Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/jPU06M-5LsrsH8jdG8NXus_IkdA.roa
File: jPU06M-5LsrsH8jdG8NXus_IkdA.roa (raw, json)
Hash identifier: opCQvdrSkCRtsBizykgUBC3lPn9yEdrIrIS9xlrwz8U=
Subject key identifier: 8C:F5:34:E8:CF:B9:2E:CA:EC:1F:C8:DD:1B:C3:57:BA:CF:C8:91:D0
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 06006EDA
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/jPU06M-5LsrsH8jdG8NXus_IkdA.roa
Signing time: Wed 06 Apr 2022 10:28:02 +0000
ROA not before: Wed 06 Apr 2022 10:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25082
IP address blocks: 45.91.216.0/22 maxlen: 23
195.64.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100691674 (0x6006eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Apr 6 10:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf534e8cfb92ecaec1fc8dd1bc357bacfc891d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:0b:6e:43:21:54:04:aa:a0:73:e3:2d:86:
42:a7:63:e1:b1:eb:39:4d:99:3b:12:8d:fe:62:08:
eb:be:50:ac:b1:21:31:6a:b3:ab:a5:60:c6:22:c7:
f7:4d:aa:11:08:02:b3:a5:68:1b:f5:e7:4f:33:a4:
ee:2d:f3:37:44:14:ae:16:f5:b1:c7:41:91:0c:fc:
34:22:3e:d2:01:13:cc:68:1f:99:d6:8f:8b:89:b7:
db:f5:3b:f4:c3:fe:0a:74:2f:6f:15:d4:86:99:29:
b6:f7:bf:04:b4:4f:44:e7:f6:ed:e7:9a:23:d8:86:
83:c4:19:86:de:c4:f8:04:e6:4e:00:08:94:52:aa:
11:83:69:db:fc:cc:55:5a:f8:5f:26:be:fe:69:77:
7c:46:2e:14:87:43:6c:ea:5b:f6:a0:c4:c4:00:e1:
fc:0c:4d:50:c0:74:0b:ae:b6:04:b2:e0:5d:b7:3b:
58:de:c5:d8:3d:be:6b:81:0e:5f:aa:19:12:df:cd:
26:ba:94:ec:c7:be:b5:a0:ab:e9:9a:49:29:74:b4:
33:eb:ec:f9:ac:62:f4:73:30:dd:6c:17:db:cb:13:
d2:26:fa:18:6c:f5:69:df:db:ae:78:9e:f2:90:32:
73:ea:02:0e:5a:64:44:c8:72:36:60:66:4a:e1:8a:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:34:E8:CF:B9:2E:CA:EC:1F:C8:DD:1B:C3:57:BA:CF:C8:91:D0
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/jPU06M-5LsrsH8jdG8NXus_IkdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.216.0/22
195.64.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:77:42:ed:30:e2:29:02:b6:d2:10:44:7a:84:78:d7:de:6b:
48:81:8e:6d:e4:68:18:20:04:07:5b:9f:e4:51:f7:ee:4b:f2:
23:57:ac:db:fa:5a:3b:9b:13:f2:32:6a:50:e4:a7:40:40:04:
dc:a3:42:09:20:4f:97:00:8b:69:dc:33:82:8e:5b:85:0c:7a:
ff:74:06:34:86:0d:fa:c7:2f:5b:15:04:97:f9:cb:0d:98:a6:
9b:f1:37:1f:bd:ce:0f:4a:35:a6:c2:a0:f2:74:12:b1:c6:e9:
6b:b6:5e:16:1e:58:b0:b0:d5:93:73:4e:bb:02:3f:df:eb:c0:
88:8c:c5:ef:11:c4:90:9d:21:45:0c:ae:b0:f1:b6:06:9f:1c:
30:cf:aa:e1:0a:71:24:1c:ee:44:df:51:69:e8:1e:d3:f2:b4:
5c:b9:ed:1b:5d:9b:ca:f6:da:25:28:dd:da:f2:7e:e2:5f:68:
11:63:e7:76:08:2d:76:43:fc:cb:07:02:18:cf:78:33:81:72:
40:b1:e3:81:93:a0:2a:10:16:d0:d9:7e:fe:5f:80:65:3f:fa:
1f:08:50:70:b8:8a:53:6b:65:30:1e:96:52:d5:d3:53:e4:28:
dc:bb:d3:0a:91:74:16:73:7b:cb:8c:88:13:56:f5:46:e4:ec:
6e:bd:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-ams.rpki-client.org