Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8SxZgYuC4z8OSXS2D72SSXLbyWQ.roa
File: 8SxZgYuC4z8OSXS2D72SSXLbyWQ.roa (raw, json)
Hash identifier: xh2vJujhOxpExRstze8+H2wdClrSoYR0O20wykQ5bMA=
Subject key identifier: F1:2C:59:81:8B:82:E3:3F:0E:49:74:B6:0F:BD:92:49:72:DB:C9:64
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01825C37E77C7DCA609A34B30F55A271AC66
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8SxZgYuC4z8OSXS2D72SSXLbyWQ.roa
Signing time: Tue 02 Aug 2022 01:42:23 +0000
ROA not before: Tue 02 Aug 2022 01:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.131.187.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:37:e7:7c:7d:ca:60:9a:34:b3:0f:55:a2:71:ac:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 2 01:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f12c59818b82e33f0e4974b60fbd924972dbc964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:19:db:be:c0:2e:b8:1d:a9:62:f9:1a:37:
82:29:30:3d:d0:1a:4b:cf:28:4b:e6:29:48:6b:4d:
48:5a:74:f1:86:9e:b4:21:4e:6a:c4:65:b9:b0:83:
4a:6c:b7:91:ae:7d:bd:d5:b8:1a:40:c3:ee:30:f8:
ad:b9:b1:7e:b2:85:a1:f1:29:17:7d:fe:7c:7f:d7:
e3:68:f7:ad:47:1e:49:d5:c5:fc:61:07:22:f2:2f:
8a:50:cb:a8:52:15:0c:2a:de:33:5d:dc:1c:07:77:
69:40:00:c2:16:8c:02:c5:d3:7d:6e:a2:ff:a4:83:
66:17:14:b0:ea:f4:07:9e:7f:80:a3:6a:21:14:ef:
df:d6:f4:c9:0c:9a:5d:b1:3e:17:7e:67:97:ab:f5:
6d:21:25:ff:e9:92:ae:6e:9d:47:96:69:75:76:15:
51:7c:b6:f0:35:47:90:25:2c:e7:48:bb:96:e9:c4:
21:47:40:79:3d:03:0c:2f:2e:4c:e9:6f:60:b4:be:
f2:2e:12:ef:33:19:87:07:7f:44:8b:48:04:fa:dd:
df:7c:fd:71:e0:fa:f0:88:cd:d9:a0:b2:04:cb:42:
1d:dd:b5:82:e3:7d:6c:cd:71:43:e1:eb:26:06:9e:
33:d3:5d:29:88:e1:5c:ed:8b:da:f2:6c:aa:c0:79:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:59:81:8B:82:E3:3F:0E:49:74:B6:0F:BD:92:49:72:DB:C9:64
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8SxZgYuC4z8OSXS2D72SSXLbyWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
71:07:d3:af:38:89:35:61:df:a3:92:75:9e:e9:ba:ed:10:8c:
ef:39:11:ba:e8:0e:aa:71:37:36:e2:08:1a:14:9d:2d:61:61:
9e:49:cc:c6:9b:86:9a:e6:3a:e5:2a:3d:76:98:38:67:b3:af:
63:47:b3:48:5f:8d:97:3d:fe:81:46:fa:98:7a:27:24:83:32:
8c:cb:07:12:6b:33:51:21:9e:f5:48:a2:dc:3b:87:45:31:26:
1a:52:ab:b9:ae:d7:82:d8:09:09:78:7d:4a:c2:d1:f6:47:ef:
f0:aa:63:6e:27:5d:e6:81:10:bf:fc:e7:64:35:08:ff:db:73:
c1:ce:e5:51:82:68:37:b3:14:bf:77:06:ec:52:72:69:a9:5d:
02:69:c1:51:99:81:f2:d2:1c:c2:db:e4:e4:c5:c6:3e:9f:03:
52:37:ea:98:b0:d8:80:6d:6f:d8:c7:94:47:12:06:4f:83:8c:
40:61:31:e7:53:b2:55:7d:79:14:0c:80:1a:be:86:2d:09:c8:
1e:de:7b:8a:91:eb:19:4c:63:77:31:98:97:f5:74:3c:e2:d3:
71:d7:d6:b2:28:79:64:4e:c6:a6:1e:3f:9d:0a:90:b9:56:d5:
62:50:f1:4d:19:a2:32:28:fc:cc:56:44:86:cb:06:21:01:d3:
73:89:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:13 2023 by rpki-client on console-fra.rpki-client.org