Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/x-u1bTIo1CkG8Of9knNM5WsyOvU.roa
File: x-u1bTIo1CkG8Of9knNM5WsyOvU.roa (raw, json)
Hash identifier: sTpYvuGvcugPXbE7V5Cy5M9yds7xQ0thnX6K0kX04jE=
Subject key identifier: C7:EB:B5:6D:32:28:D4:29:06:F0:E7:FD:92:73:4C:E5:6B:32:3A:F5
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0182366C438E81CAD4CB8001205E008FDBDA
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/x-u1bTIo1CkG8Of9knNM5WsyOvU.roa
Signing time: Mon 25 Jul 2022 17:34:01 +0000
ROA not before: Mon 25 Jul 2022 17:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 45.84.0.0/24 maxlen: 24
5.182.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:6c:43:8e:81:ca:d4:cb:80:01:20:5e:00:8f:db:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 25 17:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7ebb56d3228d42906f0e7fd92734ce56b323af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:0b:62:3a:dd:5c:04:74:37:de:57:87:d6:
4e:88:a6:73:2c:9f:37:52:8d:d3:ca:9b:bd:5d:b2:
f9:56:66:7d:9d:d7:e3:64:f0:d9:0a:52:0b:4f:06:
02:df:a0:51:fe:ff:07:ea:2e:5b:a3:fa:df:70:89:
69:d5:ac:05:bb:3b:6c:48:a8:90:d6:c7:6e:69:0e:
d9:d1:79:10:46:e7:f9:00:91:54:92:83:b9:e4:95:
f9:a3:58:d3:50:63:3b:53:9e:fc:bc:89:73:a2:95:
0f:4d:d8:f4:4c:ea:a9:64:9e:e5:2f:b5:13:06:d7:
28:37:4f:1b:40:9c:67:45:ca:4c:d9:4a:bb:b2:9b:
67:65:b4:c4:94:10:f0:33:c9:37:d1:3a:fa:3c:7b:
1b:da:e5:08:9c:3f:81:26:6d:2d:ab:d8:1e:2a:2e:
de:c0:24:db:29:d4:f4:ad:66:eb:b5:fc:a2:e2:ae:
3d:05:04:d3:d2:3e:86:4e:11:f7:81:f1:59:c9:95:
50:d4:5b:6d:38:d0:f8:fa:07:21:2f:4a:46:0d:74:
85:ef:ac:27:7f:68:0a:a3:f4:bb:ac:7b:01:de:a6:
e1:40:52:6d:04:ef:25:e5:5f:62:ae:0a:cb:61:4f:
f6:04:5f:97:93:51:15:c6:3d:d3:ee:9e:bb:13:bf:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EB:B5:6D:32:28:D4:29:06:F0:E7:FD:92:73:4C:E5:6B:32:3A:F5
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/x-u1bTIo1CkG8Of9knNM5WsyOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.39.0/24
45.84.0.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:dd:f5:4e:9b:20:da:15:b0:10:56:01:e7:ea:b0:c6:77:e9:
4a:da:2d:08:18:54:5d:07:ad:47:bf:92:c7:65:d3:13:74:a9:
b8:64:a4:dd:27:f2:09:2b:f4:c9:22:32:1f:4c:b8:fd:86:8e:
b1:6c:b8:15:c2:68:f0:65:20:75:01:7d:2b:1e:a1:5a:80:e1:
92:d4:db:68:9d:7c:f2:08:80:f2:f8:24:b8:a1:a6:49:9e:cc:
2f:02:ae:f1:fd:a1:60:bf:e7:20:9a:68:86:72:0c:b8:4f:f1:
0d:3f:d5:c8:34:6f:33:03:80:72:ab:b1:54:e9:95:8b:22:9b:
b2:22:5c:73:77:6c:3e:4e:46:e0:3d:ba:f3:a1:ac:2f:99:ba:
ba:3e:4f:4e:37:a3:36:e1:e5:a1:45:59:9c:01:5e:2f:a6:07:
11:ff:3b:64:53:ef:62:78:ba:e2:60:5a:c4:f5:08:64:ee:56:
04:b6:39:82:d7:da:ed:df:49:db:3b:1f:8c:e9:19:d6:4d:85:
a9:a3:c5:2e:dd:f8:e0:8e:7e:eb:62:4c:ce:31:b2:7f:7a:c0:
b8:5d:9a:9f:92:a5:f8:40:4d:b3:64:1e:ec:ac:d5:66:12:18:
52:22:85:24:07:17:a8:08:e2:76:be:0b:6b:27:dd:9a:5a:51:
22:4c:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org