Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/xo_-tguQAkAWp-6_f_bW2JSTyjQ.roa
File: xo_-tguQAkAWp-6_f_bW2JSTyjQ.roa (raw, json)
Hash identifier: /pCsT5AIC4XTnyzWDgmAtngBLp+HPRHU7dw2UGK84ns=
Subject key identifier: C6:8F:FE:B6:0B:90:02:40:16:A7:EE:BF:7F:F6:D6:D8:94:93:CA:34
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0184A95C1D3024F3AEC712712B9939D6D908
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/xo_-tguQAkAWp-6_f_bW2JSTyjQ.roa
Signing time: Thu 24 Nov 2022 11:18:16 +0000
ROA not before: Thu 24 Nov 2022 11:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.159.249.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:5c:1d:30:24:f3:ae:c7:12:71:2b:99:39:d6:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 24 11:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c68ffeb60b90024016a7eebf7ff6d6d89493ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:c1:f4:31:38:95:80:fd:9d:52:6b:f8:e6:
08:5a:78:ab:04:49:b6:15:e5:e3:18:be:26:d4:6c:
46:87:1e:7c:0f:22:65:12:72:0c:24:f7:3e:41:c5:
c3:27:1a:a4:e1:f8:17:52:46:c3:cf:f9:81:aa:25:
2a:dd:ef:79:ce:1c:98:5b:b6:54:7c:34:9a:06:f6:
89:5c:c2:73:8c:09:90:8b:68:44:40:bd:ac:da:ca:
d5:28:d2:2d:a9:0a:2c:9f:1c:8a:34:da:2d:62:44:
b0:cf:2c:fe:5f:9b:61:aa:6b:48:d1:1b:e6:db:3e:
7e:ae:5b:fe:c6:67:4e:10:d3:b8:73:fe:52:14:bb:
60:92:dc:b0:f3:75:6c:b6:fc:40:89:19:ca:a0:da:
e9:4a:3b:b6:f2:9c:02:a1:54:f2:e1:c6:5c:5c:d8:
01:4e:01:d5:5c:46:53:01:af:1b:4b:70:63:e8:6b:
29:25:d2:14:0e:d1:73:02:66:32:30:9a:9f:83:fa:
40:47:f5:3b:13:34:03:f9:4a:35:d2:50:98:21:06:
da:b8:e7:b4:95:90:d1:72:2a:39:15:9d:be:51:fb:
04:13:77:0d:cf:26:65:1a:ff:c5:c8:5c:18:16:bd:
0e:91:57:76:f5:89:24:44:93:f5:4f:17:c8:6a:19:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:FE:B6:0B:90:02:40:16:A7:EE:BF:7F:F6:D6:D8:94:93:CA:34
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/xo_-tguQAkAWp-6_f_bW2JSTyjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.249.0/24
141.98.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:62:26:e0:99:b1:9f:40:ca:c0:f8:a9:54:55:5b:07:d0:de:
3b:85:87:b7:3a:8c:a7:ba:4e:53:6d:6e:41:6b:26:81:99:89:
8d:07:bf:98:b1:5f:da:5a:36:63:7a:91:2a:c0:f1:f4:4d:9e:
9e:9c:d8:55:4d:46:d4:75:43:6d:34:d2:39:0c:6f:3e:bf:f9:
09:47:04:b2:31:bf:65:ce:cf:a3:af:87:dd:ce:8a:b1:5d:ed:
75:ba:5b:55:0c:c2:57:e8:43:07:2c:b2:e4:c6:02:ea:86:52:
7a:d2:2a:90:8c:7f:6d:09:e2:a7:d0:bc:e2:1b:0d:b0:bb:3a:
e0:4f:ba:1f:9e:71:84:ec:bb:55:19:0b:b2:34:e9:23:40:9f:
bb:18:85:45:7f:10:22:5c:5d:ad:19:24:34:c4:25:8e:62:95:
c4:78:3b:30:ea:98:ef:73:28:5d:db:0a:4a:99:d7:28:2a:b5:
e5:99:12:43:e8:d8:9f:23:18:40:a1:5a:55:99:1e:b6:dc:f8:
52:d1:b3:41:b9:5d:12:39:c2:95:40:d3:7a:8f:a2:8d:c1:1d:
bd:0a:f6:f0:6a:b5:0a:df:87:ac:c4:d5:84:12:3d:6d:60:55:
b4:30:f4:8c:c2:30:f8:14:4a:4c:e0:ef:b7:16:db:3f:24:44:
97:54:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org