Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Avo591qC0xD-_tGJmUNiJ93DK5Q.roa
File: Avo591qC0xD-_tGJmUNiJ93DK5Q.roa (raw, json)
Hash identifier: 1sH+cgxKal39Mo2VmmJxesfcOoqRpOVRUc7yOSSt31U=
Subject key identifier: 02:FA:39:F7:5A:82:D3:10:FE:FE:D1:89:99:43:62:27:DD:C3:2B:94
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01824015714784C5148D632267F66726A541
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Avo591qC0xD-_tGJmUNiJ93DK5Q.roa
Signing time: Wed 27 Jul 2022 14:35:23 +0000
ROA not before: Wed 27 Jul 2022 14:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 45.84.0.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:15:71:47:84:c5:14:8d:63:22:67:f6:67:26:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 27 14:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02fa39f75a82d310fefed18999436227ddc32b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:2a:8b:60:4e:2e:f3:07:52:6a:86:5b:5b:
5b:62:ce:a0:8a:0b:3f:41:27:b0:be:68:b2:23:ca:
be:fa:92:8e:af:8b:43:09:cb:85:7b:a1:bb:1b:ba:
c4:bc:1f:e9:84:71:31:b3:f9:7c:42:17:d6:d9:bb:
46:44:cf:24:04:b2:f3:96:a5:67:59:13:36:98:32:
46:46:f2:70:c5:34:46:75:4e:f3:e9:4a:35:74:0f:
3f:3b:e1:2e:dc:3a:52:c5:e4:c2:7d:52:34:9a:f0:
8b:2d:14:d5:80:2e:5d:be:95:31:9d:36:c3:58:b2:
e0:bd:d0:a4:a8:0f:f1:60:a3:f5:9d:07:70:ff:32:
a2:29:09:31:97:61:31:96:a6:70:96:b0:9f:63:26:
b2:69:7e:01:45:4a:f5:61:cb:6f:82:78:9e:ed:c6:
fa:84:8e:4f:f6:96:de:c5:48:c4:4b:45:de:f5:74:
1d:e4:53:b5:c1:b8:7b:69:f3:a7:32:08:6f:02:9d:
a5:b2:bb:c4:6e:5b:ec:f2:c5:b0:1f:8f:95:ef:9e:
ac:6b:ec:c5:56:43:5d:6f:e5:07:2b:dc:77:c6:ac:
b2:79:41:0c:d6:11:a8:5a:28:65:51:4e:bc:42:b0:
0c:81:31:6f:16:9a:f3:a4:cb:63:90:25:93:07:26:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:39:F7:5A:82:D3:10:FE:FE:D1:89:99:43:62:27:DD:C3:2B:94
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Avo591qC0xD-_tGJmUNiJ93DK5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.0.0/24
45.159.248.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7b:7a:3d:60:6a:6f:5d:ad:4e:65:22:82:ab:16:5d:54:42:
b4:0c:7a:2b:36:de:f2:09:9e:a5:50:20:d0:59:25:7a:45:c2:
f6:0c:29:71:85:14:3c:b4:2e:52:ac:26:7d:27:7b:6e:74:72:
3a:ee:c5:97:a4:b6:b4:82:ed:b0:0c:9d:b5:02:c3:3c:31:b2:
39:7e:dc:ee:1e:e9:41:ba:9b:a1:95:a3:3e:04:11:c1:e9:ea:
5b:a1:97:34:d1:e2:79:67:44:aa:49:c7:08:12:c1:8f:94:20:
81:61:93:33:f5:b2:41:03:b8:33:90:62:af:9b:ab:99:52:4a:
8f:5b:c9:b8:ea:fa:c0:35:12:54:34:1d:ba:47:76:10:74:8a:
72:3f:cc:d8:32:49:09:00:48:97:db:95:23:8c:03:80:73:fc:
56:78:04:01:5b:85:3d:dc:3c:1e:f3:28:b6:e7:a1:3b:dc:9d:
f9:f1:26:e9:0e:be:9a:63:43:3f:b7:89:e3:55:1c:34:cc:8e:
51:e2:53:c5:95:0a:e8:4c:8b:00:cf:c3:1f:e9:ef:8d:f3:34:
84:bc:39:dc:c2:cc:62:48:eb:33:11:de:13:d6:b1:25:13:69:
30:65:2d:8b:84:bd:47:7f:ad:5f:e3:20:68:df:45:43:f9:c1:
1d:29:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org