Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xsyBQ0tp7RId3G0ekxspdPK_4E4.roa
File: xsyBQ0tp7RId3G0ekxspdPK_4E4.roa (raw, json)
Hash identifier: WFC9d8Uc1+PLx/7xZzgfctBdhgq9k1VbKCoAGuXq1PQ=
Subject key identifier: C6:CC:81:43:4B:69:ED:12:1D:DC:6D:1E:93:1B:29:74:F2:BF:E0:4E
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0184112DE8C0157AA05D3263113FA1828DD2
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xsyBQ0tp7RId3G0ekxspdPK_4E4.roa
Signing time: Tue 25 Oct 2022 22:05:32 +0000
ROA not before: Tue 25 Oct 2022 22:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:2d:e8:c0:15:7a:a0:5d:32:63:11:3f:a1:82:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Oct 25 22:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6cc81434b69ed121ddc6d1e931b2974f2bfe04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:5c:8d:d8:29:d1:40:9d:4b:6a:e2:da:ee:
e5:70:ca:76:e8:d6:95:93:c7:b8:bd:4b:f9:15:e5:
27:ab:80:dd:84:6b:ad:f0:62:30:52:ed:92:83:1a:
6c:12:24:fa:70:44:08:dc:ec:a2:d7:09:0f:6d:4b:
e0:53:0a:b3:f2:f9:21:f5:71:80:34:66:4b:a8:ea:
e2:2c:ce:60:8d:50:3c:bd:27:88:53:73:60:6f:1c:
b6:81:65:d9:33:89:37:86:4a:d6:7b:6a:5e:c8:a8:
0a:fd:74:6d:aa:4a:aa:0b:a8:a9:fc:c3:7a:b1:74:
7d:04:9b:f0:a7:2a:e7:45:2f:09:9a:b4:37:40:2f:
06:15:21:90:ba:36:9f:d5:55:1b:52:99:c7:12:d8:
af:f8:9e:fe:1f:34:f9:21:9a:de:bd:09:2f:46:c7:
fc:07:5f:3f:c0:37:a0:75:6b:c0:8e:1b:90:71:7d:
71:c2:63:55:46:46:b8:89:95:57:b9:ee:e0:f3:43:
4c:6d:ff:c9:42:e6:1d:57:e5:62:52:4d:e9:ce:38:
7b:6d:80:f5:94:3f:43:8f:44:78:16:a1:84:e7:f5:
e3:23:38:36:89:e3:02:54:41:88:62:ac:45:bf:f0:
16:2d:60:78:cf:30:a4:a1:4d:ea:b8:03:d3:49:17:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:81:43:4B:69:ED:12:1D:DC:6D:1E:93:1B:29:74:F2:BF:E0:4E
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xsyBQ0tp7RId3G0ekxspdPK_4E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
45:65:df:98:c0:f6:b7:9a:e7:08:ad:1b:2c:2e:c9:bd:a2:4a:
36:d6:4d:c2:b1:b3:d0:24:4d:90:c9:37:cc:2b:4a:ca:c5:83:
69:a9:a9:ea:a7:5c:43:78:fb:45:33:a7:db:2b:a4:91:cb:e3:
18:33:bb:6f:76:81:28:b8:52:65:d3:07:ae:08:59:79:c2:4b:
14:06:08:69:97:d8:88:45:4a:4d:94:2c:af:21:4a:e5:c3:d9:
0d:c5:5a:da:4a:2a:d6:42:c1:02:62:ee:dd:a1:8c:cd:41:16:
2d:71:41:12:a9:23:98:a5:d3:af:09:ee:fa:2a:b4:27:3b:62:
1f:22:d7:f5:da:7a:f4:e1:55:7f:42:4e:fb:8e:2a:2a:4a:1f:
fe:a0:1d:db:40:14:9b:26:2b:ad:52:28:1b:0a:33:57:02:62:
75:7c:d2:6a:35:dd:96:7b:62:49:7d:87:6e:ff:24:f7:76:ad:
be:eb:46:f6:3a:34:05:ff:b7:68:18:f1:48:83:55:de:b9:4c:
20:63:8a:77:3c:dd:20:d7:dd:a8:f2:5d:16:43:bc:f6:c1:b2:
b3:58:72:57:bd:0d:8f:91:70:2b:7b:a8:35:ed:65:15:9f:c4:
b5:33:56:ac:09:cd:af:91:39:9e:c0:fb:3c:37:d3:94:b3:33:
05:b0:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org