Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/sx1qupLEKoh0Mp_5m35L1_FYrkM.roa
File: sx1qupLEKoh0Mp_5m35L1_FYrkM.roa (raw, json)
Hash identifier: 4sivBOeWkMWFc3Fu8mYJqLmZ1s5/UpPRd8/q0SM/WqA=
Subject key identifier: B3:1D:6A:BA:92:C4:2A:88:74:32:9F:F9:9B:7E:4B:D7:F1:58:AE:43
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 08A464A1
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/sx1qupLEKoh0Mp_5m35L1_FYrkM.roa
Signing time: Thu 14 Apr 2022 12:01:00 +0000
ROA not before: Thu 14 Apr 2022 12:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50019
IP address blocks: 45.131.197.0/24 maxlen: 24
45.131.198.0/24 maxlen: 24
45.131.199.0/24 maxlen: 24
45.131.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144991393 (0x8a464a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Apr 14 12:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31d6aba92c42a8874329ff99b7e4bd7f158ae43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:00:e2:e7:77:2b:5d:0a:d7:54:53:88:14:
1b:98:4c:96:4e:59:6e:3f:83:a4:c8:b9:15:55:a0:
12:3b:ad:29:54:67:38:bd:02:8e:72:b7:26:99:29:
4a:13:cf:f7:91:b7:02:87:1e:5d:ed:c5:dd:7c:6a:
69:7b:3a:c2:d4:df:7d:5d:24:28:d5:b8:78:44:9f:
37:df:06:96:d7:8a:fd:2d:6b:ae:6b:a3:d8:e7:86:
72:39:9f:6a:72:59:8f:6c:ba:bf:6c:e6:ac:ad:28:
54:bb:2c:df:0e:7e:db:f4:3f:de:e6:2d:a8:5f:8a:
a9:5c:94:5b:39:c7:da:22:0f:24:2b:0b:b8:27:a9:
0d:90:32:b5:ab:2f:d0:3f:ec:61:82:dc:7e:39:c3:
21:b0:38:14:40:8a:c1:0b:20:ca:08:e6:e5:fa:1e:
04:ea:0b:0c:66:53:a0:c0:05:35:29:c3:c4:18:9d:
50:bb:f9:e5:54:ef:93:fc:3d:37:ec:d7:7f:63:db:
2c:ed:7d:e8:6e:c2:8b:0c:51:8e:32:bc:7d:8e:e8:
be:b6:37:dc:d8:c9:86:75:6a:fc:1b:c0:41:99:59:
02:e4:20:a4:16:8a:79:ed:0b:a1:69:5a:57:09:a7:
bb:37:06:22:42:4d:96:c9:7f:3b:80:03:b1:38:5b:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1D:6A:BA:92:C4:2A:88:74:32:9F:F9:9B:7E:4B:D7:F1:58:AE:43
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/sx1qupLEKoh0Mp_5m35L1_FYrkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.196.0/22
Signature Algorithm: sha256WithRSAEncryption
39:02:de:f1:0d:93:58:01:73:ed:1a:a7:ac:67:22:2a:4d:d1:
7b:a1:46:0a:41:ac:ff:2d:57:25:3a:08:64:f2:48:b2:6e:31:
eb:28:5c:c8:d8:36:5d:6e:be:18:58:2a:57:45:4a:d7:3b:3c:
f6:0a:ae:83:d1:c6:07:07:de:c3:7d:9a:c5:46:1c:17:9a:bb:
4a:1c:99:4a:3e:4d:62:8e:85:fe:84:d6:60:e2:da:7b:37:68:
96:2d:c5:21:5b:b3:c5:d5:b6:a8:c2:cf:95:1a:e8:e7:95:36:
8e:09:40:6d:b8:d5:e4:06:93:80:11:34:2a:8f:64:ac:2f:5c:
51:d2:28:2a:52:2c:82:b3:8b:1f:cf:dd:c1:37:00:ee:9f:10:
4a:1c:ec:ec:dc:71:ef:ee:e5:13:65:66:a4:75:6d:2f:ee:bd:
a4:53:72:be:52:03:84:a3:92:cb:55:d2:49:0e:21:41:90:28:
6b:22:90:cc:86:16:19:99:6d:69:be:19:14:9d:a4:f4:b6:de:
43:3a:95:7c:d0:96:0f:f6:e6:6a:7e:b6:04:e7:80:fb:cb:d0:
b8:f3:0c:e0:1e:71:12:85:c5:d8:0a:62:71:da:2f:1d:26:4d:
f0:4f:24:65:7b:59:b8:76:62:12:03:ff:42:61:3f:ad:c0:b5:
1d:46:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:33 2023 by rpki-client on console-ams.rpki-client.org