Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2FHuQw8NDVIzcnNjT35T252dHc.roa
File: G2FHuQw8NDVIzcnNjT35T252dHc.roa (raw, json)
Hash identifier: tHGoecXhJegtfQ8jA5ULhlquAsUPYbcN2ED8UPsAoMU=
Subject key identifier: 1B:61:47:B9:0C:3C:34:35:48:CD:C9:CD:8D:3D:F9:4F:6E:76:74:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183323C3AB72CC8F6329183DD46D059D51F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2FHuQw8NDVIzcnNjT35T252dHc.roa
Signing time: Mon 12 Sep 2022 15:05:51 +0000
ROA not before: Mon 12 Sep 2022 15:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25198
IP address blocks: 45.131.186.0/24 maxlen: 24
2a0e:97c0:a80::/44 maxlen: 48
2a0e:97c0:300::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:3c:3a:b7:2c:c8:f6:32:91:83:dd:46:d0:59:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 12 15:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6147b90c3c343548cdc9cd8d3df94f6e767477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:e6:c9:68:61:00:48:66:7c:54:ba:ff:ac:
80:43:78:46:85:d7:a7:93:69:8b:8e:43:fd:da:e0:
22:49:11:53:b6:8b:42:74:70:fa:00:05:48:56:46:
2f:c3:e2:7f:88:d5:44:77:87:e8:90:79:a6:51:b9:
70:66:2a:eb:f5:b1:45:c6:23:8f:0f:72:89:d8:cb:
eb:17:c6:44:d4:4a:e2:62:3d:83:fe:28:bf:fd:49:
13:6d:78:d3:e1:bf:2b:70:cd:b5:b7:49:d7:94:25:
20:fb:d3:22:54:85:a7:58:6a:e7:8a:c8:02:5e:5e:
b7:b6:2a:07:0e:aa:b4:6c:ba:4e:81:36:4c:47:14:
6e:94:ec:08:45:7c:f9:3e:6b:30:4b:19:7d:66:e1:
e6:51:72:a4:66:aa:75:cc:1b:76:c1:57:f9:b0:4c:
f3:39:09:1a:02:3f:5b:6d:b2:58:4a:a2:17:36:d9:
9f:3e:c2:0d:d7:4d:db:91:a7:fc:1a:dc:ec:d8:93:
ef:d1:0e:0a:e7:18:bc:f6:f9:68:ff:81:a1:59:bf:
44:f3:1f:fa:ea:3a:bf:c4:6a:ac:88:76:2e:05:0b:
16:ef:88:39:0c:fb:e9:5f:d2:8f:50:f3:a3:d9:a2:
62:96:73:25:d4:31:14:ec:0c:20:e7:18:b9:a3:2c:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:47:B9:0C:3C:34:35:48:CD:C9:CD:8D:3D:F9:4F:6E:76:74:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2FHuQw8NDVIzcnNjT35T252dHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
IPv6:
2a0e:97c0:300::/44
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
cc:20:c1:18:c3:73:a1:7b:94:e7:bc:a8:8e:1a:23:6d:20:68:
75:f8:90:4b:20:2d:06:9c:29:f5:57:2f:0e:39:ea:73:22:2c:
43:82:1f:38:74:16:3a:b1:46:c1:e4:36:41:fa:3b:5a:74:e1:
cb:54:42:01:ab:eb:bc:93:94:85:83:cf:7a:bd:01:5d:9f:69:
16:28:ac:4b:b6:da:ce:c8:67:41:ee:90:4d:46:4d:9a:d3:57:
33:97:04:5d:1c:5a:a3:f0:33:3f:7a:28:dd:ed:d2:c8:8a:78:
fd:5d:8c:6b:8c:cb:b2:96:7b:b0:ea:4d:82:1b:e6:a4:84:2f:
a9:9f:3c:a7:77:f2:1c:50:8c:11:7e:bf:dc:b7:22:70:b8:62:
04:1f:c1:97:48:ee:4f:94:e8:93:0a:8c:3a:5d:2b:c5:9d:4b:
57:10:8a:15:a6:39:b5:78:84:c1:da:e2:2e:a7:27:41:b6:7e:
57:fa:ae:31:d8:70:d2:ea:62:1d:c2:36:8a:87:bf:10:46:2a:
a0:35:78:62:25:7a:4f:be:93:63:a6:38:8a:98:3d:39:57:67:
86:55:ec:63:3f:e5:5c:1c:03:fc:bf:3b:bf:f9:df:cd:5c:79:
c7:c6:a8:b2:65:9d:e7:9a:e7:9c:02:5e:75:f5:dc:8f:e4:a5:
19:2e:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:57 2023 by rpki-client on console-ams.rpki-client.org