Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n7wY-UOXuMwBwXEbTaBrrwhcJYA.roa
File: n7wY-UOXuMwBwXEbTaBrrwhcJYA.roa (raw, json)
Hash identifier: DpGR7VGofFds+br6t6zd6zqUkOmlljPqnnyCChZhjjM=
Subject key identifier: 9F:BC:18:F9:43:97:B8:CC:01:C1:71:1B:4D:A0:6B:AF:08:5C:25:80
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01847EF7413E51B38C21A3CBFBF8E94EB2AC
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n7wY-UOXuMwBwXEbTaBrrwhcJYA.roa
Signing time: Wed 16 Nov 2022 05:44:03 +0000
ROA not before: Wed 16 Nov 2022 05:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 45.139.230.0/24 maxlen: 24
45.139.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:f7:41:3e:51:b3:8c:21:a3:cb:fb:f8:e9:4e:b2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 16 05:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fbc18f94397b8cc01c1711b4da06baf085c2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:27:f1:9a:65:0e:73:82:c9:4a:4b:6a:e6:
f6:e2:cd:e7:ab:b1:46:04:d8:ad:f6:a2:b0:d7:53:
82:ad:c1:ed:64:78:fd:db:e3:af:c9:3f:14:1f:f6:
95:df:58:be:5b:25:f5:bb:9f:ad:1b:a5:03:82:88:
41:11:bb:6a:ff:82:d8:46:9e:ae:7f:2c:1a:76:9f:
d1:05:45:67:01:1c:18:96:83:48:38:13:e1:4a:14:
1c:a7:a5:96:37:ea:a2:93:8a:7b:e0:aa:d1:67:64:
c4:76:42:fb:da:aa:5a:9f:ca:39:50:27:73:c3:34:
9e:5e:b2:d7:07:f7:d2:e6:2b:5c:d4:e8:2b:ac:06:
4d:3e:01:53:2a:03:1f:a4:e4:f6:42:29:6a:28:9f:
ab:cf:16:14:bf:7e:4e:12:61:20:c9:de:ee:e6:f7:
77:bd:09:7c:6c:c9:5e:b8:5e:60:c1:ac:f5:68:7c:
ab:37:c9:c2:4c:79:5d:52:d9:36:a7:ea:81:e3:60:
a8:97:a1:02:ad:56:55:90:8d:d4:69:2b:7d:2d:c2:
71:7a:1f:26:36:a9:ba:7f:d8:61:a7:8f:ed:1c:77:
68:3c:e5:34:27:67:6b:20:34:f3:e0:29:63:ca:ce:
4e:3c:d6:5d:35:44:11:df:77:ba:b6:f0:23:62:d9:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:18:F9:43:97:B8:CC:01:C1:71:1B:4D:A0:6B:AF:08:5C:25:80
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n7wY-UOXuMwBwXEbTaBrrwhcJYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.228.0/24
45.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0e:81:40:84:fc:ff:40:7a:2e:7d:d2:e6:b8:1a:e9:b3:90:
52:b9:9e:58:80:b1:a0:9c:08:39:d1:61:a2:d1:ed:86:a6:6a:
60:11:67:17:b8:20:d7:5d:36:03:e8:a8:9e:1f:12:47:d9:fb:
7b:f4:c1:51:24:73:49:7d:04:10:d7:df:70:cd:52:38:64:09:
83:60:9d:ea:48:ad:40:19:65:3f:5b:9d:a7:0e:cd:70:3c:a1:
59:71:52:ef:16:e8:d9:91:ea:31:36:1f:23:91:6b:7e:69:32:
c7:33:0e:0b:6b:18:21:f2:fd:a3:a9:46:74:cd:d8:34:d1:44:
82:19:d5:87:4a:e7:59:68:95:c0:7e:55:60:ca:d5:11:5b:52:
f8:24:09:01:ab:00:50:99:8b:5d:89:6e:21:26:50:7e:87:15:
7a:d3:d2:13:0e:b9:99:74:75:0d:34:9a:83:1d:de:98:0d:e9:
79:23:99:90:fb:45:9f:8c:27:27:bc:80:da:ce:19:24:e2:25:
48:0d:2b:45:80:28:d1:72:5b:14:8a:14:0f:d9:c9:39:e6:91:
8b:e7:f9:9b:e2:45:f0:7f:da:11:8e:cf:fe:90:64:0f:d9:37:
26:94:02:17:c4:99:3d:a5:ee:9a:94:62:87:39:72:c8:59:13:
db:20:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:55 2024 by rpki-client on console-fra.rpki-client.org