Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/jT89SXF5EcTzRVzJOfXVARxVXfQ.roa
File: jT89SXF5EcTzRVzJOfXVARxVXfQ.roa (raw, json)
Hash identifier: 8hq0z/3vhnmpyq/XIOzUPFvb65B8j9t1kA3ylD9NLTg=
Subject key identifier: 8D:3F:3D:49:71:79:11:C4:F3:45:5C:C9:39:F5:D5:01:1C:55:5D:F4
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 018506E07DA9E5D78F4DA3A8628A22CB1DF8
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/jT89SXF5EcTzRVzJOfXVARxVXfQ.roa
Signing time: Mon 12 Dec 2022 15:07:33 +0000
ROA not before: Mon 12 Dec 2022 15:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 45.10.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:e0:7d:a9:e5:d7:8f:4d:a3:a8:62:8a:22:cb:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Dec 12 15:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d3f3d49717911c4f3455cc939f5d5011c555df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:0e:24:2c:28:35:ec:dc:92:a6:75:1a:7c:
b5:2e:8f:d0:36:4b:3b:34:70:c0:d0:3e:d1:34:cd:
5b:21:49:19:73:f5:ed:ad:53:cf:92:76:4f:b6:ca:
22:7e:91:37:42:e1:35:92:6b:db:9e:09:c5:53:31:
8d:d0:aa:94:92:01:d0:63:c6:f4:20:81:34:b7:90:
76:b4:21:92:2c:68:40:18:e5:16:72:15:62:bc:86:
8f:8f:ef:ce:41:b0:ef:dd:e7:13:22:be:c4:ab:c1:
86:ea:15:21:16:63:1e:98:ad:71:6c:58:5f:8a:7b:
60:6a:24:54:fb:93:72:39:53:00:24:20:4f:9f:ba:
ba:42:35:09:66:e7:0f:d9:9c:22:6d:6f:bd:1f:99:
a3:f5:27:39:22:15:bd:cb:34:70:24:9c:fa:26:0f:
91:d4:c4:df:f0:68:3b:b3:dc:59:16:27:21:d6:6f:
1d:98:d7:50:ef:bf:10:3e:0f:79:4e:a8:55:c5:84:
3a:48:13:5e:d9:24:d7:78:27:c5:c6:67:0d:1a:e2:
44:ee:98:59:f1:26:98:cf:20:87:78:5a:73:71:ce:
47:11:11:6b:7e:e5:5e:8a:ab:e3:25:70:9a:71:aa:
95:a4:0c:08:c6:77:32:fb:86:18:21:74:3b:ba:33:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3F:3D:49:71:79:11:C4:F3:45:5C:C9:39:F5:D5:01:1C:55:5D:F4
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/jT89SXF5EcTzRVzJOfXVARxVXfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
Signature Algorithm: sha256WithRSAEncryption
92:64:46:c6:4e:57:ce:93:cb:88:5e:25:68:de:75:91:c9:5b:
ae:25:5b:78:af:27:4c:48:dd:2a:f9:e0:96:a3:56:63:88:98:
4f:12:f9:b4:6a:62:cd:3a:e4:b8:c3:24:83:97:7e:a6:96:62:
87:1a:e5:a9:d1:e4:51:23:a3:3c:d8:77:ff:fd:43:82:59:db:
69:6e:4e:69:57:ed:cf:9c:8f:4e:a6:23:c5:cb:c7:7b:06:06:
33:fa:63:24:2f:e8:77:a8:88:50:4e:0a:56:65:f7:1a:ef:1b:
16:55:12:27:d4:f0:2d:aa:14:49:5a:c8:db:1c:da:bd:47:ec:
08:15:d7:2d:ea:60:27:b4:13:a2:1a:13:d0:43:94:c9:de:94:
ca:a3:01:13:96:7d:98:97:5b:e6:b0:8f:7f:de:8a:8b:a4:12:
cc:a6:08:cb:23:90:f3:36:78:31:6c:32:51:64:31:80:1b:6d:
73:13:18:66:3f:07:2e:7d:75:9e:0e:21:4f:54:e4:e2:c7:ba:
f3:09:f9:dc:f7:8f:32:5f:80:e6:e7:04:ba:79:fd:81:ee:24:
c4:a2:c4:cc:2b:cf:38:5e:f6:f4:1a:d8:6b:18:8a:3a:17:02:
54:99:a9:f7:a5:c3:eb:d1:c2:c0:ae:70:d7:a8:c0:9d:11:cc:
1a:a2:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org