Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/u3U-0pvZvSTxAhLMgGogQH74V5Q.roa
File: u3U-0pvZvSTxAhLMgGogQH74V5Q.roa (raw, json)
Hash identifier: 8ttbfxkmyC1890bX3qvhFqP+tbvpkVEKdPXrSoZYS9U=
Subject key identifier: BB:75:3E:D2:9B:D9:BD:24:F1:02:12:CC:80:6A:20:40:7E:F8:57:94
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0760385C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/u3U-0pvZvSTxAhLMgGogQH74V5Q.roa
Signing time: Sat 01 Jan 2022 02:00:39 +0000
ROA not before: Sat 01 Jan 2022 02:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.89.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123746396 (0x760385c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 02:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb753ed29bd9bd24f10212cc806a20407ef85794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:dc:10:d4:6a:66:d6:81:3e:2d:60:21:f3:
5d:e3:6c:43:33:a0:ea:a2:96:e0:43:3c:8d:bd:96:
91:d3:5d:a6:6d:24:1a:50:21:04:4f:7a:23:3b:1f:
8c:33:d4:b6:65:9f:83:01:ce:7e:e4:9e:09:a8:2e:
e8:ac:fb:83:84:e5:aa:34:29:fb:11:5c:31:2c:8e:
ae:34:6a:47:1f:04:f9:6e:40:37:aa:74:df:df:05:
96:51:86:58:16:0a:bf:0b:07:f4:cb:6b:27:7d:bd:
23:ae:0a:44:f1:00:47:bc:dd:1c:bb:5e:96:61:9d:
ee:65:a4:d8:74:18:5f:c1:38:e6:01:07:bb:10:c5:
2a:b2:39:36:9f:1a:3b:b1:65:30:2a:cd:99:d9:48:
53:12:c7:75:94:3e:b5:5e:6b:6e:37:a9:a3:29:4a:
fd:48:a0:e8:7d:f3:aa:59:c5:5f:6d:b8:32:b6:cc:
fe:0e:dc:f5:8f:0e:1e:58:ea:da:c3:d1:d6:ed:c9:
18:5f:c0:5c:1b:e2:1d:9f:72:34:6b:d6:a8:f9:f0:
42:f3:64:d0:80:e4:69:49:36:20:ff:23:61:89:ed:
5c:db:1e:83:4f:b1:ef:a7:97:09:8d:77:b7:d8:7c:
21:09:76:10:91:ec:56:27:b2:a2:ba:86:1d:08:ec:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:3E:D2:9B:D9:BD:24:F1:02:12:CC:80:6A:20:40:7E:F8:57:94
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/u3U-0pvZvSTxAhLMgGogQH74V5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:04:c0:57:51:20:f5:b2:c3:d9:c8:bb:64:99:50:07:14:83:
fe:8c:29:23:0b:f9:4a:fd:bc:b7:c2:85:95:18:fd:a0:42:dd:
45:09:da:51:40:0f:f4:bf:2d:a9:13:59:9e:c4:3a:1a:5f:0d:
d7:34:e7:7d:66:41:dd:2d:e9:34:59:0e:98:c1:ed:a7:7f:6b:
7f:e1:4d:16:63:d0:93:7b:dd:bb:3b:63:c0:7a:33:76:ce:41:
fd:7e:85:4b:36:18:cf:3e:96:2c:31:96:51:b7:0b:a5:84:66:
df:22:c9:1a:4f:84:72:59:bf:95:93:bd:93:23:cc:67:75:6d:
59:73:01:30:ce:3e:f5:9f:1c:0d:f7:01:a4:82:5e:98:63:f8:
72:78:d2:86:f8:d8:0c:6c:88:a3:12:f6:61:35:ef:5f:97:80:
f3:90:ac:f9:7c:94:4c:4c:8a:2f:60:4a:31:f5:42:e0:80:85:
72:10:a1:f6:e5:7f:5f:f5:f2:14:03:56:d7:e9:3c:4c:52:f1:
e8:19:0b:a2:be:f3:8b:37:12:0e:3e:b8:0c:ca:34:e5:d6:24:
c9:d5:c5:92:04:1c:52:6b:3d:71:01:a6:d4:59:c6:b7:88:df:
d9:b1:ad:93:70:7f:d5:c1:a4:de:64:44:e5:b1:87:85:f0:4b:
9f:bd:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org