Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/S_R2kmhGAMKw8ikxiWIM_LVLC_g.roa
File: S_R2kmhGAMKw8ikxiWIM_LVLC_g.roa (raw, json)
Hash identifier: NasK2AFPZ+aH8a9XU7HSPeUhDRJ3+XRPOItuRaT+RZQ=
Subject key identifier: 4B:F4:76:92:68:46:00:C2:B0:F2:29:31:89:62:0C:FC:B5:4B:0B:F8
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0181E01509CE5A39A7C872E219862B203935
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/S_R2kmhGAMKw8ikxiWIM_LVLC_g.roa
Signing time: Fri 08 Jul 2022 23:11:24 +0000
ROA not before: Fri 08 Jul 2022 23:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207787
IP address blocks: 45.93.246.0/24 maxlen: 24
45.93.245.0/24 maxlen: 24
45.93.244.0/24 maxlen: 24
45.93.247.0/24 maxlen: 24
2a0e:2940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e0:15:09:ce:5a:39:a7:c8:72:e2:19:86:2b:20:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jul 8 23:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf47692684600c2b0f2293189620cfcb54b0bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:b9:ab:c5:0e:5e:74:2d:d5:2b:a3:39:3d:
99:72:7e:28:15:62:31:d8:e9:15:52:8c:67:77:ee:
f5:dc:c4:bf:6f:1b:24:1d:0e:47:f9:ad:19:40:fe:
5c:55:e5:ae:dc:b6:04:81:88:8d:dd:af:f2:c9:82:
cc:82:c0:37:bf:c3:43:a3:23:c8:3d:ce:5a:f2:ec:
63:7d:56:9c:fc:e0:75:94:dc:c2:04:62:99:d2:09:
b7:35:5e:22:6a:56:9f:81:3a:9a:d9:98:93:3d:53:
1d:d8:8e:35:f9:96:1b:3e:4e:81:0f:b2:ee:9a:8d:
ba:25:46:dc:d6:4c:b4:44:55:52:a0:be:bc:ca:fe:
ae:06:26:07:32:2f:17:00:9a:e7:86:6a:19:db:37:
23:33:47:4c:e5:b7:52:44:d6:12:15:37:c1:ea:89:
33:d0:58:7c:a7:4a:6b:e5:c6:43:a2:63:26:db:31:
55:0a:ce:a2:ee:c9:42:d5:17:6e:b9:7d:36:d7:ce:
22:44:30:d4:f8:1e:e1:80:c2:86:e6:94:27:8a:75:
8c:aa:9e:ef:6a:61:fe:c4:b4:76:7c:97:f7:a1:9e:
dd:2a:d3:8f:4d:10:5f:4c:d4:e5:66:ae:fd:dd:23:
34:65:f9:04:2b:75:fa:ed:56:a4:f2:54:b7:fb:73:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:76:92:68:46:00:C2:B0:F2:29:31:89:62:0C:FC:B5:4B:0B:F8
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/S_R2kmhGAMKw8ikxiWIM_LVLC_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.244.0/22
IPv6:
2a0e:2940::/29
Signature Algorithm: sha256WithRSAEncryption
90:3e:05:46:4f:cb:05:8d:11:3a:9c:1a:e9:1d:cd:3d:d1:2f:
48:95:ad:d4:a4:62:b1:78:be:73:b2:f3:5d:80:2e:ea:08:66:
79:8d:58:ef:2d:b2:ab:80:2b:c2:0f:53:88:47:18:ad:56:bd:
53:eb:4f:c3:16:96:bd:b4:c0:5c:49:47:e3:7c:65:5e:d0:9b:
52:e3:eb:76:46:1e:f9:38:e3:16:92:70:5b:06:5f:1a:a4:d5:
a4:9a:f4:63:27:f6:86:79:d4:13:13:f8:8f:ff:b0:17:e8:4b:
e3:18:9d:58:4a:e4:83:f5:0a:1d:11:25:01:27:c8:25:c7:64:
6d:02:47:ec:3d:8d:ca:cb:ed:1c:df:fa:7a:a7:e4:3f:5d:4d:
b5:90:06:91:77:fc:a7:ce:46:29:f3:10:8a:10:17:02:9b:33:
eb:39:61:37:c6:2a:29:e2:0e:3e:b9:17:26:57:28:4b:fd:d7:
ef:07:c5:25:7c:45:09:c0:55:94:96:71:b9:df:3b:97:76:2b:
e9:46:df:ca:47:2b:0a:fc:96:d8:ed:83:08:88:42:cc:29:13:
24:c7:ae:18:e6:a0:80:b9:51:4f:a7:8c:c1:b2:fc:ec:7c:10:
85:b6:bf:0f:0a:49:f2:06:0c:f4:5f:87:1e:f2:b2:05:ac:74:
e8:91:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org