Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/BUjGrZ-LqJ7KEzP18D81y8fvPNs.roa
File: BUjGrZ-LqJ7KEzP18D81y8fvPNs.roa (raw, json)
Hash identifier: w5cxpc7yiQcnY/RkCXp3a90ksS1gumdxE2YoUEhaqoY=
Subject key identifier: 05:48:C6:AD:9F:8B:A8:9E:CA:13:33:F5:F0:3F:35:CB:C7:EF:3C:DB
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 075E7111
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/BUjGrZ-LqJ7KEzP18D81y8fvPNs.roa
Signing time: Sat 01 Jan 2022 02:00:38 +0000
ROA not before: Sat 01 Jan 2022 02:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.89.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123629841 (0x75e7111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 02:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0548c6ad9f8ba89eca1333f5f03f35cbc7ef3cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:8a:f8:1e:20:16:59:5d:4e:8a:47:6d:7b:
b9:33:5d:a2:b2:18:51:4b:37:ac:0a:2a:ca:6e:0b:
9d:d2:8c:fb:16:1f:a1:b3:7d:d3:0a:7b:76:6d:ad:
a5:d6:7e:ee:ca:6d:ac:d4:09:f2:b3:f3:98:c7:f5:
0a:a3:dd:7b:c3:f9:f2:97:fb:ec:45:ca:db:6a:08:
75:b5:9f:40:af:ff:75:c0:15:1f:a0:24:f6:1e:5b:
10:20:a3:51:3a:90:14:eb:85:d2:62:cc:4b:33:85:
41:82:d9:69:1b:10:16:98:9e:b2:b6:66:74:55:fd:
bd:af:d5:7b:67:9a:52:fc:43:e0:e7:1f:44:a0:66:
af:3c:21:40:35:23:4d:ba:f6:65:9f:60:91:de:3b:
6b:d6:b6:6b:be:62:fd:74:b2:34:d8:e1:4b:80:0a:
5e:3a:ba:64:e0:99:26:a6:cb:fc:d8:d4:c9:b5:a6:
1a:f2:d8:26:60:87:6a:49:8c:9c:35:61:23:dd:96:
37:11:4a:0d:c4:b7:39:c1:64:56:b7:ac:db:22:b8:
0b:01:cc:cc:32:2d:99:4e:dc:f0:2c:e5:98:75:76:
a5:a5:ba:b1:2d:ae:77:67:1d:83:80:47:7b:a0:2a:
c3:e2:0c:16:e2:ae:6e:86:db:bc:91:13:21:40:25:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:C6:AD:9F:8B:A8:9E:CA:13:33:F5:F0:3F:35:CB:C7:EF:3C:DB
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/BUjGrZ-LqJ7KEzP18D81y8fvPNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
57:d0:f0:5a:ce:ba:29:cb:4a:04:1f:e9:94:42:38:d1:46:a5:
ad:9b:6e:85:83:e1:cb:c5:14:6f:a4:60:91:2d:8d:3c:5f:11:
9b:b9:01:e5:2f:17:84:a9:59:e6:ed:b0:7e:95:9b:9c:aa:86:
74:09:66:61:19:0c:95:56:ec:97:c9:f8:56:36:e5:cf:fe:68:
5a:1b:a3:ad:f7:23:a6:52:21:61:d7:c9:0f:cb:22:e9:2a:51:
78:98:f4:18:33:33:a0:71:dd:ba:ae:fa:ce:ab:68:dd:05:b4:
dc:85:0e:d7:6b:18:34:2b:78:e6:74:ca:e5:77:86:ba:19:06:
c9:ce:61:f4:53:82:53:fb:6b:ba:13:1d:53:8e:64:ab:73:63:
60:a6:d6:ed:85:e5:fa:1f:8f:6d:0e:f0:84:5a:9e:6c:4d:ed:
51:21:a1:aa:1e:e9:ca:99:b1:bc:85:06:d8:fa:89:96:04:f9:
77:22:15:f9:d8:13:79:e4:0c:de:75:de:e2:9e:af:88:6f:6d:
df:f9:6d:82:fa:92:23:d7:be:e4:21:40:a1:72:4f:f7:b5:9b:
6e:73:24:cc:77:b8:f9:3d:82:8e:7a:fd:7f:bb:3a:37:df:0a:
5d:f6:46:15:09:0e:75:98:b9:5c:56:99:9a:3d:81:20:b1:3a:
e9:32:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org