Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aGPLB7gHXyj3u5A4SSExcxylurw.roa
File: aGPLB7gHXyj3u5A4SSExcxylurw.roa (raw, json)
Hash identifier: +mcrdiQQdL7WqPYkPQNCVdfdJ0UGgyrLiorkjQ+esIw=
Subject key identifier: 68:63:CB:07:B8:07:5F:28:F7:BB:90:38:49:21:31:73:1C:A5:BA:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018550D78F609EC56F98D0D4DF132963F69F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aGPLB7gHXyj3u5A4SSExcxylurw.roa
Signing time: Mon 26 Dec 2022 23:49:42 +0000
ROA not before: Mon 26 Dec 2022 23:49:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:d7:8f:60:9e:c5:6f:98:d0:d4:df:13:29:63:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 26 23:49:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6863cb07b8075f28f7bb9038492131731ca5babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:8f:ed:fc:6d:e4:f2:51:72:ea:f7:37:13:
5a:f9:29:9f:f7:16:6a:09:9d:f2:79:92:8b:18:29:
47:c9:70:af:5f:50:15:16:f7:ce:08:39:d2:dc:13:
8d:c1:22:85:1c:77:16:82:63:82:0e:87:6b:a2:20:
4b:cd:77:54:a2:7c:c1:89:e8:61:88:56:8a:44:ac:
63:a9:36:13:3c:88:0d:af:68:d6:99:49:22:e7:6d:
62:99:dc:45:53:0b:f0:dd:51:21:a4:e5:28:0d:55:
19:7f:1f:c3:f4:08:dd:c7:67:9e:3f:1f:7f:0b:72:
51:3e:bc:49:d3:41:4a:7d:0b:44:9f:26:46:d3:f8:
3c:da:b2:2c:56:00:8a:1d:01:0c:0e:95:4b:21:cd:
1d:b5:76:02:f0:ba:2d:3c:a3:39:e9:cd:e6:8e:b9:
cd:ef:00:39:f5:c9:1a:44:50:3b:ac:94:92:bf:9c:
22:b1:5f:6d:5b:3f:c9:5c:97:01:ea:76:2a:f2:d4:
f4:d1:09:09:7b:e2:73:03:d8:a7:8b:8f:aa:74:5c:
c4:ae:27:97:84:47:34:6c:b4:31:f9:2a:0d:2b:f6:
e9:c0:ee:52:31:1b:a4:64:8f:03:f5:d5:b7:d5:eb:
b6:db:b7:be:d2:cd:2e:e9:a4:50:22:6f:f7:05:22:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:CB:07:B8:07:5F:28:F7:BB:90:38:49:21:31:73:1C:A5:BA:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aGPLB7gHXyj3u5A4SSExcxylurw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
95:88:8f:d9:11:7b:97:3b:c6:02:a2:21:9b:02:09:47:75:e2:
20:44:9f:e3:8f:6d:ba:b9:be:4e:86:a1:74:55:0a:62:a2:f4:
6d:cd:50:a7:81:10:c5:ee:ac:f1:5e:8f:eb:35:ec:e9:5b:36:
e0:62:f0:96:70:09:0e:93:e2:ac:fb:ad:b7:a8:06:3e:ad:29:
2a:8f:e0:b2:f1:c4:fe:46:53:a5:67:08:b3:71:20:0f:0c:12:
00:47:9f:59:30:81:5d:ea:4d:fa:da:19:f4:de:06:3e:12:71:
f3:45:95:97:30:38:41:cd:39:13:3e:35:12:51:ef:d6:b9:89:
39:d8:78:18:06:ae:42:44:8e:9b:5a:a7:c3:4a:32:57:a7:10:
be:0c:1b:dc:88:ec:40:44:f7:b2:d3:ce:93:55:17:c4:be:bf:
b3:4f:78:ff:9b:8b:31:ae:b1:7e:6c:8b:cf:a9:4f:8d:a2:67:
68:4b:09:a5:28:38:72:b8:f6:3f:a3:e4:01:6a:46:04:b4:4c:
e1:a3:a2:b1:61:c8:ab:99:eb:70:5d:0d:84:81:91:95:9d:92:
71:44:e4:03:b4:f3:71:67:92:63:9c:05:51:fe:06:b9:22:51:
e0:9b:f5:55:f3:a0:d2:af:c8:1b:6d:d7:67:a0:2c:4e:94:80:
72:f2:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:01 2023 by rpki-client on console-ams.rpki-client.org