Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Rb4_xih1udptYjo38ULmSHVCoVc.roa
File: Rb4_xih1udptYjo38ULmSHVCoVc.roa (raw, json)
Hash identifier: +9n3LIWGgHUbkgwOsx58kkORzlnidpTX2iHSJEedvyM=
Subject key identifier: 45:BE:3F:C6:28:75:B9:DA:6D:62:3A:37:F1:42:E6:48:75:42:A1:57
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01843D83F87D9A28CF2575ABE8089D9F55FB
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Rb4_xih1udptYjo38ULmSHVCoVc.roa
Signing time: Thu 03 Nov 2022 12:42:49 +0000
ROA not before: Thu 03 Nov 2022 12:42:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210423
IP address blocks: 84.236.234.0/23 maxlen: 23
95.178.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:83:f8:7d:9a:28:cf:25:75:ab:e8:08:9d:9f:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 3 12:42:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45be3fc62875b9da6d623a37f142e6487542a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:ad:56:cf:bd:a7:87:8f:f6:7b:89:16:6b:
f4:b8:ee:e6:47:2e:9d:33:27:e1:02:2c:97:18:c8:
23:94:6b:cc:40:ea:80:0b:33:a7:d5:72:c9:ef:e9:
b6:2c:b8:a2:95:a5:a4:eb:01:4c:7a:2c:ab:08:0e:
27:ac:cb:50:08:c2:a9:c8:5d:36:9c:6a:cb:11:88:
d7:4e:d9:ec:43:2a:4c:d9:4e:1f:08:35:86:6e:5b:
8a:8c:a5:b2:e2:94:99:82:9b:3e:14:a7:b9:7d:c0:
ed:f0:98:7a:e5:21:d4:e0:30:4c:c8:fa:35:01:da:
71:c4:5e:5e:1a:5a:a6:36:96:60:3e:56:1c:8e:af:
cc:d9:45:b4:18:30:d2:13:25:d0:2b:c4:85:a1:02:
0d:6b:e2:7e:47:bc:bb:77:ba:5f:7e:2a:ee:4b:55:
f3:5b:93:31:d6:9f:d7:c8:27:70:99:41:6e:1b:ac:
03:39:7c:99:02:af:ce:e9:9e:64:fd:72:be:fa:0d:
34:d7:9f:ce:77:21:55:69:33:79:96:01:0c:b3:82:
de:2e:b8:38:e2:59:2b:90:74:4c:2d:32:c0:ea:d5:
2b:54:f3:d6:89:5c:f4:a3:fa:fa:a8:81:78:5a:72:
41:70:3c:1d:06:14:17:8e:a4:97:0b:ac:94:5c:7b:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:3F:C6:28:75:B9:DA:6D:62:3A:37:F1:42:E6:48:75:42:A1:57
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Rb4_xih1udptYjo38ULmSHVCoVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.234.0/23
95.178.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:a0:ba:f3:91:c6:cc:82:aa:74:18:c0:fd:7f:f0:7e:e5:af:
ff:66:4f:a0:06:55:00:38:2f:10:0c:87:fb:00:91:a0:28:40:
da:fe:90:d3:03:98:33:16:f9:ac:35:90:30:be:c0:84:9f:19:
6a:af:2f:7b:5b:2b:34:6b:66:96:a7:f0:04:51:c2:47:4e:2e:
a4:a6:11:68:e1:d0:5e:b2:2e:c5:25:fb:6a:57:c1:a9:56:f8:
b9:15:bd:00:a0:62:dd:e6:6b:56:b9:92:a3:0d:46:47:b8:31:
6b:6e:2c:37:e0:76:6a:f9:45:19:11:d9:2a:82:1a:85:bd:2e:
c8:34:86:bb:b4:db:f9:de:84:ff:9f:16:c2:37:de:ee:bd:9c:
07:6c:05:f9:ce:c6:d7:65:7b:31:99:7b:ab:55:e3:ee:88:7e:
4d:4e:e1:2d:45:4a:bd:da:ee:7c:6e:4b:17:42:b8:e3:88:0f:
de:9b:c9:95:5a:be:d7:4b:25:3e:43:f0:27:54:13:a6:9d:00:
6b:9a:96:c0:c7:aa:6f:88:2d:ae:dd:01:5f:ac:57:2f:a5:e0:
b5:3b:fe:e3:b9:f2:2e:5e:a4:ba:8c:0b:1b:b9:64:5f:64:35:
94:0f:1e:d5:f1:25:71:0d:9c:8e:2d:f6:29:90:10:dc:38:a7:
75:2c:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org