Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3dNIcDyIwYmNOsN0B7N9pQs3F4.roa
File: A3dNIcDyIwYmNOsN0B7N9pQs3F4.roa (raw, json)
Hash identifier: /PnKnjz+1ldr4mJ+yGnAmC2ZsMhh+EEWCosInqekUPA=
Subject key identifier: 03:77:4D:21:C0:F2:23:06:26:34:EB:0D:D0:1E:CD:F6:94:2C:DC:5E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01850CD0483BCDB344474D93A3E158BFC66B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3dNIcDyIwYmNOsN0B7N9pQs3F4.roa
Signing time: Tue 13 Dec 2022 18:47:34 +0000
ROA not before: Tue 13 Dec 2022 18:47:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25198
IP address blocks: 45.131.186.0/24 maxlen: 24
185.238.189.0/24 maxlen: 24
185.238.190.0/24 maxlen: 24
2a0e:97c0:a80::/44 maxlen: 48
2a0e:97c0:300::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:d0:48:3b:cd:b3:44:47:4d:93:a3:e1:58:bf:c6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 13 18:47:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03774d21c0f223062634eb0dd01ecdf6942cdc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:90:ed:82:99:d0:4b:da:0b:65:29:9c:91:
aa:81:cb:05:d0:6e:cb:36:3b:ff:5d:29:de:05:f4:
35:71:df:af:27:32:3c:45:fb:fd:05:59:9c:e6:c9:
14:c1:63:e1:be:7a:b1:69:4a:0f:ab:4e:d3:b8:54:
c1:72:5f:64:f0:8f:d3:d8:e2:c0:28:c6:9b:3d:4c:
8c:03:92:01:25:d3:48:c2:ef:2d:62:24:f5:82:fe:
59:34:44:ee:09:ba:e3:2a:fe:65:d5:51:24:b4:4f:
42:97:c7:91:ba:bd:3f:93:c0:91:c7:4f:6e:d5:bc:
7c:ef:d0:60:d6:b5:23:39:dd:e2:11:c5:85:98:fd:
4f:94:7c:00:ef:ec:d0:29:37:bd:5f:5a:13:18:4a:
7a:c1:e4:80:92:e6:b6:87:5b:dc:c1:6c:9c:9d:13:
d8:0a:e4:27:6c:8c:52:b9:22:63:ed:d4:e2:d7:8a:
a3:ac:f9:73:15:4f:61:9e:18:dd:0f:f0:d3:35:90:
bb:25:c3:51:53:b2:1e:b7:2e:08:63:45:f3:50:6d:
d9:b8:a3:de:02:ac:b1:6e:40:08:1f:79:4b:ba:ed:
55:78:50:06:d6:c8:d1:9b:26:82:3a:ef:f4:e5:ab:
87:bf:4a:4b:eb:b5:bb:7d:14:8f:02:3e:e7:c9:77:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:4D:21:C0:F2:23:06:26:34:EB:0D:D0:1E:CD:F6:94:2C:DC:5E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3dNIcDyIwYmNOsN0B7N9pQs3F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
185.238.189.0-185.238.190.255
IPv6:
2a0e:97c0:300::/44
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
af:3a:ff:64:0c:96:fa:d8:13:5e:ab:df:ed:fa:51:2a:53:58:
ae:c5:eb:80:88:22:87:2a:b5:b2:5c:ee:44:63:04:25:44:d4:
8d:fc:8a:26:09:cb:3f:87:55:b9:cf:47:8d:6f:4a:75:61:b4:
97:2e:b3:3d:da:c2:0e:b1:e8:27:db:b1:f7:38:30:22:7e:91:
12:17:19:ef:fc:33:d6:ca:a2:76:fe:c5:44:13:71:f3:b5:40:
e4:ea:5d:46:d2:fb:cf:f4:07:cf:fe:79:d9:9b:86:b6:00:06:
4c:87:9b:29:0b:62:a4:05:54:89:d0:17:ab:d3:0b:1e:10:eb:
79:d9:fd:77:53:8f:9d:83:80:65:10:9f:43:67:13:1c:e2:5b:
6d:bf:2c:42:72:da:a1:2b:47:58:8b:78:96:f2:ad:0a:2e:30:
7e:8e:f9:7a:9e:3b:bf:b3:b5:0c:c1:e3:a8:93:21:b5:32:b0:
fb:52:85:86:e1:0c:de:57:c0:9f:18:f0:31:1a:c2:30:4e:ae:
6b:24:e1:c1:57:27:df:7f:63:9e:90:95:28:b0:06:72:45:51:
91:16:65:44:dc:fe:19:10:62:c6:9f:6b:7d:0f:96:3a:4b:46:
d9:c3:5a:9e:77:ef:f4:f4:69:0f:fa:53:d4:d9:d9:87:7d:a5:
61:67:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:13 2023 by rpki-client on console-fra.rpki-client.org