1:FA:F0:7E:B4:77:AE:B3:2F:44:92:3D:76:ED:C2:55:B2:FF:BD:FE
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 064CEC02
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8frwfrR3rrMvRJI9du3CVbL_vf4.roa
Signing time: Mon 14 Feb 2022 17:51:43 +0000
ROA not before: Mon 14 Feb 2022 17:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.151.97.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105704450 (0x64cec02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Feb 14 17:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1faf07eb477aeb32f44923d76edc255b2ffbdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:43:bd:03:e8:1d:f3:92:b8:69:a4:bb:cb:
ac:fa:ce:ae:b8:7f:18:86:b5:09:95:a0:7f:f7:61:
14:b8:38:54:22:b6:fb:db:b8:a6:50:30:d7:21:2e:
b6:e0:d2:b3:31:8e:c2:a9:16:45:10:15:7f:ff:a7:
5e:b7:62:1d:27:49:7f:64:a6:b9:3b:48:61:06:51:
30:df:2b:b4:5a:93:c8:e0:46:0a:05:e3:92:38:dc:
61:58:ac:0f:c8:39:20:d0:d8:d1:0c:e6:78:f8:19:
00:8b:f0:54:d6:26:97:ab:2c:17:53:ed:d3:2a:ef:
09:ed:99:4d:ee:c1:93:91:9b:50:60:ce:8b:33:78:
68:3a:83:10:7d:4b:37:99:82:d1:44:f0:a1:09:25:
fb:5f:bd:75:b6:c1:15:db:64:ef:a4:e7:a1:b7:c0:
44:f5:d4:90:7d:91:4d:ac:15:8e:b0:b5:5c:02:ea:
6a:f9:1b:e2:9c:8b:02:e9:9c:bb:80:f0:2c:6b:3d:
0f:23:61:52:4a:95:ac:89:fa:f2:ec:e4:8e:e1:c5:
25:2a:ac:1a:c5:3e:26:64:ec:90:c2:68:e3:ee:b5:
4e:37:45:54:9d:e1:80:d0:67:6c:9a:cc:30:42:a8:
f2:df:bf:3c:34:a0:8b:58:fa:de:3c:10:01:12:df:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:F0:7E:B4:77:AE:B3:2F:44:92:3D:76:ED:C2:55:B2:FF:BD:FE
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8frwfrR3rrMvRJI9du3CVbL_vf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
94.137.76.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ea:33:87:06:4d:3b:b3:3e:46:81:17:ee:4e:1e:ca:26:e8:
6b:40:b6:97:c2:44:6c:11:ea:3c:bd:e4:3e:06:e2:7d:6e:6e:
c3:44:ab:53:2e:c9:2b:05:82:21:de:3f:e3:33:77:c2:11:0b:
66:7a:b3:f5:03:a6:83:7f:1b:32:33:4e:17:63:89:ac:27:60:
fb:fa:97:8a:4f:b6:7e:43:f8:b0:c1:a8:cc:f1:76:64:88:8f:
36:20:19:8a:9b:f0:41:e5:82:f4:87:6b:dd:54:43:ca:0f:fc:
93:8c:0e:0f:15:02:23:36:7d:8b:73:45:c9:ac:a3:23:9e:f3:
57:13:27:00:db:b9:2f:f4:88:08:e8:bc:f1:81:e1:f7:72:a8:
58:ff:f8:05:e0:76:d6:55:38:80:1e:37:f4:e0:25:62:14:b7:
e3:e8:cb:52:52:54:a7:c7:d8:c1:8d:6d:a5:4b:03:e9:d1:96:
56:36:16:4f:c0:2e:b4:07:29:da:c1:50:69:cb:02:85:0f:c3:
52:bf:c8:87:63:b5:fe:7f:bb:97:51:a5:41:bf:95:31:a5:8c:
ab:f0:b7:8b:17:d9:4e:bb:2d:96:56:ff:38:18:ff:10:5d:77:
2c:cf:98:90:e7:a6:89:d8:59:19:45:64:4a:82:94:d0:ac:2d:
7e:b6:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org