Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uRSp2KtEN-1H1OyQF4VOKSnCTHo.roa
File: uRSp2KtEN-1H1OyQF4VOKSnCTHo.roa (raw, json)
Hash identifier: QckdtaC8dK5Q8YuREBhK/fsLRIVraym7iZlMHZl/YgI=
Subject key identifier: B9:14:A9:D8:AB:44:37:ED:47:D4:EC:90:17:85:4E:29:29:C2:4C:7A
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0183560150E2C8F828987B19FF384D344952
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uRSp2KtEN-1H1OyQF4VOKSnCTHo.roa
Signing time: Mon 19 Sep 2022 13:47:50 +0000
ROA not before: Mon 19 Sep 2022 13:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 86.62.30.0/24 maxlen: 24
45.80.29.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:01:50:e2:c8:f8:28:98:7b:19:ff:38:4d:34:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 19 13:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b914a9d8ab4437ed47d4ec9017854e2929c24c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:6f:8d:35:08:03:0c:89:59:32:4a:09:1b:
2b:22:c7:db:bc:c5:4c:68:36:fb:96:65:28:f0:b7:
3e:75:cf:01:a3:66:5a:c7:4f:5d:02:bb:d9:3e:22:
9c:7c:05:ff:d2:e4:29:83:fa:2d:78:29:e3:8c:67:
b7:69:2b:4e:0f:6e:ad:52:38:7f:6f:7d:15:4a:22:
af:3b:e4:b5:1c:1f:de:85:4b:3f:55:20:aa:7f:e8:
05:d3:90:a8:91:df:24:15:fd:29:78:12:f3:18:ad:
26:fe:91:9c:70:03:60:19:cd:1e:a9:6f:8d:10:d4:
cb:5a:f3:23:ef:a9:22:34:b8:8b:49:e8:68:d2:dc:
9c:bc:a4:ff:fd:ae:c7:bf:bc:76:f9:55:68:14:a6:
9a:50:1d:58:a8:cd:2d:14:da:9e:03:b3:15:17:35:
f0:39:f4:8c:ba:0a:4c:16:82:f0:64:ca:85:d1:dd:
54:d4:14:ef:c7:fe:c1:a7:29:f1:bf:43:66:dd:19:
e3:be:33:95:cb:1a:7f:29:ab:47:c2:b7:07:3b:82:
47:df:f3:fe:4a:3c:59:be:a4:45:2f:48:48:2f:15:
93:1f:6d:cf:81:ab:8b:d9:89:c3:ce:86:1a:cd:b5:
84:46:bd:7e:33:79:54:12:d4:aa:46:e6:b2:dd:ee:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:A9:D8:AB:44:37:ED:47:D4:EC:90:17:85:4E:29:29:C2:4C:7A
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/uRSp2KtEN-1H1OyQF4VOKSnCTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
45.80.31.0/24
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:60:50:f5:e3:d4:93:c1:41:ca:4b:ed:19:8a:bd:2d:c6:4b:
de:ad:41:dd:75:6b:78:e9:74:fa:71:6f:b5:80:a8:57:1e:ac:
54:9c:52:e7:f6:5d:76:39:12:d6:0f:d3:f1:40:d0:ba:b4:b3:
1e:0b:6a:c9:b7:00:52:a9:eb:ba:37:f9:ed:e3:b2:d4:32:11:
08:16:71:7d:17:39:97:05:dc:29:30:ad:9e:88:b3:69:25:fb:
bf:7b:0f:a6:01:1a:33:50:1a:3e:5a:01:55:92:08:3a:61:f5:
34:78:8c:b7:ca:b4:6f:ef:5e:84:89:77:ed:67:63:94:7c:c5:
81:7c:3c:2b:90:45:61:ed:db:c9:ca:c3:39:f7:1e:72:d1:43:
65:34:df:33:26:cf:27:89:dd:af:9f:82:03:84:e4:4c:62:3b:
8e:f9:4e:aa:9a:b1:0a:f4:b9:c1:ee:16:91:e1:07:50:00:e9:
71:90:73:c0:76:85:29:c9:20:74:35:ee:5b:f3:7f:db:5f:58:
f1:62:f0:7e:a9:fd:db:1b:a0:c8:b9:8d:6c:99:b5:6f:4a:3f:
2b:c0:ba:5d:37:0a:c2:66:b4:bb:c9:a6:a4:58:9c:76:54:0d:
5b:60:b6:9b:17:ef:4d:4c:92:07:19:b9:24:b9:1a:84:12:04:
69:aa:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org