Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/XqJ6cNUI_emF9pbSWDRB4voKSR4.roa
File: XqJ6cNUI_emF9pbSWDRB4voKSR4.roa (raw, json)
Hash identifier: HnWHy7vHWRvm+YixLmBsQRMpraCg7FwBuHTwVAIXLp4=
Subject key identifier: 5E:A2:7A:70:D5:08:FD:E9:85:F6:96:D2:58:34:41:E2:FA:0A:49:1E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 08787748
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/XqJ6cNUI_emF9pbSWDRB4voKSR4.roa
Signing time: Wed 02 Feb 2022 08:09:46 +0000
ROA not before: Wed 02 Feb 2022 08:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48814
IP address blocks: 45.94.148.0/24 maxlen: 24
45.94.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142112584 (0x8787748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Feb 2 08:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea27a70d508fde985f696d2583441e2fa0a491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:5e:0e:8e:65:2c:7e:a7:9c:41:a8:39:8a:
e7:7f:82:64:6f:44:26:1f:c7:54:52:d5:3a:d6:85:
af:f9:57:3f:07:ae:d2:ae:e9:9d:05:89:0f:4d:d3:
3a:89:dc:57:cc:8e:94:a4:17:10:db:db:04:cc:ca:
5a:af:7c:9c:da:50:e7:f0:3d:1f:88:f1:e0:af:72:
42:e3:c7:be:6a:a4:e2:f1:b0:cf:0c:ae:c1:49:32:
f7:c2:96:85:8f:92:14:c1:da:c4:05:ca:cf:1b:5f:
88:d3:8f:f3:36:25:58:56:1c:bc:70:31:23:0f:37:
b9:c2:30:c0:a3:ac:d3:9e:3e:9b:3f:b5:78:2a:60:
c7:9f:24:c0:b7:a4:3f:d3:3a:3c:0c:ae:69:fe:0e:
32:1c:a4:95:84:c0:00:be:0f:f9:a2:3f:8c:c9:50:
02:41:a2:08:3f:2f:c9:bb:eb:c2:b5:44:4c:b9:98:
09:7a:bb:b4:0f:2e:08:cc:06:8b:e6:3c:3c:3d:64:
b2:07:d0:83:c9:09:73:71:03:f1:2f:04:94:ce:1d:
17:59:e6:af:e0:9a:95:99:0b:33:3e:d1:c8:51:b4:
45:a1:55:ec:0f:be:03:12:d9:c2:80:0c:95:6e:13:
21:4a:ce:58:09:86:3d:90:bb:48:66:c2:55:43:b9:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:7A:70:D5:08:FD:E9:85:F6:96:D2:58:34:41:E2:FA:0A:49:1E
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/XqJ6cNUI_emF9pbSWDRB4voKSR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/24
45.94.151.0/24
Signature Algorithm: sha256WithRSAEncryption
56:81:0a:b7:c8:b0:eb:4f:9a:8c:96:bf:71:f6:06:b5:2c:28:
39:c0:02:9e:05:7c:f9:0f:8c:36:a4:1a:50:02:dd:3d:59:2c:
eb:4c:df:fe:ef:ab:57:7c:99:9d:96:8b:48:b9:3f:2e:a3:32:
5b:d6:ab:bb:14:89:f1:56:7d:c3:e1:d5:03:85:27:74:7c:0a:
58:9e:56:58:c9:9d:d5:62:79:0a:2c:47:ba:74:f7:e0:6c:75:
0f:ba:9f:0a:9d:f4:9e:a4:7a:1d:7a:8a:9d:60:29:20:dd:4d:
ea:bf:05:e2:07:8a:af:bc:18:f0:37:bd:cb:42:f9:68:eb:0c:
f8:0e:65:c9:55:5d:cc:c2:23:32:d3:44:ab:f4:f8:f8:9c:19:
3d:35:e8:c6:df:dc:f0:61:43:b8:fa:f3:08:0d:2f:5c:8b:f6:
2b:d7:4d:bc:76:d0:69:b4:56:eb:c7:ec:c9:3a:b2:40:e1:8f:
3e:48:5c:10:e6:6f:a4:26:39:b4:7e:3f:0c:b4:35:bb:e7:10:
4f:c2:3d:c9:e0:b7:4f:8d:f3:9b:17:29:bc:b2:6a:6b:87:c2:
46:b5:b6:28:a4:c9:74:b6:d5:db:ae:3c:bd:c3:9f:fc:9a:5e:
ba:ed:37:ba:a1:ab:cd:13:91:c0:8c:7d:0e:e5:73:1f:55:0c:
a3:90:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org