Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/I3dXcTU83-z5TqHLBy8NCBSKy20.roa
File: I3dXcTU83-z5TqHLBy8NCBSKy20.roa (raw, json)
Hash identifier: 1AEG+gXBizU9Wbk6EuZ9EOkOzsanLZTPzeXYwm9fYmU=
Subject key identifier: 23:77:57:71:35:3C:DF:EC:F9:4E:A1:CB:07:2F:0D:08:14:8A:CB:6D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01851A58A4B881E6FB9C06EAA5E6B4BBAE9D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/I3dXcTU83-z5TqHLBy8NCBSKy20.roa
Signing time: Fri 16 Dec 2022 09:51:34 +0000
ROA not before: Fri 16 Dec 2022 09:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 45.158.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:58:a4:b8:81:e6:fb:9c:06:ea:a5:e6:b4:bb:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 16 09:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23775771353cdfecf94ea1cb072f0d08148acb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:33:17:a9:90:15:02:aa:d1:38:57:a4:8b:
a2:63:37:2c:32:5b:6f:fa:89:7b:f7:66:88:d3:78:
98:d2:13:c5:e5:63:12:8f:40:13:bc:ad:1e:8b:61:
00:b1:f5:f0:d7:37:8a:8c:89:ad:bf:2a:41:be:fb:
51:a7:c2:30:f8:03:20:9e:f0:4c:65:9f:ea:66:62:
cc:6a:ba:fc:3d:49:91:79:ea:cd:28:e9:e5:d5:de:
ea:bf:fa:5c:b9:5d:b0:41:d3:dd:3d:37:02:be:37:
e5:97:a3:90:8d:cb:be:77:34:71:85:f4:11:85:3d:
f7:c5:c9:7d:79:65:ac:47:2f:f9:36:d3:66:d0:fc:
98:67:ca:79:03:ce:ff:ee:66:70:f2:a1:c8:c6:a0:
23:9e:91:6e:b3:36:cf:06:b3:71:43:da:1e:ee:d9:
98:af:18:cb:27:9a:d1:49:b8:3b:a6:a5:c3:f3:29:
29:cb:14:2c:1d:cf:29:f1:d0:72:55:ae:7e:12:66:
45:6d:19:0e:47:47:45:3a:63:83:46:76:9e:25:6c:
c6:06:ec:bd:42:bf:30:55:cd:85:df:62:73:81:27:
28:f2:ee:f3:2b:25:02:21:70:13:b3:18:82:75:85:
ad:10:7c:81:59:a2:d4:05:f6:a7:a3:08:48:e4:1b:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:57:71:35:3C:DF:EC:F9:4E:A1:CB:07:2F:0D:08:14:8A:CB:6D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/I3dXcTU83-z5TqHLBy8NCBSKy20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.252.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ea:b1:a4:76:89:61:d5:1e:ec:2c:38:13:36:d9:fa:d0:fd:
fc:cd:dc:4a:2c:ed:b0:26:7a:41:2b:72:6e:7d:e4:2d:ca:29:
b5:d7:c9:a4:e7:c6:67:20:25:38:cb:75:9a:72:04:2d:89:93:
00:9d:3a:8d:72:74:33:32:8d:e0:37:3c:08:f6:5c:0f:2a:6f:
f3:2d:24:f1:62:d7:f3:fe:ec:e9:54:6c:02:67:ce:2b:e1:c0:
c3:45:6c:d7:87:18:08:e2:2f:9e:4c:ad:72:03:c2:36:af:aa:
f5:4b:3d:24:8e:88:72:94:77:88:b7:81:be:0a:22:cf:54:9e:
5b:31:ff:39:38:0c:86:be:b4:17:b5:fa:f6:b3:1f:e3:1a:fa:
d9:ae:3a:1d:d9:d0:95:df:de:3d:cf:6f:13:46:3a:c5:df:3a:
71:ed:5f:32:0d:9c:07:69:e8:a3:94:81:6c:e8:0a:15:12:c5:
85:d3:fe:8e:e8:7d:d8:1d:aa:2b:28:36:33:f6:60:11:2a:4d:
59:16:5b:2a:50:a7:c4:f6:e2:ff:81:f5:20:4b:17:ce:a9:c3:
32:62:47:4d:98:d5:a1:d7:85:20:c8:a5:42:ae:f2:2b:fa:56:
0f:5e:41:b6:08:1d:cb:15:cf:54:d3:c5:c1:4e:c8:77:7a:e0:
47:60:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org