Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/p3HLRHuGml3cXAY16nBFFoX2uZU.roa
File: p3HLRHuGml3cXAY16nBFFoX2uZU.roa (raw, json)
Hash identifier: fELOGrfufyYfv0dgpGpMqps0sbUP2lFDvY9ifHrplHU=
Subject key identifier: A7:71:CB:44:7B:86:9A:5D:DC:5C:06:35:EA:70:45:16:85:F6:B9:95
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0141CEA0
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/p3HLRHuGml3cXAY16nBFFoX2uZU.roa
Signing time: Sat 01 Jan 2022 03:56:24 +0000
ROA not before: Sat 01 Jan 2022 03:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10010
IP address blocks: 45.90.85.0/24 maxlen: 24
45.90.86.0/24 maxlen: 24
45.90.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21089952 (0x141cea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 03:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a771cb447b869a5ddc5c0635ea70451685f6b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:6c:f7:e8:d0:b2:6c:b2:69:5c:0c:bb:33:
5a:4e:b8:ad:f2:2f:2c:ea:b3:3f:10:82:56:c5:93:
43:bf:16:3b:e8:60:60:a0:f7:7f:1a:94:d3:dc:2d:
ba:b0:b5:c8:be:98:e4:38:73:b8:50:05:76:bf:36:
ba:cd:44:fa:c5:bf:85:5c:46:35:df:63:6c:10:ce:
2d:aa:25:f6:62:fc:96:4d:b4:ea:89:fb:a6:50:be:
de:c6:68:95:b8:8a:0c:25:3d:a8:50:35:25:94:09:
77:4a:1f:13:57:38:e4:8d:8e:e5:01:14:18:a7:64:
14:7a:b3:e8:be:11:56:ea:51:66:58:19:77:f9:a2:
1f:b3:55:9a:9b:b2:ed:46:16:de:6e:33:00:33:4e:
07:f1:1a:ff:4d:14:c6:7f:92:0a:48:5c:cc:3e:fc:
ef:48:c6:64:b8:1f:01:e5:ca:d0:7c:be:d9:cd:9e:
7b:19:c9:c1:65:98:00:1d:75:f5:a1:0b:5c:46:fe:
ae:3c:6b:c4:81:e9:a3:d2:54:1f:86:fb:01:2e:b6:
4c:07:d2:05:07:92:6f:1e:32:71:68:d8:ec:be:33:
f8:72:08:f7:d2:96:96:16:13:30:a7:38:90:ae:c3:
a0:7a:78:a3:59:6c:ab:48:97:12:60:d2:e8:83:4b:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:CB:44:7B:86:9A:5D:DC:5C:06:35:EA:70:45:16:85:F6:B9:95
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/p3HLRHuGml3cXAY16nBFFoX2uZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.85.0-45.90.87.255
Signature Algorithm: sha256WithRSAEncryption
4b:46:95:61:3e:c8:0f:68:61:b1:47:83:21:d5:1c:0e:f3:23:
d2:bc:ea:3e:08:55:9d:a6:5e:b1:60:f0:27:49:b4:1f:4e:ab:
46:47:7a:f3:b9:77:14:27:af:00:d8:d7:ab:6c:a8:96:f2:7e:
bc:fd:82:5e:32:41:72:da:46:0b:64:e4:52:c1:9f:05:bf:d3:
86:2d:2a:87:bc:93:2b:34:c4:9d:5b:32:a0:a2:81:13:fd:48:
a4:5f:6f:8f:a4:98:8d:b0:cc:4e:c9:b3:d3:f9:2f:68:d9:33:
34:63:fe:12:b9:51:b7:f0:b3:d0:ba:84:57:66:8c:d4:21:6e:
a7:7d:94:d3:af:e9:9f:23:85:7e:d0:23:0e:df:8a:14:c6:41:
25:ac:93:45:6a:58:02:e5:10:ea:94:11:88:44:73:6e:d5:b7:
94:71:87:fd:95:79:02:11:e6:5f:3d:e2:68:99:f6:b5:ac:74:
1f:f0:3e:2b:34:6b:2a:9f:5b:30:a3:46:27:5c:a5:e2:73:c1:
8c:2a:06:25:46:28:dc:54:b7:80:c6:ef:49:ae:54:43:ed:a1:
8d:fa:95:d5:a3:e6:c1:10:11:9f:1c:38:1f:ef:f6:e1:b8:37:
b3:41:9a:2e:50:71:e9:93:f4:2b:05:9c:8a:26:40:19:18:ec:
0a:b0:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org