Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/yH0yIp3txdnZLlXC0UYVnygQwEg.roa
File: yH0yIp3txdnZLlXC0UYVnygQwEg.roa (raw, json)
Hash identifier: dVQ4w5RQlX5+de+5edc2rbyHnIJu24xYQb27J3qlsZk=
Subject key identifier: C8:7D:32:22:9D:ED:C5:D9:D9:2E:55:C2:D1:46:15:9F:28:10:C0:48
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 01848934AA997B5C21961255F6813B197034
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/yH0yIp3txdnZLlXC0UYVnygQwEg.roa
Signing time: Fri 18 Nov 2022 05:27:20 +0000
ROA not before: Fri 18 Nov 2022 05:27:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.90.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:34:aa:99:7b:5c:21:96:12:55:f6:81:3b:19:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Nov 18 05:27:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c87d32229dedc5d9d92e55c2d146159f2810c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:ba:07:e7:e2:39:d5:65:2e:00:5a:e5:57:
c5:52:a4:7c:83:cf:75:a3:73:63:04:1a:f5:b3:41:
6a:55:2f:17:cf:56:b0:c7:a2:0f:8a:70:c9:86:2a:
fc:03:92:a0:0f:33:3d:c7:c1:73:60:f3:9a:7d:be:
67:8c:32:3d:f2:bb:f4:bd:66:57:bd:4e:ea:ae:17:
da:63:5c:6b:66:26:bd:ec:21:a3:90:58:06:20:45:
97:2a:90:31:9f:67:80:22:15:cc:1d:fc:24:0a:56:
2a:be:6f:b0:7b:f8:f9:f3:0e:92:ed:ef:26:2b:5f:
62:e3:3b:4c:ba:04:26:75:e0:a5:cc:58:70:d3:f1:
ec:f3:95:c8:a4:d2:99:8c:34:70:0f:a9:f9:3d:5a:
12:d7:2e:41:3b:9d:fc:02:66:fd:83:b5:10:e9:ee:
1e:83:42:e4:55:5c:fb:79:1c:28:e5:d1:69:b8:58:
9a:4d:9d:b6:d4:e4:90:74:b9:1d:f5:ad:9d:4a:fa:
7a:45:98:db:e7:84:1e:0d:8d:fd:1c:ae:62:4a:b5:
b0:29:6c:ee:d4:de:46:c2:bb:fa:0d:51:2a:cd:31:
3f:a8:07:49:69:3f:d9:23:e6:3c:82:59:ff:8c:90:
84:96:a7:6d:d6:35:99:ba:53:48:e1:9d:74:bb:7c:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7D:32:22:9D:ED:C5:D9:D9:2E:55:C2:D1:46:15:9F:28:10:C0:48
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/yH0yIp3txdnZLlXC0UYVnygQwEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:03:fb:6a:34:af:d5:26:a4:f7:07:88:34:a7:3f:61:de:ad:
48:b2:f5:4b:61:e7:88:f5:e5:38:38:33:8a:0f:c6:15:9e:41:
46:62:e5:b9:30:22:c4:ea:51:49:3b:b5:1a:6c:26:bf:10:f0:
4c:87:f9:52:22:a7:14:54:75:12:f7:b4:42:e6:16:6a:a9:2f:
4e:6f:6d:60:9f:88:3e:76:46:1d:a0:b2:84:0b:65:89:da:f1:
cc:52:74:a9:73:76:19:a5:c5:97:0f:68:5c:55:e6:43:29:c9:
84:b0:e6:5c:00:09:83:cc:7a:34:3f:16:52:b0:ee:3f:8b:b2:
c9:b8:a0:7f:14:e9:eb:ea:3e:7d:93:d4:dd:b3:66:ff:b3:4c:
19:a9:84:18:a0:ab:e1:d2:ff:83:c5:14:76:dd:38:d5:ab:9b:
86:f4:07:f5:22:a3:8f:39:18:ea:f2:d3:fa:78:95:ef:58:f7:
dd:f8:ac:df:e2:23:0c:58:dc:7f:e8:9c:a3:1b:c8:d2:a1:00:
c3:1d:aa:4b:ff:19:70:ab:c1:0d:4c:b0:ff:e5:00:08:9a:a7:
e8:2f:a7:6e:80:d2:cc:d5:e5:dd:3e:ef:b5:c7:e1:92:da:cd:
1e:79:8a:f3:90:c9:d5:75:1d:3a:f7:d9:88:d5:f1:61:1a:2d:
4b:79:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-fra.rpki-client.org