Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/DERpDqmf1V6ZqziF0iULeyJtR6E.roa
File: DERpDqmf1V6ZqziF0iULeyJtR6E.roa (raw, json)
Hash identifier: gM3E9OGV4b7kXUKRNH/Lua/Bwt4yYQmg1OTQ+SI+TAI=
Subject key identifier: 0C:44:69:0E:A9:9F:D5:5E:99:AB:38:85:D2:25:0B:7B:22:6D:47:A1
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: DAADAF
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/DERpDqmf1V6ZqziF0iULeyJtR6E.roa
Signing time: Tue 08 Mar 2022 16:39:29 +0000
ROA not before: Tue 08 Mar 2022 16:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 45.142.152.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14331311 (0xdaadaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Mar 8 16:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c44690ea99fd55e99ab3885d2250b7b226d47a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:ea:59:c9:40:e5:ef:58:bc:70:19:54:8f:
d1:7c:93:7d:13:6a:8b:db:27:7a:2c:ce:4d:e5:54:
78:2b:1b:fd:cf:1e:4c:eb:8b:e3:d8:c0:93:06:f3:
6e:3e:03:4f:f7:c4:dc:85:ae:80:cd:0a:27:6d:d3:
46:f0:ef:f8:0c:86:01:d5:b2:d4:a1:97:c8:3a:2a:
d0:d8:c7:c4:74:6e:b8:b4:4e:89:0f:b3:06:b3:b9:
66:f0:75:de:81:e2:72:c1:4b:9a:9c:5c:44:aa:46:
c4:4e:81:8e:66:f7:fa:47:06:11:5b:05:88:58:3c:
aa:37:9c:51:97:ad:f2:d0:61:0a:b6:68:c5:6d:5e:
77:43:dd:40:9c:2e:c2:d2:48:1d:c4:c6:03:10:2f:
f4:c3:b3:06:4b:81:cb:33:56:68:5f:ae:f8:cf:2c:
12:7d:f8:b4:c2:10:56:54:bc:57:62:9e:35:e7:66:
5b:df:53:76:d3:17:99:bb:32:98:43:bc:ca:c6:25:
e8:2a:81:51:7e:23:99:cc:4c:84:38:78:26:38:8b:
af:7e:b8:01:52:8f:4d:04:f8:56:97:16:60:92:67:
96:43:b1:5a:8f:81:47:e9:d1:a7:23:22:dc:7d:37:
01:8e:80:99:11:55:12:ff:20:8f:13:b9:fe:c7:5e:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:69:0E:A9:9F:D5:5E:99:AB:38:85:D2:25:0B:7B:22:6D:47:A1
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/DERpDqmf1V6ZqziF0iULeyJtR6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/22
Signature Algorithm: sha256WithRSAEncryption
83:02:61:6c:19:dd:59:6a:43:1e:a1:18:41:4d:9a:00:86:b4:
51:f0:59:0d:96:d7:ba:ed:96:a5:f2:80:9e:e0:f1:49:9f:cb:
ab:4c:c0:e5:66:5d:10:1a:1f:b8:fe:bb:80:25:be:fa:ff:d5:
26:fe:1d:be:ea:a2:22:4a:40:87:e8:ee:55:be:89:b9:a0:74:
51:5d:24:b0:0c:a2:55:48:84:1e:b1:65:ff:68:fb:6d:dc:4b:
ea:f6:1e:16:86:7c:a3:e6:a1:14:61:2e:bf:c8:8a:89:1a:77:
12:97:b3:f5:64:fb:bd:de:77:20:87:72:5d:9b:1f:30:3f:8a:
69:fa:b3:70:43:81:87:4b:1b:58:4f:62:e9:14:40:96:f0:c1:
4c:eb:56:44:82:28:84:e7:92:63:87:eb:11:16:01:5a:76:98:
8f:dc:67:4b:df:12:99:bf:56:2e:19:15:1e:2a:58:a1:4e:16:
d9:f3:5a:63:20:d7:ea:c6:1b:89:4d:64:e3:c2:3d:9c:a9:c7:
bd:6b:47:86:16:57:a0:3f:cc:e2:df:90:ce:5d:93:91:61:0e:
94:75:34:20:98:8a:6e:35:9b:4f:6e:93:ae:52:48:1a:d8:9c:
fe:21:ea:f7:10:e9:ae:91:22:45:31:35:30:76:5f:c6:ff:86:
d0:2b:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org