Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/tD2yU21xDvBPpKmsBCW_v4zT9BA.roa
File: tD2yU21xDvBPpKmsBCW_v4zT9BA.roa (raw, json)
Hash identifier: ueLF4bXZmso0wef029PPOrODCsR5IykCDR7fiw2WqLo=
Subject key identifier: B4:3D:B2:53:6D:71:0E:F0:4F:A4:A9:AC:04:25:BF:BF:8C:D3:F4:10
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 011A45B5
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/tD2yU21xDvBPpKmsBCW_v4zT9BA.roa
Signing time: Sat 01 Jan 2022 06:03:50 +0000
ROA not before: Sat 01 Jan 2022 06:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 45.8.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18498997 (0x11a45b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 06:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b43db2536d710ef04fa4a9ac0425bfbf8cd3f410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:d4:c9:14:15:b0:9d:85:2e:ba:5d:4e:36:
21:ec:f0:57:27:8c:cb:52:50:86:34:60:47:cb:3c:
04:12:bb:a7:33:9a:a7:47:ac:d8:f0:35:ed:0d:58:
fb:9b:a3:27:5f:1b:29:67:13:70:18:85:3e:49:23:
d6:15:cc:93:88:ba:7f:7b:ad:c5:2c:6b:ef:5b:98:
c1:ad:73:46:5b:e6:bf:7d:40:6e:7b:93:e3:29:10:
0a:e4:3c:50:6e:d7:ca:ac:5d:a4:44:ed:4f:fa:1e:
11:46:0c:03:3a:69:57:56:d7:c7:f8:09:78:9b:e0:
3b:6b:68:be:d3:9d:2c:c7:67:71:46:3d:db:a3:97:
2e:7b:b3:32:d1:21:82:62:5b:4d:0d:58:f7:2b:2c:
4d:13:7c:3b:4f:28:81:5c:bf:f7:71:3c:55:18:fd:
4e:ac:61:e9:2f:7f:6f:b5:66:c3:c9:ab:fc:39:b6:
1b:8e:d8:52:57:68:1f:0d:fa:6a:5c:0e:1a:04:7e:
e0:75:b4:e1:c1:04:81:65:97:c6:e2:0b:d0:48:7a:
fa:da:cf:48:a6:52:67:64:59:4c:25:25:20:30:cd:
70:5d:09:c3:46:f8:0a:6e:59:41:07:05:3e:61:f1:
07:52:79:97:49:82:fb:e7:0d:04:00:6d:1e:bd:3d:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:B2:53:6D:71:0E:F0:4F:A4:A9:AC:04:25:BF:BF:8C:D3:F4:10
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/tD2yU21xDvBPpKmsBCW_v4zT9BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.26.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4f:e3:c7:bc:16:4f:de:1b:f0:3a:23:f8:1d:18:5e:ff:6c:
a5:03:46:bd:3c:ac:ff:d7:b0:8a:24:b5:c4:77:75:b5:9e:d7:
5c:a7:de:fc:b3:27:ab:b8:ed:91:03:60:c1:f9:c0:58:9a:b7:
a5:6a:98:7c:4c:24:cf:56:32:4c:0f:6e:f7:3b:26:59:8d:a0:
1a:b9:c7:37:02:b4:53:27:bb:88:62:23:c6:c2:6a:2f:cd:2d:
a4:97:df:8d:80:0b:60:7d:59:1a:b7:8a:25:9c:b9:1b:59:f6:
86:42:d7:8c:cb:34:aa:1d:c5:b7:fd:1c:56:a7:78:aa:01:13:
95:f5:5a:da:55:b9:15:05:c9:af:40:30:49:6e:da:56:14:b0:
a2:a1:c3:3d:2a:99:71:fd:c2:03:dd:91:d8:e9:c5:b9:3f:e2:
89:bb:87:73:96:ad:1b:2e:7e:c9:b3:f2:a7:6e:b7:d7:48:00:
0f:d2:e9:67:51:e8:77:d6:1e:07:33:60:f1:86:72:e9:81:e7:
82:cd:59:0e:85:53:37:91:93:de:69:7b:98:d3:b2:30:37:d6:
53:b3:e2:ca:57:df:e7:f8:61:01:39:53:85:66:e4:9f:c9:69:
8c:1d:e4:4e:01:2b:37:97:32:12:cd:5c:df:8c:1e:26:08:56:
e8:35:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org