Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/jxg8D9gKNlle0EOJ9tgC9JsUoWQ.roa
File: jxg8D9gKNlle0EOJ9tgC9JsUoWQ.roa (raw, json)
Hash identifier: yVU0bmlWUXwq+1IoRNL/n1elNNlrKGJX1qXPG4Fa6Uc=
Subject key identifier: 8F:18:3C:0F:D8:0A:36:59:5E:D0:43:89:F6:D8:02:F4:9B:14:A1:64
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 0712B84F
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/jxg8D9gKNlle0EOJ9tgC9JsUoWQ.roa
Signing time: Sat 01 Jan 2022 03:59:34 +0000
ROA not before: Sat 01 Jan 2022 03:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208721
IP address blocks: 45.14.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118667343 (0x712b84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Jan 1 03:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f183c0fd80a36595ed04389f6d802f49b14a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:32:de:d7:db:f1:ae:de:57:7b:94:39:af:
70:f0:e0:36:e7:28:ae:7e:fa:5d:af:db:38:5a:37:
00:d5:5b:5f:1b:b4:f2:15:6f:2d:77:65:68:6e:d6:
94:eb:c0:d4:d7:82:84:bf:6f:8e:64:56:7c:7f:20:
0d:9d:3a:5a:f0:7e:e8:0d:2b:ec:d4:73:f8:82:dc:
20:3d:7b:85:e3:15:bd:fe:0e:ec:d6:54:0f:65:d4:
d3:e6:99:ec:9b:65:ce:dc:bc:1b:fb:e7:1d:92:52:
c7:24:f0:35:b8:29:9a:8b:7c:1b:96:72:51:60:d4:
3b:c4:a7:64:7a:50:6c:1d:c7:0d:e0:95:00:ec:11:
f9:d7:5c:da:5b:3b:d8:98:c8:45:8f:d5:81:3b:87:
9c:8d:94:a0:7c:93:9c:15:c2:c5:33:4b:6e:6f:ca:
7c:84:ba:05:92:25:7d:4c:bf:df:d0:ce:f1:94:87:
6d:ef:14:8b:bc:e0:8f:5d:26:7b:6b:48:dc:2e:0d:
71:c7:11:4e:0d:c1:5b:62:c4:80:4e:9c:4b:56:84:
97:97:af:7e:a8:cc:80:8e:93:f8:28:c2:e1:bd:d5:
3a:19:19:e2:5a:38:0d:90:35:57:73:98:ed:0b:50:
8e:b1:1f:4b:cb:b9:d3:11:56:87:ad:1b:8b:16:8b:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:3C:0F:D8:0A:36:59:5E:D0:43:89:F6:D8:02:F4:9B:14:A1:64
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/jxg8D9gKNlle0EOJ9tgC9JsUoWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.116.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d6:a3:c2:60:db:65:31:a5:46:a4:5e:e8:7d:bc:6a:d2:5d:
d4:c4:72:69:22:8b:76:c8:d6:55:86:88:30:21:bd:d7:5e:fa:
ee:f5:37:0b:3c:94:fa:5e:3b:7b:38:21:ad:86:1b:e2:10:d6:
da:d6:0a:11:45:2f:16:53:a5:47:48:b5:ca:3b:89:7c:6f:79:
9e:1e:9e:05:ff:81:47:0e:bc:df:0e:f8:d5:33:cf:a1:86:3e:
ea:e8:d2:8f:39:5c:44:dd:6e:14:f0:3a:7b:c3:55:d1:d8:b9:
f4:f4:ae:8f:cc:b4:3c:6c:4e:68:90:5a:80:57:ef:0f:04:5b:
0b:1f:6f:ca:91:1b:72:82:61:c6:4f:c9:cf:c7:43:58:1c:5c:
37:57:c4:d3:d7:50:1d:5a:51:30:75:b6:bc:e7:c6:bc:7e:8b:
a4:54:ba:ec:99:37:b8:07:75:e6:d8:25:74:ca:cf:26:0e:96:
fa:e1:f3:25:04:cf:ad:36:99:16:4d:43:28:45:c2:c5:8a:56:
5e:c5:7f:78:70:f1:05:e8:3b:49:64:73:98:ff:4e:c5:45:0f:
3c:c2:a0:ed:61:00:96:b7:87:5e:21:67:73:a7:b9:31:eb:07:
a7:a7:c0:d6:e9:d8:b8:a8:06:65:bd:d1:ac:ac:c3:e2:a1:3c:
d4:85:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org