Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa
File: 1-9mzTK-emMpWMBEUu831LmbVtx8.roa (raw, json)
Hash identifier: T7ZE6PcNy4iUo1jBoaxtw9E+p5BrpxoE0WWxz35JF9I=
Subject key identifier: FB:D9:B3:4C:AF:9E:98:CA:56:30:11:14:BB:CD:F5:2E:66:D5:B7:1F
Certificate issuer: /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial: 01172FBD
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa
Signing time: Sat 01 Jan 2022 01:56:50 +0000
ROA not before: Sat 01 Jan 2022 01:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 45.90.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18296765 (0x1172fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
Validity
Not Before: Jan 1 01:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbd9b34caf9e98ca56301114bbcdf52e66d5b71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:45:4a:02:e0:c0:57:69:eb:58:94:34:91:
f3:bb:4e:30:87:9d:bc:de:38:5d:47:ea:3e:3d:96:
60:bb:59:93:62:38:9f:ed:5d:38:b6:2c:3e:8e:72:
92:12:96:67:ef:36:3d:49:be:cf:ce:09:29:78:d8:
72:ec:11:2a:04:52:78:d2:a1:c1:c8:ec:5c:13:4c:
0e:04:ae:4d:dc:3e:24:7a:58:80:17:e8:24:16:50:
cd:44:d2:9f:e7:70:85:25:4d:b0:dd:b4:4d:69:0e:
3e:56:c4:fd:84:2b:fa:3c:ff:89:79:ba:73:b0:e9:
dc:5d:46:e7:32:d5:51:fe:18:5d:3d:d7:6a:c4:13:
e1:d3:08:6d:83:72:e5:58:e7:5b:c6:d6:5d:0f:fb:
e9:ef:fc:70:d7:c9:ff:4a:6f:77:67:d8:eb:f2:04:
55:fb:bd:1b:24:d0:59:dd:eb:83:24:1b:3d:9d:80:
92:c3:e6:d4:9d:be:9b:31:d7:15:66:32:a9:26:ad:
d3:97:7a:a6:e4:29:1e:e7:59:af:02:d8:1e:11:dd:
59:01:3b:40:93:62:34:5a:6d:25:c4:aa:80:c2:8a:
b3:05:7c:3d:36:c5:53:f7:2c:26:5b:a5:01:b0:2d:
e7:64:35:1d:9a:0e:92:cd:99:80:27:1c:a5:37:6f:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:B3:4C:AF:9E:98:CA:56:30:11:14:BB:CD:F5:2E:66:D5:B7:1F
X509v3 Authority Key Identifier:
keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.184.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e6:0f:52:cd:cc:7d:cb:e0:c6:ed:e2:12:23:1f:65:4c:51:
ac:aa:55:37:92:4e:59:f2:96:bc:cd:59:1f:39:52:48:13:41:
23:0d:a5:cb:ed:4c:b2:b8:ae:df:93:52:74:48:c9:a9:6f:b7:
ef:56:de:89:a2:ca:72:71:65:21:57:b0:9d:ca:96:8c:55:d9:
42:19:68:5c:d3:8b:95:30:4f:2b:3d:a5:ee:b6:ce:9f:25:02:
e6:dd:5c:2c:5d:b9:56:67:50:77:5d:c2:73:aa:53:d3:3c:16:
72:ea:55:5b:4a:b8:fa:b2:06:0c:25:7c:76:2f:80:f2:90:e4:
cb:ac:dd:78:4c:b1:58:5b:ec:5d:cc:61:61:6b:46:a2:47:1d:
31:26:7e:ee:a5:a8:c5:93:08:ef:ad:66:74:b2:f0:ec:66:c2:
ca:84:fd:da:19:96:03:90:2d:0e:a7:9d:df:e8:4c:04:95:bc:
11:77:cb:0a:a3:7a:31:a0:09:31:bd:cd:0e:52:f7:1a:eb:cb:
26:18:7e:42:7c:5f:e6:48:d3:03:db:31:32:2e:7d:ef:53:84:
45:41:54:a4:06:e4:75:c2:a9:18:77:98:96:a7:4d:a1:d5:09:
4b:d0:92:b5:3e:db:1b:7c:2c:3c:a9:0a:65:6e:70:c1:53:4a:
e1:89:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:20 2023 by rpki-client on console-ams.rpki-client.org