Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yfSY2HRhFxUm3_VGf7Y7dzFfEPc.roa
File: yfSY2HRhFxUm3_VGf7Y7dzFfEPc.roa (raw, json)
Hash identifier: OlrFvQBEqCWv9WHS4ZaEKrV6LUYQFkzyrrNMU/34bEc=
Subject key identifier: C9:F4:98:D8:74:61:17:15:26:DF:F5:46:7F:B6:3B:77:31:5F:10:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018553E6560EFE2998D5AC4E1C881EDBBFE3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yfSY2HRhFxUm3_VGf7Y7dzFfEPc.roa
Signing time: Tue 27 Dec 2022 14:04:42 +0000
ROA not before: Tue 27 Dec 2022 14:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:e6:56:0e:fe:29:98:d5:ac:4e:1c:88:1e:db:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 27 14:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f498d87461171526dff5467fb63b77315f10f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:13:61:46:b3:9e:92:68:5e:be:49:22:9c:
5a:a6:d1:26:14:b1:fe:db:b4:7e:ea:46:b5:8f:85:
d7:0d:e3:9b:3f:d4:3c:09:ef:7b:13:87:b0:5a:3d:
29:0d:e6:96:f1:25:d1:48:b7:a6:f8:ac:9c:09:42:
0a:22:9a:62:0a:80:e6:f8:3d:ab:a0:a3:f2:bf:41:
bf:88:e9:e0:1b:89:aa:6e:19:5b:41:05:48:21:d4:
73:69:47:39:c4:9d:cf:6e:d1:47:97:19:86:04:32:
5c:45:87:70:88:b9:18:a3:20:ca:64:05:2c:61:73:
67:01:ca:ff:b0:86:75:74:f0:11:16:3f:ef:2a:67:
f0:cf:04:b4:ab:55:34:3e:ac:b3:ca:09:53:11:de:
52:49:e0:09:8a:93:24:29:d9:97:21:31:aa:67:37:
19:ba:c4:f8:b0:c3:af:12:ca:c9:09:db:34:54:74:
93:cd:95:f5:fc:24:e3:5c:72:fc:9f:d4:6a:8f:e5:
19:9d:f9:b1:72:97:33:73:40:1a:76:79:12:dc:57:
eb:d0:a7:0d:d9:f1:a7:5e:87:5c:a7:9e:46:ab:77:
4d:10:7d:4e:a0:fc:a1:83:e1:47:da:c7:c9:e5:a3:
51:e2:1f:69:84:3d:97:58:c8:93:6b:92:cd:da:f4:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F4:98:D8:74:61:17:15:26:DF:F5:46:7F:B6:3B:77:31:5F:10:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yfSY2HRhFxUm3_VGf7Y7dzFfEPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
40:82:ea:d4:32:da:77:2d:e6:64:22:94:fa:79:d9:d6:4e:63:
85:3c:6a:a1:0f:00:29:09:f7:40:92:07:9e:eb:ba:b9:33:08:
b0:18:f6:d9:0a:7b:34:73:7c:53:be:7e:11:5c:a5:44:4a:59:
a6:1f:50:07:6a:ca:d9:f3:0c:87:ee:97:da:a1:24:a3:1c:90:
11:23:fa:51:0f:d0:3c:62:8b:11:91:46:60:9d:3f:3d:28:6f:
64:44:e1:ae:41:6f:75:03:1a:fa:ed:54:24:8a:2d:10:fb:05:
ca:25:5c:a7:4b:0f:c6:4e:fa:8f:2d:a0:b7:9a:b7:03:e8:e0:
62:cb:e7:9f:98:36:98:14:85:ff:dc:ba:1a:29:3b:53:cf:d4:
70:09:e0:b3:8b:5e:bc:a0:f6:b5:23:ca:d4:df:b8:f2:4a:67:
be:2e:bc:e8:84:9b:74:11:ce:fc:1a:d8:cb:fc:05:ca:86:ad:
42:b7:4e:27:e3:14:3d:b6:65:b1:fa:8f:14:66:00:05:5c:f9:
f5:4b:09:9f:c8:a9:bc:c1:87:b2:e0:df:6d:2a:32:d9:ea:1e:
27:59:e9:9e:c5:11:57:0e:9a:a9:de:8e:a8:42:23:dd:6b:df:
60:7e:1e:de:ae:15:f4:9e:fa:11:3e:c7:7a:02:fc:60:d5:d5:
a0:a9:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:05 2023 by rpki-client on console-ams.rpki-client.org