Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/KrMzwL6kWILbea9GpmnZFDvvAko.roa
File: KrMzwL6kWILbea9GpmnZFDvvAko.roa (raw, json)
Hash identifier: eRPAkNE4vfZFM+dXAggPlJDv5twBz6+XJeOWTYR3ca0=
Subject key identifier: 2A:B3:33:C0:BE:A4:58:82:DB:79:AF:46:A6:69:D9:14:3B:EF:02:4A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01823CB536E31802A7126529515D88288AB0
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/KrMzwL6kWILbea9GpmnZFDvvAko.roa
Signing time: Tue 26 Jul 2022 22:51:25 +0000
ROA not before: Tue 26 Jul 2022 22:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.128.0/20 maxlen: 24
45.154.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:b5:36:e3:18:02:a7:12:65:29:51:5d:88:28:8a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 26 22:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab333c0bea45882db79af46a669d9143bef024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:72:b2:f4:b7:ca:dd:4d:76:3f:97:c9:7c:
f5:1f:39:e1:ec:f6:85:96:f0:8e:0d:e6:65:ba:72:
8e:48:4f:2a:c8:d7:07:72:f3:85:55:34:24:00:60:
cf:69:c2:7a:0e:09:87:3f:03:c5:ef:50:05:d2:6e:
4a:ac:41:20:cb:29:28:fc:23:ea:db:da:c3:a5:1a:
16:55:a1:ec:7a:c4:72:43:5c:61:94:ce:f2:12:0a:
69:d7:72:40:b6:f9:b4:28:a5:02:79:5c:2e:f9:32:
67:b3:7d:52:d8:24:a4:11:0a:31:ea:07:0b:79:f8:
4c:f5:08:62:3a:ba:71:e3:94:17:d0:91:ba:7a:ae:
60:f8:a2:fb:3d:c3:0e:fe:8b:04:55:a2:0c:dc:83:
a3:93:ac:e3:f1:84:08:2e:ca:73:76:10:64:2b:6e:
05:a6:c5:31:c0:92:1c:aa:2d:ce:c8:08:b7:25:14:
f3:b3:c5:6b:96:16:8a:1c:68:25:18:c9:2b:97:b8:
5d:2e:c5:21:76:4e:88:fd:b0:21:4e:4c:e1:f2:8f:
1e:7f:81:ad:81:c8:61:73:f7:e3:6f:20:f2:9d:84:
1d:c9:ec:5f:31:68:46:ab:5f:c7:90:3a:73:68:11:
b1:a6:c7:15:0d:e0:b0:af:c1:4c:b8:5a:a4:aa:84:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:33:C0:BE:A4:58:82:DB:79:AF:46:A6:69:D9:14:3B:EF:02:4A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/KrMzwL6kWILbea9GpmnZFDvvAko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.156.0/22
188.209.128.0/20
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
78:39:7f:a7:31:68:e9:9a:3c:54:a6:96:d0:2a:d9:2f:44:5a:
41:6e:c9:4e:39:9b:9a:ca:37:40:c8:fe:54:25:4b:4d:31:77:
c5:b5:e0:c4:6d:df:3b:92:ab:91:1a:16:9d:01:f1:d3:e0:39:
2c:84:be:6d:a7:48:a8:97:c7:da:ac:d1:90:cf:cf:c0:24:14:
93:25:42:cc:e8:03:d3:67:fc:94:0e:4f:1d:11:21:c5:7a:99:
22:1c:56:32:a3:30:b7:a1:9c:98:c2:d4:c6:68:09:65:87:d5:
a9:40:3d:90:f3:b7:6f:80:8c:10:8c:c9:0f:96:0e:8f:88:9c:
b0:88:d6:cd:98:c5:ea:8d:2c:1c:ea:e5:17:c5:bc:be:7b:c6:
f5:53:45:ff:c3:99:28:83:35:bd:19:44:a4:8d:3f:6a:48:82:
85:a6:56:1f:fa:9d:ce:50:1f:a7:fa:a4:e4:9f:18:25:97:59:
e7:15:af:36:a9:66:02:3c:d7:95:ba:6c:1d:63:a0:19:2a:b9:
8e:33:d8:74:3b:f4:e4:92:f7:4f:8a:81:61:16:a2:d9:9d:1d:
77:55:62:70:e6:73:7e:de:be:64:4c:2a:b4:00:b2:c5:e4:1e:
2a:23:a4:34:9e:2b:f4:72:33:40:7d:b9:8f:35:de:c8:ba:61:
4b:8e:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org