Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/MsU5SkDGdh9KUz29zQAkUIkjJ_E.roa
File: MsU5SkDGdh9KUz29zQAkUIkjJ_E.roa (raw, json)
Hash identifier: 6qCI8WmuS18DXxNMcD9cDgcY9Ha6y0Q/BOuiSv6WFJU=
Subject key identifier: 32:C5:39:4A:40:C6:76:1F:4A:53:3D:BD:CD:00:24:50:89:23:27:F1
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 073F793F
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/MsU5SkDGdh9KUz29zQAkUIkjJ_E.roa
Signing time: Sat 01 Jan 2022 07:59:35 +0000
ROA not before: Sat 01 Jan 2022 07:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205986
IP address blocks: 45.155.183.0/24 maxlen: 24
45.155.180.0/24 maxlen: 24
45.155.181.0/24 maxlen: 24
45.155.182.0/24 maxlen: 24
45.155.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121600319 (0x73f793f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Jan 1 07:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32c5394a40c6761f4a533dbdcd002450892327f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:b9:14:dd:b0:68:6f:93:b2:2a:ab:f7:dd:
cb:64:bc:d4:d7:57:dc:73:27:33:a7:39:22:f1:4f:
f0:38:dc:b7:77:20:b6:1c:31:50:9e:d5:fc:8b:88:
91:04:af:a4:01:22:1b:47:37:d5:d0:23:d0:95:92:
bd:e7:b4:8a:ef:27:82:76:9a:fd:7c:73:7e:43:02:
ca:10:3a:50:0d:b2:0a:9f:7a:e1:9a:e9:c7:29:8a:
0c:c2:36:f4:ae:8b:dc:73:fa:ad:a1:fe:a0:6c:7b:
37:58:d8:e7:57:91:80:c7:3e:4d:01:bd:eb:bb:ff:
6b:d4:dc:7c:1e:ab:58:9b:0b:22:58:df:3a:b5:21:
32:8d:a0:ea:ac:62:3e:9e:09:fa:6c:5b:e7:e4:ec:
d2:63:0d:e9:65:e4:5f:2c:b2:90:96:69:66:e7:4a:
67:46:c3:2a:db:28:fe:bd:09:3b:d4:a9:50:04:64:
58:82:12:5f:81:5d:9b:2f:6e:a6:74:9f:b6:1a:94:
c0:bb:72:ae:93:34:07:5b:3d:c4:29:39:3e:8f:b6:
c4:80:35:7a:74:d3:5f:c8:3f:89:e0:46:c9:fc:8f:
3c:6b:e6:57:53:15:74:12:10:5a:3d:40:7b:eb:96:
e8:b0:f5:86:45:d3:e9:cb:66:36:67:6d:e4:d8:d0:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:39:4A:40:C6:76:1F:4A:53:3D:BD:CD:00:24:50:89:23:27:F1
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/MsU5SkDGdh9KUz29zQAkUIkjJ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c6:de:6c:69:68:86:c5:18:97:47:22:1e:33:f6:7e:c4:1d:
a7:0a:7c:de:fc:fd:45:9d:87:56:af:b7:17:64:2c:d7:61:8d:
42:87:16:29:84:00:cc:91:cd:fe:0d:88:69:c1:70:fa:51:18:
f2:3a:34:fa:13:35:9d:39:d0:ee:34:0d:38:76:71:6f:38:0b:
bc:cb:b8:2a:c2:af:7d:7f:2f:30:0f:e2:bc:e5:8e:3f:db:c7:
0b:64:fc:4a:57:2d:d3:75:3c:ab:34:fd:a0:a0:b3:51:98:66:
64:f6:61:44:d2:28:bc:d3:5d:fd:9a:7a:50:f3:a1:41:d9:43:
0e:fd:11:e4:ca:c1:2a:47:b4:0d:01:02:e1:d0:57:05:6d:1a:
78:76:ac:4f:84:83:5f:8a:b1:a8:b3:36:52:bd:6c:96:c8:b3:
cb:b6:9e:53:bc:cb:3d:95:c9:d6:a4:37:84:09:99:01:7a:4c:
60:00:02:8e:c9:87:c2:87:f3:b7:0e:6b:e0:21:9f:4e:b5:f1:
6a:36:92:cd:f3:81:f4:36:c2:4b:eb:a7:3d:4e:83:fc:2f:bd:
a9:1d:9c:1f:7e:17:df:8a:55:d5:38:fe:24:02:a9:d0:c1:d4:
8e:cd:20:e2:e8:ce:91:d3:45:1e:a0:ed:54:e4:26:07:31:91:
55:26:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org