Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VmHevOMakyZBLQbA_jNYUf_oB_w.roa
File: VmHevOMakyZBLQbA_jNYUf_oB_w.roa (raw, json)
Hash identifier: BrfaYZvqOGjIWW/mgxzVTl+F6pzOLCytr8VfpG2G0eg=
Subject key identifier: 56:61:DE:BC:E3:1A:93:26:41:2D:06:C0:FE:33:58:51:FF:E8:07:FC
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0183AAB0225C2E3B003577AC4816E20F21D0
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VmHevOMakyZBLQbA_jNYUf_oB_w.roa
Signing time: Thu 06 Oct 2022 00:26:53 +0000
ROA not before: Thu 06 Oct 2022 00:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.140.244.0/24 maxlen: 24
45.140.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:aa:b0:22:5c:2e:3b:00:35:77:ac:48:16:e2:0f:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Oct 6 00:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5661debce31a9326412d06c0fe335851ffe807fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:da:14:21:59:fd:ea:2a:d9:65:b4:62:97:
d7:77:77:e5:3f:24:4a:cc:85:d0:6f:f3:41:d4:8d:
f7:f0:83:76:32:e8:58:48:fa:93:1e:94:3c:f7:44:
5b:09:54:70:28:8f:53:d6:06:0c:bd:de:ac:72:df:
40:1c:11:8a:aa:ca:23:20:b8:a8:f4:da:28:21:0a:
56:27:01:1e:b2:7d:8d:97:6a:ce:3c:2f:a9:57:db:
2d:30:42:1b:5b:78:b6:95:9f:af:e0:e5:17:e9:86:
4f:e6:c2:0e:99:79:6a:87:ec:e4:6a:3e:57:64:22:
f4:d7:9e:fd:81:8f:3f:3f:fd:b2:c7:4d:3c:21:3b:
0d:86:e4:c0:cc:c5:e2:6c:2d:01:20:36:3c:4f:fa:
d9:33:61:d8:f9:4e:16:a8:c9:3a:58:72:2a:5a:cc:
b1:7c:44:6b:5c:b7:95:4b:a9:87:6a:82:0b:da:b1:
02:86:0e:90:83:dd:92:23:54:c0:28:ee:ce:0b:91:
e0:8b:30:22:c9:35:a7:98:02:89:41:89:57:8d:05:
fb:ad:8c:07:92:54:5f:0b:6a:e3:27:12:3a:d5:92:
78:de:ce:17:07:a5:f7:17:d7:1c:2c:e8:e3:24:14:
51:8b:5f:53:e3:9a:f3:57:1a:14:b1:99:a2:2c:67:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:DE:BC:E3:1A:93:26:41:2D:06:C0:FE:33:58:51:FF:E8:07:FC
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VmHevOMakyZBLQbA_jNYUf_oB_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/24
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5a:51:32:69:aa:88:04:1e:74:4c:1d:fb:f1:a1:04:e1:e1:
c3:a3:9a:38:28:b9:4a:47:0d:1e:b1:c1:b3:52:9b:db:d4:46:
7e:d3:c6:1a:2b:9b:29:68:5a:7f:6b:1b:e4:77:d4:bc:5f:86:
8c:cc:a1:24:d9:74:2f:61:aa:e1:b7:ac:8d:1a:83:8b:38:b5:
80:29:8c:73:0e:1b:ef:cb:73:89:b8:8d:50:8e:99:d6:3e:28:
75:1d:f0:5a:fe:8d:5c:88:1b:ae:d8:8b:d8:ca:da:39:d4:4d:
5d:08:4b:72:53:57:eb:12:92:88:c8:86:cd:e4:f1:96:eb:d6:
ef:00:95:08:fe:0d:c4:ae:c2:23:16:e1:03:21:6f:cd:05:6e:
e1:da:11:d0:40:52:15:08:a3:98:79:ac:64:61:27:93:aa:93:
46:28:a6:52:29:88:c4:34:67:8e:79:10:aa:cf:1f:5f:37:e8:
6b:1a:6b:9c:8c:3e:fb:e1:8e:68:43:5d:33:f4:4f:63:f3:22:
e7:8f:b8:18:67:ab:75:0e:e1:96:bd:8e:25:b5:45:c4:08:c1:
97:24:e7:2c:6b:9e:2b:0c:a5:9f:32:20:80:83:2f:00:e9:1e:
74:76:7c:b6:58:0c:da:d1:49:e9:0f:ba:7d:76:a6:fc:45:36:
ba:7c:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org