Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/F_o34oNXdYWSj-p_mv73-G4eRjI.roa
File: F_o34oNXdYWSj-p_mv73-G4eRjI.roa (raw, json)
Hash identifier: ID1tizhd0txqTNr5+2PPigCJHvxYcXQPEp//fkreSJU=
Subject key identifier: 17:FA:37:E2:83:57:75:85:92:8F:EA:7F:9A:FE:F7:F8:6E:1E:46:32
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018262297FDA585D56289DCCD03D05B2991D
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/F_o34oNXdYWSj-p_mv73-G4eRjI.roa
Signing time: Wed 03 Aug 2022 05:24:23 +0000
ROA not before: Wed 03 Aug 2022 05:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204174
IP address blocks: 45.113.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:29:7f:da:58:5d:56:28:9d:cc:d0:3d:05:b2:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Aug 3 05:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17fa37e283577585928fea7f9afef7f86e1e4632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:01:9e:f6:9c:a1:61:94:25:55:60:1d:28:
7c:7e:1c:63:8b:5c:5a:a7:52:a1:ec:95:09:a2:49:
b9:87:c2:1b:94:b0:88:93:12:2e:35:df:3c:5c:ba:
18:7e:c0:73:e5:9f:ce:32:e2:4c:bd:8c:ff:8a:54:
24:aa:0f:81:9a:92:66:dc:23:83:32:be:16:03:4b:
9e:f0:e3:b9:36:05:13:af:2f:de:ab:db:70:17:fc:
8f:3c:27:75:d4:48:aa:54:df:df:c3:10:a6:2c:db:
9b:73:a8:d7:77:b9:9a:b2:ed:81:08:2a:92:4f:05:
cb:d7:72:d2:8b:32:5f:02:b6:76:0d:76:17:a9:c8:
62:8e:1b:bc:4e:30:20:9b:fc:75:50:2f:d2:6e:ae:
b0:6d:2b:6a:3f:8c:0c:5d:78:40:eb:5e:48:18:63:
24:85:97:f7:75:0e:a1:af:7e:d8:85:29:ea:0d:3d:
8f:9d:30:97:1d:d6:90:0b:53:84:14:7b:df:26:c3:
39:d6:05:f6:a2:d5:61:69:00:b8:a7:95:5f:60:ff:
22:d9:2d:df:50:55:a2:65:e8:44:8b:83:a6:e1:76:
0b:03:7c:fe:db:bd:51:4a:17:88:d1:92:e6:1f:73:
d8:20:43:1f:09:17:f1:7e:00:53:dc:77:8e:d5:63:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:37:E2:83:57:75:85:92:8F:EA:7F:9A:FE:F7:F8:6E:1E:46:32
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/F_o34oNXdYWSj-p_mv73-G4eRjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.236.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f9:8e:84:06:6f:91:40:5c:b0:cc:5d:2a:5e:f7:55:d3:ed:
54:24:ae:19:a1:4d:85:b7:4d:59:c9:20:f9:c2:82:c2:1d:13:
9c:c9:62:b3:9a:04:3c:c0:c2:eb:c5:30:8b:a5:b8:21:6a:b0:
57:f1:05:0e:f4:35:03:37:b7:a2:a8:0e:1c:d6:cd:d6:f0:73:
09:56:ca:69:f2:b2:a4:18:c1:66:0a:f4:e3:b1:ea:64:60:04:
1d:cf:c9:de:b6:97:f5:95:38:7b:b1:9b:78:f3:ea:23:eb:d0:
13:e3:09:80:72:35:d0:5a:6e:ad:00:61:ae:4e:3e:87:3d:73:
22:e0:3f:02:fc:fc:5b:6a:c3:38:7e:be:2e:74:d4:33:b2:b8:
ae:f7:83:21:8b:67:93:78:5f:e8:4a:e4:a2:29:2b:a7:35:59:
48:b6:2d:24:90:3c:d9:84:ed:c9:ee:27:81:b4:93:44:94:32:
9a:8f:98:60:bd:38:98:2c:78:b4:92:3a:2a:00:f0:00:72:7b:
e2:ea:7b:8c:dd:81:3b:54:3d:e1:e3:b3:a3:80:99:54:7a:f0:
c7:a4:de:ca:b7:86:41:a3:6d:3a:42:63:9a:d8:3e:b9:5d:d2:
35:4e:a1:de:8d:ce:69:9a:d9:5f:ba:01:ee:14:af:b2:89:b8:
8e:2e:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org