Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/srzAgS-W7ZgCeY0TrloiK5WUXQo.roa
File: srzAgS-W7ZgCeY0TrloiK5WUXQo.roa (raw, json)
Hash identifier: MVP6ok2Qbx/KIWpFqcV+w+RGZQdAy3H4Hf3pVyBd9B4=
Subject key identifier: B2:BC:C0:81:2F:96:ED:98:02:79:8D:13:AE:5A:22:2B:95:94:5D:0A
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185267F9B53B9217326AB4E69B3E9E9BF94
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/srzAgS-W7ZgCeY0TrloiK5WUXQo.roa
Signing time: Sun 18 Dec 2022 18:29:34 +0000
ROA not before: Sun 18 Dec 2022 18:29:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:26:7f:9b:53:b9:21:73:26:ab:4e:69:b3:e9:e9:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 18 18:29:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2bcc0812f96ed9802798d13ae5a222b95945d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:38:09:9a:39:fc:6f:77:9d:eb:ec:1b:e1:
23:15:a3:f3:ee:4b:fa:df:94:69:94:34:db:c0:5c:
e0:1b:d0:12:18:40:65:86:15:a5:24:37:13:c9:14:
55:d2:e0:b0:0c:da:01:83:14:e5:cb:84:1a:3d:f1:
54:56:f7:34:9f:73:8b:87:23:65:0a:99:84:cd:c4:
77:99:a3:95:df:b9:28:37:61:51:40:a4:34:a0:f8:
21:35:3d:20:bd:54:7c:33:0e:c6:69:8f:a5:e5:86:
08:7d:dc:d1:0e:e3:83:45:1e:58:22:3e:4b:78:07:
d8:14:91:ce:76:40:7a:93:99:ef:74:d6:be:34:01:
ef:90:5d:06:a2:41:38:6b:fb:1c:09:f7:47:15:a4:
ee:5f:ee:46:92:9e:f9:5c:88:33:3b:18:78:7d:40:
53:cd:9d:9a:98:e8:2c:61:57:6d:09:05:67:3c:9e:
12:04:83:0e:32:81:32:71:a6:51:7c:a3:8f:33:18:
b0:b3:57:5c:93:e7:51:e6:c5:fc:8f:d5:ab:6a:ef:
e5:3b:97:2d:13:4f:0c:91:cf:7b:e1:51:f1:20:89:
e9:e8:58:b9:f7:e3:c1:ab:4d:1e:c2:26:41:a5:d4:
14:02:b6:5a:61:a4:0f:ed:8b:12:ae:70:26:ae:b5:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:C0:81:2F:96:ED:98:02:79:8D:13:AE:5A:22:2B:95:94:5D:0A
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/srzAgS-W7ZgCeY0TrloiK5WUXQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:3b:c1:84:0e:dc:f1:e2:2a:fb:5e:c3:55:ff:5c:77:f7:17:
50:0f:4c:e8:3d:6e:eb:ed:0e:98:d6:83:84:70:f1:43:0b:43:
76:22:3c:95:0f:45:5a:07:6a:9a:cc:16:11:fd:91:72:46:ed:
6b:04:bc:84:50:08:f2:32:38:f9:7a:0d:5a:2c:d5:1f:3f:d5:
e5:77:06:77:24:ae:f6:ef:f7:70:2c:ee:56:0c:4d:79:28:d3:
b6:a6:e6:e7:b6:b2:69:f0:cf:12:85:95:92:57:ce:26:a2:10:
9f:ad:b1:83:3a:0b:85:27:9a:9e:92:aa:23:2f:f5:f6:0b:71:
c1:c0:c8:28:6a:f5:c8:ee:3d:7d:ef:88:b3:ec:2d:e6:ce:05:
7f:4c:9d:c0:b8:41:08:be:0f:bb:01:33:62:53:2a:1e:1c:cf:
60:af:e5:db:85:6a:84:2c:f9:82:d1:81:13:f0:e2:d4:d4:3c:
20:40:ff:91:bf:ae:6e:72:90:35:e9:85:24:8c:a0:d3:5b:38:
14:22:56:08:8e:ca:9d:20:d2:27:f5:8b:33:24:4f:0b:0b:83:
71:c3:2c:d2:ee:ad:34:85:30:44:39:7a:9f:cd:a3:9f:d1:db:
86:3b:67:01:94:85:eb:5d:02:2e:49:f0:3e:ed:1a:bd:c0:df:
75:45:c9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org