Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kihURBN6d025pd6yjKHUpYiUnQo.roa
File: kihURBN6d025pd6yjKHUpYiUnQo.roa (raw, json)
Hash identifier: c9QaRgoVvItIIQW3bRv2YW6bgww3pxkTKP3a5SGdfiw=
Subject key identifier: 92:28:54:44:13:7A:77:4D:B9:A5:DE:B2:8C:A1:D4:A5:88:94:9D:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10800284
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kihURBN6d025pd6yjKHUpYiUnQo.roa
Signing time: Sat 01 Jan 2022 09:04:50 +0000
ROA not before: Sat 01 Jan 2022 09:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61218
IP address blocks: 45.148.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276824708 (0x10800284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92285444137a774db9a5deb28ca1d4a588949d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:e2:1c:38:8e:e4:6f:78:07:c5:5f:ca:ba:
82:5c:ac:a2:d4:3b:85:54:95:01:98:c5:c8:1b:c0:
3b:52:11:bd:49:03:34:91:e7:ba:58:da:d1:e0:35:
41:03:2a:8e:44:cb:ae:e7:2f:e9:b4:e7:25:95:75:
37:3e:e8:f9:2e:80:8e:c9:9b:21:09:d1:fe:31:02:
19:f9:63:1e:b5:ec:05:97:74:20:a1:77:30:f8:b3:
9f:ac:26:0c:7a:01:db:16:8c:af:a4:79:22:66:63:
28:71:f0:f5:89:90:cb:45:86:2a:29:22:4c:d5:e0:
c2:b6:0d:75:42:0a:c2:c9:cf:c3:db:8e:d5:f3:c2:
50:c8:dd:36:87:a6:71:9b:a1:3f:7a:2e:a7:db:18:
78:7e:b6:c2:b5:39:96:ae:83:a4:db:c2:06:40:ff:
a7:ad:13:eb:d3:b5:5f:69:b4:04:b1:b0:8f:f5:e7:
30:06:8f:fb:2a:02:2b:a2:62:57:37:bd:3b:fb:b2:
81:12:9d:36:fc:f4:cc:38:6a:12:16:a4:1f:a6:33:
54:b4:5a:07:e5:a2:cd:cc:dc:d2:b8:08:53:bf:37:
a6:fe:2b:b6:3c:a4:45:86:30:1e:61:8e:9c:85:10:
d0:66:68:3c:45:4c:a6:2f:8d:6b:47:a4:55:df:be:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:28:54:44:13:7A:77:4D:B9:A5:DE:B2:8C:A1:D4:A5:88:94:9D:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kihURBN6d025pd6yjKHUpYiUnQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:5d:3d:3c:a9:7b:d1:82:ed:c4:82:7e:0f:35:6f:53:2a:6c:
03:e4:1f:08:b0:92:18:ba:31:61:5a:c7:b9:d2:aa:ea:7d:2b:
1c:1c:d0:52:5f:39:90:9e:c7:1d:f0:af:dd:63:40:6b:b1:32:
d0:bc:d4:e8:fc:2e:50:78:3e:f2:59:fe:fb:e7:f0:ab:fe:42:
58:d6:36:87:3c:8f:f3:a1:5d:d6:53:16:9f:30:63:d7:0a:a9:
e8:67:1c:83:28:59:16:71:81:29:0b:ec:50:3b:0e:ae:b6:74:
ad:79:be:05:83:f0:d7:75:17:f5:ce:24:9e:d0:f1:a2:3c:23:
43:f6:c8:46:75:be:dc:e4:c8:e0:6a:05:9c:c9:2e:c0:25:5d:
16:f5:ab:f8:0b:c4:74:7c:20:13:cb:f7:01:8e:2c:3d:c5:ca:
23:58:69:e8:81:c3:4b:29:09:57:a1:de:fb:57:60:0d:e5:e0:
9a:78:55:73:df:a9:6a:39:ef:a6:3a:12:cc:41:4b:bd:5f:1a:
69:ad:1d:6d:0b:95:f3:ef:e0:75:88:1a:85:3f:af:25:ab:e7:
a5:dc:eb:23:46:d8:9b:69:56:d5:c6:2c:c0:47:d6:2d:aa:fd:
f8:34:89:3d:ac:51:7b:81:16:77:50:ca:d6:83:97:d6:d5:58:
35:b6:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org