Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TzxYimHkULWzhPg-rd7usuJB3ek.roa
File: TzxYimHkULWzhPg-rd7usuJB3ek.roa (raw, json)
Hash identifier: eKnABi/JYz/csDgr6SRNf9YVlD9DVV54+yuYyzCKLd8=
Subject key identifier: 4F:3C:58:8A:61:E4:50:B5:B3:84:F8:3E:AD:DE:EE:B2:E2:41:DD:E9
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 0182A052909BD4D1959AD05A75DC7205C954
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TzxYimHkULWzhPg-rd7usuJB3ek.roa
Signing time: Mon 15 Aug 2022 07:05:41 +0000
ROA not before: Mon 15 Aug 2022 07:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 45.80.50.0/24 maxlen: 24
45.80.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:52:90:9b:d4:d1:95:9a:d0:5a:75:dc:72:05:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Aug 15 07:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f3c588a61e450b5b384f83eaddeeeb2e241dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:f0:bb:dd:0b:a3:87:8e:a6:2f:10:e7:f0:
92:d9:2d:e2:c9:28:1f:dd:73:31:34:2b:43:43:2b:
1a:d8:a6:f7:bf:e1:32:f1:91:0a:46:d7:ee:cf:b6:
4c:80:2b:c2:96:a6:ba:c6:8a:90:3c:59:3e:58:b8:
99:d4:dd:52:28:df:65:d8:0b:1a:a9:37:b1:23:44:
f7:db:fa:e9:b1:be:e1:b4:52:b4:b6:3d:d3:70:01:
b2:74:b6:66:7c:12:70:6d:e1:b9:9f:3b:bd:a2:b3:
99:b3:c8:1b:a6:43:5e:48:50:18:52:6a:34:93:aa:
50:66:9e:16:fe:5a:5a:cb:0f:2b:24:17:72:f4:56:
ba:89:f1:41:e1:d6:58:6a:4a:df:6a:59:e5:69:22:
f7:de:99:e4:c7:c4:14:f8:7a:c9:42:06:9a:e8:7b:
0d:10:09:11:53:91:a2:e2:96:83:c4:41:c6:45:32:
78:04:e3:15:4f:59:4f:76:08:c2:c2:07:47:d8:57:
72:62:e6:a9:bd:e6:9e:a0:47:fe:e8:77:f9:29:12:
74:80:ee:f3:51:a2:08:13:0c:b6:d7:d1:07:5f:f3:
d8:3e:ef:79:06:4f:02:a3:39:f5:4a:d6:8d:1f:be:
a8:49:db:76:ba:6c:38:e0:ac:3e:4d:74:36:4c:2f:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:58:8A:61:E4:50:B5:B3:84:F8:3E:AD:DE:EE:B2:E2:41:DD:E9
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TzxYimHkULWzhPg-rd7usuJB3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
66:1b:ae:9d:a8:b9:d2:10:00:5c:99:aa:e7:fa:c6:37:7b:ce:
84:63:1e:9f:01:e4:aa:2e:0a:2e:b2:ba:52:7f:38:b0:87:1e:
06:f4:1a:32:70:59:94:17:a7:4f:34:f8:2a:85:76:5b:4c:d7:
b8:5b:7a:ed:42:07:7e:da:40:31:24:d0:21:4b:00:aa:8c:7b:
e9:07:55:e7:15:95:75:6d:96:3d:60:a9:2e:b6:e5:fb:96:f8:
3a:d5:3e:3a:97:1e:2c:6d:bb:52:8d:d4:fe:21:a5:78:08:c5:
e5:d6:4e:2c:d2:0c:bf:e4:ca:18:e6:c7:d5:38:48:2f:7d:c5:
34:e6:05:e2:72:9d:6a:a3:73:14:58:a7:87:be:ca:3e:d6:67:
e7:c3:85:67:da:41:0a:c6:ca:ef:b4:8e:7d:3a:30:ef:af:0f:
55:37:51:c1:85:72:79:4a:49:db:10:ef:fa:ea:f0:b9:7b:46:
e8:65:fc:3e:f1:bd:d3:d1:e0:26:c0:d9:da:7a:44:89:2f:ae:
3c:b6:1c:67:3b:c1:f2:e5:63:b6:c2:be:de:d3:94:f7:4d:24:
24:47:9a:14:af:ed:56:67:49:55:26:6b:4f:3d:1d:00:fe:22:
70:58:09:0f:52:20:3e:2c:0e:77:13:1e:bd:ad:de:29:a2:37:
aa:26:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:24 2023 by rpki-client on console-fra.rpki-client.org